7.441247][ T2484] usb 5-1: device descriptor read/64, error 18 [ 617.471155][T18872] usb 4-1: device descriptor read/64, error 18 [ 617.591761][T18872] usb usb4-port1: attempt power cycle [ 617.711138][ T2484] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 617.981196][ T2484] usb 5-1: device descriptor read/64, error 18 [ 618.321207][T18872] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 618.371191][ T2484] usb 5-1: device descriptor read/64, error 18 [ 618.491839][ T2484] usb usb5-port1: attempt power cycle [ 618.521169][T18872] usb 4-1: device descriptor read/8, error -61 09:48:30 executing program 1 (fault-call:10 fault-nth:1): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:30 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000200000000a1f000008140001000000000000000000000000000000004671986d64face0f9a0008000e0001617704000000000009000000"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf2502000000080002000300000014000600fc01000000000000000000000000000108000c0002000000080008006401010009000100265c29260000000006000b00000000000800040001000000150001002f2a262e5d2d922635cf2e2d2f3a292a3a235c5e00000000080002000700000006000b00"], 0x84}}, 0x200048c4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x20}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$TCSETX(r7, 0x5433, &(0x7f00000000c0)={0x89, 0x3, [0x401, 0x101, 0x7, 0x8, 0x2], 0x8}) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 09:48:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'bridge0\x00', {0x2a, 0xffffffff, 0x3ffd}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 618.633234][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 618.715157][T22864] FAULT_INJECTION: forcing a failure. [ 618.715157][T22864] name failslab, interval 1, probability 0, space 0, times 0 [ 618.749209][T18872] usb 4-1: device descriptor read/8, error -71 [ 618.773870][T22864] CPU: 1 PID: 22864 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 618.782536][T22864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.792582][T22864] Call Trace: [ 618.795878][T22864] dump_stack+0x18f/0x20d [ 618.800202][T22864] should_fail.cold+0x5/0x14 [ 618.804777][T22864] should_failslab+0x5/0xf [ 618.809176][T22864] kmem_cache_alloc_node+0x257/0x3c0 [ 618.814443][T22864] __alloc_skb+0x71/0x550 [ 618.818755][T22864] __ip_append_data+0x2882/0x31c0 [ 618.823841][T22864] ? raw_destroy+0x30/0x30 [ 618.828365][T22864] ? ip_finish_output+0x1f0/0x1f0 [ 618.833385][T22864] ? mark_lock+0xbc/0x1710 [ 618.837802][T22864] ? ipv4_mtu+0x331/0x3c0 [ 618.842120][T22864] ? raw_destroy+0x30/0x30 [ 618.846512][T22864] ip_append_data+0x114/0x1a0 [ 618.851180][T22864] raw_sendmsg+0xacc/0x2d40 [ 618.855667][T22864] ? up_write+0x191/0x560 [ 618.859975][T22864] ? raw_getsockopt+0x100/0x100 [ 618.864805][T22864] ? aa_profile_af_perm+0x2e0/0x2e0 [ 618.869995][T22864] ? mark_lock+0xbc/0x1710 09:48:30 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="520900009d6a66e1c032d8c858a5090102b000000000000000c300000904000000092d840281287a8a00c3ff066a05cb040000000000000000"], 0x0) 09:48:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x300, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:30 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r3, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r0, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x494, 0x12, 0x400, 0x70bd2b, 0x25dfdbfc, {0xb, 0x9, 0x44, 0x20, {0x4e21, 0x4e24, [0x800000, 0x3, 0x8, 0x3ff], [0x101, 0x8, 0x9, 0x4], r3, [0xfffffffd, 0xfc0000]}, 0x1be, 0x240}, [@INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "c34888cbefea34f6f2a1e19b4a02e2fb0946164c462989e27e0b31c23ae928bb91f0c376f823f6a19a594b604fb5040a7635b99a4fa9efaea76987f6bb028483f3c784466aaed77d3f7113e26f9c0301276b0c919ac897b2cde3b823ca49ecf789631711d510916a584f17"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "301180979d5602c4851b86fa46c272b628b1d7be0fa144a1ffd40251bae11928933e94437bbe0dd313567cb3bad64ecae3401decf7395af52f6d918982e7e017386952c7994f964d2d5368aa46e3de72793badc4d1fc7b8e418a8acaa0217dcbe921a60a2b206f9619ebff876958f4a8b4aade1b7c145a5030cb43ff3407d41258b907f8196d76bf0bb68357aeba2dbbbad9fa94f08e3995971436f331c02cf328b1fc18834d115290764ed8882f2ee5bcdf4e35536a107e25d4a230bd603cda984650855fc6c09de6e63f57931ca42e0c3b523b1c7a1e09fdf1"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "8e437c0b8539a09cbc80216e76754b5839370498f1ce4d2b9abd93c47a54ea44db23b9e2e7f0c97b3b3c2261c3c88be6dd6116f8fea5402aab78c5ff29c33ab2f9baaac4bd90afc8673cf04ba603dea25f7e79feef845283660c7cb805d708d5379deaef25b7caac1856e8a119c6bd493dc6e243e35cfb694e88074090e219dce545e085"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "6c2cb9668cda7afcca5420ef6163b8aba775c23a737d1fd3ad2b23eebe7350a99c5b1040627929b2d8aed29c636c074ff2b254e56606c2bd651a51c45add4fcb7d51a9db0bbc8bebed8f80b4ab672f3191578b6ebdc38f6c6deac51b2cb0431d64dfae8881f4dce638dc4285bd865aaa5fae8aaff1a7042439c07b242ecc08cff04d03946fa60c5a3366407c2b417e58ca2450727e926f857d2d21d44c585c5df87cec35e5da08521cddd8888b23c79c8cd765ce3ec0a078b1bfe7ac4caab2a134c883adb702364024589c3ad021db4aac8c4ea72b49aff0194196a252363c8ad6c5a5fc606bec4972fb80900f1ac40e87e971bda1ed5bbd5e"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "d5834d030299418ebc03f026ecba1f4f724b260dd28f1f180e4045122ec374b9345f614b110557bd3dc0a4647ee4eee0e1331f42f1589be37c7a71fe69e990bf6ffa38953257df426f823616cd529c68d9951d7327a7f5dd32f619aff04bc5532fb8fbaf7f17716d6e88eafe1f6b5c7c871d99e6829bdaaee3de5149b945c93cdd020e68b7"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "4fb5bac5e03ec3220e308898580972b6b451cfbbb8cc3053537f583b72bdbbd1973252722dfe8eb5dd29"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "a39826710906f31ff40afc4bfcf3b3ce3a05b6499bfc315d75e2314546b34caa923cd78da2fdb823029a006481b3880b10e3cdedf3cf4e501a8f413c8fa62b59ec4a0b4b57e6704ab2fca47e4f71b65c24db11ccfa4bd4ac113eb593fb3881c181d5b4225b3fbef129eb75ee9e920d30ca64b12a8136ec643954e63d"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "2afd44c8824ce5003a9562c5bf5ecefad33819c6b08a1baf0f3d2423f42a4f3548c296d4054e84ff0121f2a8861608"}]}, 0x494}, 0x1, 0x0, 0x0, 0x48881}, 0x40831) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r4, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 618.874407][T22864] ? ima_get_action+0x76/0xa0 [ 618.879116][T22864] ? __lock_acquire+0x16e3/0x56e0 [ 618.884153][T22864] ? aa_sk_perm+0x316/0xaa0 [ 618.888668][T22864] ? aa_af_perm+0x230/0x230 [ 618.893201][T22864] inet_sendmsg+0x99/0xe0 [ 618.897530][T22864] ? inet_send_prepare+0x4d0/0x4d0 [ 618.902644][T22864] sock_sendmsg+0xcf/0x120 [ 618.907067][T22864] sock_no_sendpage+0xee/0x130 [ 618.911810][T22864] ? sk_page_frag_refill+0x1d0/0x1d0 [ 618.917077][T22864] ? aa_file_perm+0x119/0x1100 [ 618.921914][T22864] ? find_held_lock+0x2d/0x110 [ 618.926664][T22864] ? aa_file_perm+0x5b8/0x1100 [ 618.931416][T22864] inet_sendpage+0x109/0x140 [ 618.935999][T22864] ? inet_sendmsg+0xe0/0xe0 [ 618.940517][T22864] sock_sendpage+0xe5/0x140 [ 618.945028][T22864] ? __sock_recv_ts_and_drops+0x430/0x430 [ 618.950745][T22864] pipe_to_sendpage+0x2ad/0x380 [ 618.955608][T22864] ? propagate_umount+0x1c20/0x1c20 [ 618.960808][T22864] ? mutex_lock_io_nested+0xf60/0xf60 [ 618.966178][T22864] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 618.972249][T22864] __splice_from_pipe+0x3dc/0x830 [ 618.977280][T22864] ? propagate_umount+0x1c20/0x1c20 [ 618.982486][T22864] generic_splice_sendpage+0xd4/0x140 [ 618.987865][T22864] ? __splice_from_pipe+0x830/0x830 [ 618.993067][T22864] ? apparmor_file_permission+0x26e/0x4e0 [ 618.998801][T22864] ? __splice_from_pipe+0x830/0x830 [ 619.003997][T22864] do_splice+0xbcd/0x1820 [ 619.008334][T22864] ? lock_downgrade+0x820/0x820 [ 619.013187][T22864] ? splice_from_pipe+0x140/0x140 [ 619.018305][T22864] ? __fget_files+0x294/0x400 [ 619.022992][T22864] __x64_sys_splice+0x198/0x250 [ 619.027853][T22864] do_syscall_64+0x60/0xe0 [ 619.032268][T22864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 619.038174][T22864] RIP: 0033:0x45cb29 [ 619.042057][T22864] Code: Bad RIP value. [ 619.046117][T22864] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 619.054538][T22864] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 [ 619.062511][T22864] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 619.070476][T22864] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 619.078443][T22864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 619.083791][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 619.086406][T22864] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 09:48:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 619.129420][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x3f00}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 619.187225][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 619.204250][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00?\x00', "7ee51430da3f51b3"}, 0x28) 09:48:30 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6580395c, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7f, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, r0, 0xffffffffffffffff, r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0xa8000, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000180)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:31 executing program 1 (fault-call:10 fault-nth:2): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "00000001", "7ee51430da3f51b3"}, 0x28) [ 619.481245][ T2484] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 619.501611][T18872] usb 4-1: new high-speed USB device number 73 using dummy_hcd 09:48:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x40, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000240), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 619.631708][T18872] usb 4-1: Using ep0 maxpacket: 8 [ 619.651350][ T2484] usb 5-1: device descriptor read/8, error -61 09:48:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00\x00\x00?', "7ee51430da3f51b3"}, 0x28) [ 619.782375][T22905] FAULT_INJECTION: forcing a failure. [ 619.782375][T22905] name failslab, interval 1, probability 0, space 0, times 0 [ 619.796092][T22905] CPU: 0 PID: 22905 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 619.804764][T22905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.814905][T22905] Call Trace: [ 619.818201][T22905] dump_stack+0x18f/0x20d [ 619.822540][T22905] should_fail.cold+0x5/0x14 [ 619.827138][T22905] should_failslab+0x5/0xf [ 619.831555][T22905] kmem_cache_alloc_node_trace+0x27d/0x400 [ 619.837368][T22905] __kmalloc_node_track_caller+0x38/0x60 [ 619.843004][T22905] __alloc_skb+0xae/0x550 [ 619.847340][T22905] __ip_append_data+0x2882/0x31c0 [ 619.852374][T22905] ? lockdep_hardirqs_on+0x6a/0xe0 [ 619.857482][T22905] ? raw_destroy+0x30/0x30 [ 619.861910][T22905] ? ip_finish_output+0x1f0/0x1f0 [ 619.866925][T22905] ? ipv4_mtu+0xdd/0x3c0 [ 619.871162][T22905] ? ipv4_mtu+0x331/0x3c0 [ 619.875504][T22905] ? raw_destroy+0x30/0x30 [ 619.879923][T22905] ip_append_data+0x114/0x1a0 [ 619.884617][T22905] raw_sendmsg+0xacc/0x2d40 [ 619.889138][T22905] ? raw_getsockopt+0x100/0x100 [ 619.894004][T22905] ? aa_profile_af_perm+0x2e0/0x2e0 [ 619.899225][T22905] ? mark_lock+0xbc/0x1710 [ 619.903725][T22905] ? kvm_sched_clock_read+0x14/0x40 [ 619.908964][T22905] ? sched_clock+0x2a/0x40 [ 619.913418][T22905] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 619.919558][T22905] ? trace_hardirqs_on+0x5f/0x220 [ 619.921235][ T2484] usb 5-1: device descriptor read/8, error -61 [ 619.924571][T22905] ? lockdep_hardirqs_on+0x6a/0xe0 [ 619.924587][T22905] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 619.924616][T22905] inet_sendmsg+0x99/0xe0 [ 619.946279][T22905] ? inet_send_prepare+0x4d0/0x4d0 [ 619.951403][T22905] sock_sendmsg+0xcf/0x120 [ 619.955817][T22905] sock_no_sendpage+0xee/0x130 [ 619.960580][T22905] ? sk_page_frag_refill+0x1d0/0x1d0 [ 619.965843][T22905] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 619.971809][T22905] ? trace_hardirqs_on+0x5f/0x220 [ 619.976827][T22905] ? inet_sendpage+0x69/0x140 [ 619.981479][T22905] inet_sendpage+0x109/0x140 [ 619.986052][T22905] ? inet_sendmsg+0xe0/0xe0 [ 619.990689][T22905] sock_sendpage+0xe5/0x140 [ 619.995187][T22905] ? __sock_recv_ts_and_drops+0x430/0x430 [ 620.000892][T22905] pipe_to_sendpage+0x2ad/0x380 [ 620.005732][T22905] ? propagate_umount+0x1c20/0x1c20 [ 620.010913][T22905] ? __splice_from_pipe+0x120/0x830 [ 620.016111][T22905] ? __splice_from_pipe+0x1c2/0x830 [ 620.021401][T22905] __splice_from_pipe+0x3dc/0x830 [ 620.026412][T22905] ? propagate_umount+0x1c20/0x1c20 [ 620.031601][T22905] generic_splice_sendpage+0xd4/0x140 [ 620.036960][T22905] ? __splice_from_pipe+0x830/0x830 [ 620.042150][T22905] ? __splice_from_pipe+0x830/0x830 [ 620.047336][T22905] do_splice+0xbcd/0x1820 [ 620.051676][T22905] ? lock_downgrade+0x820/0x820 [ 620.056546][T22905] ? splice_from_pipe+0x140/0x140 [ 620.061562][T22905] ? __fget_files+0x294/0x400 [ 620.066221][T22905] __x64_sys_splice+0x198/0x250 [ 620.071070][T22905] do_syscall_64+0x60/0xe0 [ 620.075497][T22905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 620.081376][T22905] RIP: 0033:0x45cb29 [ 620.085241][T22905] Code: Bad RIP value. [ 620.089280][T22905] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 620.097665][T22905] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 [ 620.105623][T22905] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 620.113586][T22905] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 620.121546][T22905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 620.129493][T22905] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 [ 620.204666][ T2484] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 620.291188][T18872] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 620.300752][T18872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.308911][T18872] usb 4-1: Product: syz [ 620.313377][T18872] usb 4-1: Manufacturer: syz [ 620.318035][T18872] usb 4-1: SerialNumber: syz [ 620.324419][T18872] usb 4-1: config 0 descriptor?? [ 620.371856][T18872] hub 4-1:0.0: bad descriptor, ignoring hub [ 620.377833][T18872] hub: probe of 4-1:0.0 failed with error -5 [ 620.390353][T18872] sierra 4-1:0.0: Sierra USB modem converter detected [ 620.396605][ T2484] usb 5-1: device descriptor read/8, error -61 [ 620.592893][T18872] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 620.641990][T18872] usb 4-1: USB disconnect, device number 73 [ 620.658217][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 620.671062][ T2484] usb 5-1: device descriptor read/8, error -61 [ 620.687100][T18872] sierra 4-1:0.0: device disconnected [ 620.791134][ T2484] usb usb5-port1: unable to enumerate USB device [ 621.360974][T18872] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 621.640974][T18872] usb 4-1: Using ep0 maxpacket: 8 09:48:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000140)={{0x2, 0x0, @reserved="45e8286f8eeed70c747975ebfe37e1aeb7b80c300a9899ff5eef60f62145f1ae"}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0) 09:48:33 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x800, 0x50240) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x18, 0x4, 0x4, 0x2a008b60, 0x648, r2, 0x24fc, [], r4, r5, 0x3}, 0x40) r6 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@netrom, @remote, @null, @default, @default, @netrom, @null, @default]}, &(0x7f00000001c0)=0x48) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000200)=0x400, &(0x7f0000000240)=0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:33 executing program 1 (fault-call:10 fault-nth:3): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:48:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) r1 = io_uring_setup(0x2c8, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x1, 0x3af}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000005, 0x110, r1, 0x10000000) syz_usb_disconnect(0xffffffffffffffff) [ 621.951181][T18872] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 621.960316][T18872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.969201][T18872] usb 4-1: Product: syz [ 621.974049][T18872] usb 4-1: Manufacturer: syz [ 621.978629][T18872] usb 4-1: SerialNumber: syz [ 621.988780][T18872] usb 4-1: config 0 descriptor?? [ 622.031284][T18872] usb 4-1: can't set config #0, error -71 [ 622.059031][T18872] usb 4-1: USB disconnect, device number 74 [ 622.081511][ C0] net_ratelimit: 6 callbacks suppressed [ 622.081520][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.119584][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 622.170717][T22961] FAULT_INJECTION: forcing a failure. [ 622.170717][T22961] name failslab, interval 1, probability 0, space 0, times 0 [ 622.225378][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.247001][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.254389][T22961] CPU: 1 PID: 22961 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 622.266688][T22961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.276738][T22961] Call Trace: [ 622.280035][T22961] dump_stack+0x18f/0x20d [ 622.284372][T22961] should_fail.cold+0x5/0x14 [ 622.288974][T22961] should_failslab+0x5/0xf [ 622.293404][T22961] kmem_cache_alloc_node+0x257/0x3c0 [ 622.298698][T22961] __alloc_skb+0x71/0x550 [ 622.303033][T22961] __ip_append_data+0x2882/0x31c0 [ 622.308069][T22961] ? raw_destroy+0x30/0x30 [ 622.312497][T22961] ? ip_finish_output+0x1f0/0x1f0 [ 622.317523][T22961] ? mark_lock+0xbc/0x1710 [ 622.321941][T22961] ? ipv4_mtu+0x331/0x3c0 [ 622.326278][T22961] ? raw_destroy+0x30/0x30 [ 622.330700][T22961] ip_append_data+0x114/0x1a0 [ 622.335387][T22961] raw_sendmsg+0xacc/0x2d40 [ 622.339904][T22961] ? up_write+0x191/0x560 [ 622.344231][T22961] ? raw_getsockopt+0x100/0x100 [ 622.349070][T22961] ? aa_profile_af_perm+0x2e0/0x2e0 [ 622.354267][T22961] ? mark_lock+0xbc/0x1710 [ 622.358694][T22961] ? ima_get_action+0x76/0xa0 [ 622.363389][T22961] ? __lock_acquire+0x16e3/0x56e0 [ 622.368426][T22961] ? aa_sk_perm+0x316/0xaa0 09:48:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00\x00?\x00', "7ee51430da3f51b3"}, 0x28) [ 622.372936][T22961] ? aa_af_perm+0x230/0x230 [ 622.377454][T22961] inet_sendmsg+0x99/0xe0 [ 622.381788][T22961] ? inet_send_prepare+0x4d0/0x4d0 [ 622.386900][T22961] sock_sendmsg+0xcf/0x120 [ 622.391319][T22961] sock_no_sendpage+0xee/0x130 [ 622.393175][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.396076][T22961] ? sk_page_frag_refill+0x1d0/0x1d0 [ 622.396102][T22961] ? aa_file_perm+0x119/0x1100 [ 622.396114][T22961] ? find_held_lock+0x2d/0x110 09:48:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 622.396131][T22961] ? aa_file_perm+0x5b8/0x1100 [ 622.424103][ T3840] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 622.426637][T22961] inet_sendpage+0x109/0x140 [ 622.426655][T22961] ? inet_sendmsg+0xe0/0xe0 [ 622.426670][T22961] sock_sendpage+0xe5/0x140 [ 622.426689][T22961] ? __sock_recv_ts_and_drops+0x430/0x430 [ 622.446885][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.447745][T22961] pipe_to_sendpage+0x2ad/0x380 [ 622.447763][T22961] ? propagate_umount+0x1c20/0x1c20 [ 622.447780][T22961] ? mutex_lock_io_nested+0xf60/0xf60 [ 622.447798][T22961] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 622.485903][T22961] __splice_from_pipe+0x3dc/0x830 [ 622.490932][T22961] ? propagate_umount+0x1c20/0x1c20 [ 622.496139][T22961] generic_splice_sendpage+0xd4/0x140 [ 622.501511][T22961] ? __splice_from_pipe+0x830/0x830 [ 622.506707][T22961] ? apparmor_file_permission+0x26e/0x4e0 [ 622.512437][T22961] ? __splice_from_pipe+0x830/0x830 [ 622.517634][T22961] do_splice+0xbcd/0x1820 [ 622.522057][T22961] ? lock_downgrade+0x820/0x820 [ 622.526914][T22961] ? splice_from_pipe+0x140/0x140 [ 622.531983][T22961] ? __fget_files+0x294/0x400 [ 622.536667][T22961] __x64_sys_splice+0x198/0x250 [ 622.541524][T22961] do_syscall_64+0x60/0xe0 [ 622.545939][T22961] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 622.551824][T22961] RIP: 0033:0x45cb29 [ 622.555709][T22961] Code: Bad RIP value. [ 622.559768][T22961] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 622.568272][T22961] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 09:48:34 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x80e00, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="54000000130000002cbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="03000200000400001420350076657468315f6d61637674617000000008000d001200000008001b000300000008001c004caf862bf82bf391d577874711a260a3b2c613fcd5f486ae718e4ca4f2571046a0e1faddffd01c956e8e8d5db8c2fea32c5d5ec6163199ebd487a74e3129e24168ea148b5e5fe9d340c9092eb456b96d1254757fab8bd2ef9bb3cd1b8aae60c704eaa54e1cf1b24cee7d7aa01ab907d69a46ce48e3433dfd1787cc2c31d679b08794a2f6aaaac3a677a07a48d5890cee3649ffe1cb314178c062b457349476b42b1682855671ceb4d275660f58c411a5", @ANYRES32, @ANYBLOB="08000f0008000000"], 0x54}}, 0x804) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000180)={0x8, 'syz_tun\x00', {'macsec0\x00'}, 0x1}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x5) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0x3, 0x20004050, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r5, r6/1000+60000}, {0x77359400}}) [ 622.576238][T22961] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 622.584215][T22961] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 622.586467][T18872] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 622.592177][T22961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 622.592186][T22961] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 [ 622.671227][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.704487][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.711090][ T3840] usb 5-1: device descriptor read/64, error 18 09:48:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:34 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000200)=0x1f) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x5, 0x400) renameat(r3, &(0x7f0000000140)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00') setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 622.856376][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.906811][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 622.921403][T18872] usb 4-1: device descriptor read/64, error 18 [ 623.120960][ T3840] usb 5-1: device descriptor read/64, error 18 [ 623.310823][T18872] usb 4-1: device descriptor read/64, error 18 [ 623.390844][ T3840] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 623.580859][T18872] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 623.660862][ T3840] usb 5-1: device descriptor read/64, error 18 [ 623.850828][T18872] usb 4-1: device descriptor read/64, error 18 [ 624.050905][ T3840] usb 5-1: device descriptor read/64, error 18 [ 624.171592][ T3840] usb usb5-port1: attempt power cycle [ 624.240786][T18872] usb 4-1: device descriptor read/64, error 18 [ 624.361797][T18872] usb usb4-port1: attempt power cycle [ 624.880754][ T3840] usb 5-1: new high-speed USB device number 37 using dummy_hcd 09:48:36 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x7) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) [ 625.050794][ T3840] usb 5-1: device descriptor read/8, error -71 [ 625.070717][T18872] usb 4-1: new full-speed USB device number 77 using dummy_hcd 09:48:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:36 executing program 1 (fault-call:10 fault-nth:4): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:36 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffe, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x50, 0x7, 0x1, "528c0085b433b1860779130166f515ba39ad895875161eda718cc11c724e5fc18129a7dbc20cfee50ff62eb33c878db867aa59ecef0b2d1f26ce53f62e2e55d95edaa8a1020c23e03f77c0b3247df6b5"}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000080045000014000000000067907800000000e000000100"/38], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:48:36 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0) [ 625.190853][T18872] usb 4-1: device descriptor read/8, error -71 09:48:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 625.260758][ T3840] usb 5-1: device descriptor read/8, error -71 09:48:36 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x4}, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) sendto$inet(r3, &(0x7f0000000340)="efe217741faaeddae7def33086341c29599efa952f8868ef430089ee7aeb8c8ee0d024430c8095814e6cb88ea049d075903647af754f9e1b5e66f5b6cc4075c4f78db98edd4a92a26bf114d70b51087d782549d6bc0192cebd1e0fcb5b52778ad10ad66c4da23506dc448d62de2b96eaff04a9a8e27aa55d9cb9aaf354f09994cf0c3f90c63ae2e9d38bd85d721472b789a1146f039199bd9ec694faef443bf62d0f846efef739f4cdacba1204faa03f5b6a38e6f3a98d86bf4606cd14ff0cab9028fe34d205179f1899667273", 0xcd, 0x20000040, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x24000844) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00\x00\x00?', "7ee51430da3f51b3"}, 0x28) [ 625.401669][T18872] usb 4-1: device descriptor read/8, error -71 [ 625.434540][T23013] FAULT_INJECTION: forcing a failure. [ 625.434540][T23013] name failslab, interval 1, probability 0, space 0, times 0 [ 625.448576][T23013] CPU: 0 PID: 23013 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 625.457263][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.467322][T23013] Call Trace: [ 625.470626][T23013] dump_stack+0x18f/0x20d [ 625.474968][T23013] should_fail.cold+0x5/0x14 [ 625.479568][T23013] should_failslab+0x5/0xf [ 625.483996][T23013] kmem_cache_alloc_node_trace+0x27d/0x400 [ 625.489814][T23013] __kmalloc_node_track_caller+0x38/0x60 [ 625.495451][T23013] __alloc_skb+0xae/0x550 [ 625.499787][T23013] __ip_append_data+0x2882/0x31c0 [ 625.504826][T23013] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 625.510985][T23013] ? raw_destroy+0x30/0x30 [ 625.515412][T23013] ? ip_finish_output+0x1f0/0x1f0 [ 625.520439][T23013] ? ip_setup_cork+0x261/0x910 [ 625.525206][T23013] ? ip_setup_cork+0x441/0x910 [ 625.529976][T23013] ? raw_destroy+0x30/0x30 [ 625.534392][T23013] ip_append_data+0x114/0x1a0 [ 625.539076][T23013] raw_sendmsg+0xacc/0x2d40 [ 625.543591][T23013] ? raw_getsockopt+0x100/0x100 [ 625.548448][T23013] ? aa_profile_af_perm+0x2e0/0x2e0 [ 625.553675][T23013] ? mark_lock+0xbc/0x1710 [ 625.558103][T23013] ? __lock_acquire+0x16e3/0x56e0 [ 625.563133][T23013] ? sched_clock+0x2a/0x40 [ 625.567565][T23013] ? aa_sk_perm+0x316/0xaa0 [ 625.572079][T23013] ? trace_hardirqs_on+0x5f/0x220 [ 625.577104][T23013] ? aa_af_perm+0x230/0x230 [ 625.581612][T23013] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 625.587776][T23013] inet_sendmsg+0x99/0xe0 [ 625.592107][T23013] ? inet_send_prepare+0x4d0/0x4d0 [ 625.597223][T23013] sock_sendmsg+0xcf/0x120 [ 625.601648][T23013] sock_no_sendpage+0xee/0x130 [ 625.606413][T23013] ? sk_page_frag_refill+0x1d0/0x1d0 [ 625.611700][T23013] ? lock_acquire+0x270/0xad0 [ 625.616403][T23013] ? mark_lock+0xbc/0x1710 [ 625.620825][T23013] ? kvm_sched_clock_read+0x14/0x40 [ 625.626027][T23013] inet_sendpage+0x109/0x140 [ 625.630624][T23013] ? inet_sendmsg+0xe0/0xe0 [ 625.635129][T23013] sock_sendpage+0xe5/0x140 [ 625.639636][T23013] ? __sock_recv_ts_and_drops+0x430/0x430 [ 625.645355][T23013] pipe_to_sendpage+0x2ad/0x380 [ 625.650206][T23013] ? propagate_umount+0x1c20/0x1c20 [ 625.655414][T23013] __splice_from_pipe+0x3dc/0x830 [ 625.660441][T23013] ? propagate_umount+0x1c20/0x1c20 [ 625.665646][T23013] generic_splice_sendpage+0xd4/0x140 [ 625.671018][T23013] ? __splice_from_pipe+0x830/0x830 [ 625.676221][T23013] ? apparmor_file_permission+0x26e/0x4e0 [ 625.681956][T23013] ? __splice_from_pipe+0x830/0x830 [ 625.687149][T23013] do_splice+0xbcd/0x1820 [ 625.691485][T23013] ? lock_downgrade+0x820/0x820 [ 625.696341][T23013] ? splice_from_pipe+0x140/0x140 09:48:37 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdf, 0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x50100, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000180)={0x4b58}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 625.701368][T23013] ? __fget_files+0x294/0x400 [ 625.706058][T23013] __x64_sys_splice+0x198/0x250 [ 625.710925][T23013] do_syscall_64+0x60/0xe0 [ 625.715343][T23013] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 625.721243][T23013] RIP: 0033:0x45cb29 [ 625.725128][T23013] Code: Bad RIP value. [ 625.729189][T23013] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 625.737688][T23013] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 09:48:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 625.745656][T23013] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 625.753625][T23013] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 625.761597][T23013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 625.769569][T23013] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 09:48:37 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x19, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={r2, 0xfe00000, 0x7, 0x0, 0x1, 0x9, 0x0, 0xdda2, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x800, 0x8, 0x5, 0xb1f, 0x80000000}}, &(0x7f0000000280)=0xb0) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 626.120701][ T3840] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 626.206389][T18872] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 626.214201][ T3840] usb 5-1: Using ep0 maxpacket: 8 [ 626.320734][T18872] usb 4-1: Using ep0 maxpacket: 8 [ 626.490819][ T3840] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 626.500031][ T3840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.512450][ T3840] usb 5-1: Product: syz [ 626.516606][ T3840] usb 5-1: Manufacturer: syz [ 626.523328][ T3840] usb 5-1: SerialNumber: syz [ 626.529020][ T3840] usb 5-1: config 0 descriptor?? [ 626.571341][ T3840] hub 5-1:0.0: bad descriptor, ignoring hub [ 626.577477][ T3840] hub: probe of 5-1:0.0 failed with error -5 [ 626.585184][ T3840] sierra 5-1:0.0: Sierra USB modem converter detected [ 626.601308][T18872] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 626.610358][T18872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.618862][T18872] usb 4-1: Product: syz [ 626.623121][T18872] usb 4-1: Manufacturer: syz [ 626.627707][T18872] usb 4-1: SerialNumber: syz [ 626.633846][T18872] usb 4-1: config 0 descriptor?? [ 626.671215][T18872] hub 4-1:0.0: bad descriptor, ignoring hub [ 626.677205][T18872] hub: probe of 4-1:0.0 failed with error -5 [ 626.684034][T18872] sierra 4-1:0.0: Sierra USB modem converter detected [ 626.792333][ T3840] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 626.832093][ T3840] usb 5-1: USB disconnect, device number 38 [ 626.849031][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 626.858902][ T3840] sierra 5-1:0.0: device disconnected [ 626.892439][T18872] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 626.951423][T18872] usb 4-1: USB disconnect, device number 78 [ 626.959568][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 626.969151][T18872] sierra 4-1:0.0: device disconnected [ 627.550624][ T2760] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 627.670581][ T2844] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 627.790606][ T2760] usb 5-1: Using ep0 maxpacket: 8 [ 627.930706][ T2844] usb 4-1: Using ep0 maxpacket: 8 [ 628.111481][ T2760] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 628.120635][ T2760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.128638][ T2760] usb 5-1: Product: syz [ 628.135569][ T2760] usb 5-1: Manufacturer: syz [ 628.140218][ T2760] usb 5-1: SerialNumber: syz [ 628.149677][ T2760] usb 5-1: config 0 descriptor?? 09:48:39 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="52fdeb722182fed1b7ce63f39005edd70400000009"], 0x0) 09:48:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:39 executing program 1 (fault-call:10 fault-nth:5): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:39 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000140)='#&\x00', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f0000000580)=""/51, 0x33}, {&(0x7f00000005c0)=""/73, 0x49}, {&(0x7f0000000640)=""/68, 0x44}], 0xa) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:39 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') preadv(r2, &(0x7f00000017c0), 0x1c3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000009f96d7ffe400aaaaaaaaaa00080045000060f07aa4a2e25530119527445e14000000000067907800000000e0000001f6bfce8b728049100e280437f458f4e1337c185b71ae3355a766d259c1505a9f44134aa4bfab"], 0x26) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x10005, 0x0) 09:48:39 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x1}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000200)='net/ptype\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0x1f, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090c, 0x7, [], @string=&(0x7f0000000040)=0x7}}) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 628.208832][ T2760] usb 5-1: can't set config #0, error -71 [ 628.225959][ T2760] usb 5-1: USB disconnect, device number 39 [ 628.301607][ T2844] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 628.323928][ T2844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.347413][ C0] net_ratelimit: 8 callbacks suppressed [ 628.347424][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 628.364657][ T2844] usb 4-1: Product: syz [ 628.391693][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 628.407347][T23111] FAULT_INJECTION: forcing a failure. [ 628.407347][T23111] name failslab, interval 1, probability 0, space 0, times 0 [ 628.421517][ T2844] usb 4-1: config 0 descriptor?? 09:48:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 628.460946][ T2844] usb 4-1: can't set config #0, error -71 [ 628.484676][ T2844] usb 4-1: USB disconnect, device number 79 [ 628.492936][T23111] CPU: 0 PID: 23111 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 09:48:40 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xfffffffffffffffb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "6fa73f55a87f5362", "d5694f607e9432330834dbf951935d9d", "d7ff80b5", "4f7375b66e9c21da"}, 0x28) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff43, 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)="b6f0ff2b10582b3c3a99b303af455e573282a0ab38cb36f00cfd4c504af8ba8a0046655d95065a989ff54d27ba54fa754c8ffbe1f633377e461a51e1b945c11d5bddfd7cd66f3ad7a3e9100814f3f3e435eea637714de76d0bb50a620fe41a416597ff5200b494eb8b97207bc5f4b0c75349f63b9f7a4116b11c6c81146f168251905b942dd02922e57ad32166452e45695442ca47fcf1b1d5a1892ac83cf7bf6b1aeb7c5cd36f7b91e46743113c69e066613b750fa4b279bf6f3e1a7a", 0xbd, 0x20}, {&(0x7f0000000340)="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", 0x1000, 0xfffffffffffffffd}], 0x30002, &(0x7f0000001340)={[{@nodiscard='nodiscard'}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure='measure'}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) sendto$inet6(r0, &(0x7f0000001380)="ce5c39ddf9bb39a110", 0x9, 0x40, 0x0, 0x0) [ 628.501636][T23111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.511681][T23111] Call Trace: [ 628.514975][T23111] dump_stack+0x18f/0x20d [ 628.519316][T23111] should_fail.cold+0x5/0x14 [ 628.523925][T23111] should_failslab+0x5/0xf [ 628.528351][T23111] kmem_cache_alloc_node+0x257/0x3c0 [ 628.533649][T23111] __alloc_skb+0x71/0x550 [ 628.537990][T23111] __ip_append_data+0x2882/0x31c0 [ 628.543033][T23111] ? raw_destroy+0x30/0x30 [ 628.547462][T23111] ? ip_finish_output+0x1f0/0x1f0 [ 628.552501][T23111] ? mark_lock+0xbc/0x1710 [ 628.556934][T23111] ? ipv4_mtu+0x331/0x3c0 [ 628.561281][T23111] ? raw_destroy+0x30/0x30 [ 628.565718][T23111] ip_append_data+0x114/0x1a0 [ 628.570406][T23111] raw_sendmsg+0xacc/0x2d40 [ 628.574921][T23111] ? up_write+0x191/0x560 [ 628.579254][T23111] ? raw_getsockopt+0x100/0x100 [ 628.584110][T23111] ? aa_profile_af_perm+0x2e0/0x2e0 [ 628.589314][T23111] ? mark_lock+0xbc/0x1710 [ 628.593730][T23111] ? ima_get_action+0x76/0xa0 [ 628.598427][T23111] ? __lock_acquire+0x16e3/0x56e0 [ 628.603462][T23111] ? aa_sk_perm+0x316/0xaa0 [ 628.607980][T23111] ? aa_af_perm+0x230/0x230 [ 628.612494][T23111] inet_sendmsg+0x99/0xe0 [ 628.616825][T23111] ? inet_send_prepare+0x4d0/0x4d0 [ 628.621941][T23111] sock_sendmsg+0xcf/0x120 [ 628.626369][T23111] sock_no_sendpage+0xee/0x130 [ 628.631139][T23111] ? sk_page_frag_refill+0x1d0/0x1d0 [ 628.636438][T23111] ? aa_file_perm+0x119/0x1100 [ 628.641203][T23111] ? find_held_lock+0x2d/0x110 [ 628.645974][T23111] ? aa_file_perm+0x5b8/0x1100 [ 628.650742][T23111] inet_sendpage+0x109/0x140 [ 628.655342][T23111] ? inet_sendmsg+0xe0/0xe0 [ 628.659848][T23111] sock_sendpage+0xe5/0x140 [ 628.664360][T23111] ? __sock_recv_ts_and_drops+0x430/0x430 [ 628.670077][T23111] pipe_to_sendpage+0x2ad/0x380 [ 628.674932][T23111] ? propagate_umount+0x1c20/0x1c20 [ 628.680153][T23111] ? mutex_lock_io_nested+0xf60/0xf60 [ 628.685619][T23111] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 628.691691][T23111] __splice_from_pipe+0x3dc/0x830 [ 628.696716][T23111] ? propagate_umount+0x1c20/0x1c20 09:48:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 628.697797][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 628.701914][T23111] generic_splice_sendpage+0xd4/0x140 [ 628.701930][T23111] ? __splice_from_pipe+0x830/0x830 [ 628.701944][T23111] ? apparmor_file_permission+0x26e/0x4e0 [ 628.701969][T23111] ? __splice_from_pipe+0x830/0x830 [ 628.701980][T23111] do_splice+0xbcd/0x1820 [ 628.701999][T23111] ? lock_downgrade+0x820/0x820 [ 628.702016][T23111] ? splice_from_pipe+0x140/0x140 [ 628.716151][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 628.718470][T23111] ? __fget_files+0x294/0x400 [ 628.718496][T23111] __x64_sys_splice+0x198/0x250 [ 628.718518][T23111] do_syscall_64+0x60/0xe0 [ 628.718533][T23111] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 628.718549][T23111] RIP: 0033:0x45cb29 [ 628.783357][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 628.783394][T23111] Code: Bad RIP value. [ 628.798441][T23111] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 09:48:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 628.806940][T23111] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 [ 628.814910][T23111] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 628.822884][T23111] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 628.830862][T23111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 628.838834][T23111] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 09:48:40 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0x3, 0x20000040, 0x0, 0x0) [ 628.956519][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 628.972014][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 629.003498][ T2760] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 629.092999][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 629.138783][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 629.180478][ T2844] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 629.280487][ T2760] usb 5-1: Using ep0 maxpacket: 8 [ 629.480576][ T2844] usb 4-1: device descriptor read/64, error 18 [ 629.590527][ T2760] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 629.599833][ T2760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.608779][ T2760] usb 5-1: Product: syz [ 629.613425][ T2760] usb 5-1: Manufacturer: syz [ 629.618146][ T2760] usb 5-1: SerialNumber: syz [ 629.625149][ T2760] usb 5-1: config 0 descriptor?? [ 629.674928][ T2760] hub 5-1:0.0: bad descriptor, ignoring hub [ 629.681569][ T2760] hub: probe of 5-1:0.0 failed with error -5 [ 629.688107][ T2760] sierra 5-1:0.0: Sierra USB modem converter detected [ 629.910575][ T2844] usb 4-1: device descriptor read/64, error 18 [ 629.918744][ T2760] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 629.971736][ T2760] usb 5-1: USB disconnect, device number 40 [ 629.988458][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 630.018686][ T2760] sierra 5-1:0.0: device disconnected [ 630.190610][ T2844] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 630.470502][ T2844] usb 4-1: device descriptor read/64, error 18 [ 630.690453][ T2760] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 630.870418][ T2844] usb 4-1: device descriptor read/64, error 18 [ 630.930412][ T2760] usb 5-1: Using ep0 maxpacket: 8 [ 630.992223][ T2844] usb usb4-port1: attempt power cycle [ 631.220834][ T2760] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 631.229967][ T2760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.238956][ T2760] usb 5-1: Product: syz [ 631.243952][ T2760] usb 5-1: Manufacturer: syz [ 631.248544][ T2760] usb 5-1: SerialNumber: syz [ 631.257725][ T2760] usb 5-1: config 0 descriptor?? 09:48:42 executing program 1 (fault-call:10 fault-nth:6): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:42 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x490) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1e, &(0x7f0000000140)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x88f8}, @void, @eth={@random, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) acct(&(0x7f0000000180)='./file0\x00') write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 09:48:42 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000040)) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8ffffee", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250700000006001a004e200000"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x81) [ 631.301197][ T2760] hub 5-1:0.0: bad descriptor, ignoring hub [ 631.320383][ T2760] hub: probe of 5-1:0.0 failed with error -5 [ 631.326995][ T2760] sierra 5-1:0.0: Sierra USB modem converter detected 09:48:42 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160551]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="64470f01c9c4e23598cd3e400f3066baa100b000ee0f01c4440f78cb660f38819304000000660fc7b4400d00000066ba6100b02aee66ba430066b842ef66ef", 0x3f}], 0x1, 0x21, &(0x7f00000000c0)=[@efer={0x2, 0xcc01}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 631.412233][ T2760] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 631.464060][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 631.482016][ T2760] usb 5-1: USB disconnect, device number 41 09:48:43 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x1, 0x0) 09:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 631.516971][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 631.528547][T23207] FAULT_INJECTION: forcing a failure. [ 631.528547][T23207] name failslab, interval 1, probability 0, space 0, times 0 [ 631.584032][ T2760] sierra 5-1:0.0: device disconnected [ 631.599040][T23210] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3266459905 (104526716960 ns) > initial count (9157404736 ns). Using initial count to start timer. [ 631.601846][T23207] CPU: 1 PID: 23207 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 631.625241][T23207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.635296][T23207] Call Trace: [ 631.638592][T23207] dump_stack+0x18f/0x20d [ 631.642932][T23207] should_fail.cold+0x5/0x14 [ 631.647532][T23207] should_failslab+0x5/0xf [ 631.651952][T23207] kmem_cache_alloc_node_trace+0x27d/0x400 [ 631.657777][T23207] __kmalloc_node_track_caller+0x38/0x60 [ 631.663416][T23207] __alloc_skb+0xae/0x550 [ 631.667753][T23207] __ip_append_data+0x2882/0x31c0 [ 631.672789][T23207] ? raw_destroy+0x30/0x30 [ 631.677211][T23207] ? ip_finish_output+0x1f0/0x1f0 [ 631.682239][T23207] ? mark_lock+0xbc/0x1710 [ 631.686741][T23207] ? ipv4_mtu+0x331/0x3c0 [ 631.691078][T23207] ? raw_destroy+0x30/0x30 [ 631.695498][T23207] ip_append_data+0x114/0x1a0 [ 631.700176][T23207] raw_sendmsg+0xacc/0x2d40 [ 631.704689][T23207] ? up_write+0x191/0x560 [ 631.709021][T23207] ? raw_getsockopt+0x100/0x100 [ 631.713872][T23207] ? aa_profile_af_perm+0x2e0/0x2e0 [ 631.719071][T23207] ? mark_lock+0xbc/0x1710 [ 631.723484][T23207] ? ima_get_action+0x76/0xa0 [ 631.728182][T23207] ? __lock_acquire+0x16e3/0x56e0 [ 631.733222][T23207] ? aa_sk_perm+0x316/0xaa0 [ 631.737729][T23207] ? aa_af_perm+0x230/0x230 [ 631.742242][T23207] inet_sendmsg+0x99/0xe0 [ 631.746573][T23207] ? inet_send_prepare+0x4d0/0x4d0 [ 631.751821][T23207] sock_sendmsg+0xcf/0x120 [ 631.756241][T23207] sock_no_sendpage+0xee/0x130 [ 631.761014][T23207] ? sk_page_frag_refill+0x1d0/0x1d0 [ 631.766311][T23207] ? aa_file_perm+0x119/0x1100 [ 631.771073][T23207] ? find_held_lock+0x2d/0x110 [ 631.775843][T23207] ? aa_file_perm+0x5b8/0x1100 [ 631.780608][T23207] inet_sendpage+0x109/0x140 [ 631.785201][T23207] ? inet_sendmsg+0xe0/0xe0 [ 631.789705][T23207] sock_sendpage+0xe5/0x140 [ 631.794211][T23207] ? __sock_recv_ts_and_drops+0x430/0x430 [ 631.799936][T23207] pipe_to_sendpage+0x2ad/0x380 [ 631.804788][T23207] ? propagate_umount+0x1c20/0x1c20 [ 631.810077][T23207] ? mutex_lock_io_nested+0xf60/0xf60 [ 631.815460][T23207] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 631.821621][T23207] __splice_from_pipe+0x3dc/0x830 [ 631.826651][T23207] ? propagate_umount+0x1c20/0x1c20 [ 631.831856][T23207] generic_splice_sendpage+0xd4/0x140 [ 631.837232][T23207] ? __splice_from_pipe+0x830/0x830 [ 631.842432][T23207] ? apparmor_file_permission+0x26e/0x4e0 [ 631.848161][T23207] ? __splice_from_pipe+0x830/0x830 [ 631.853359][T23207] do_splice+0xbcd/0x1820 [ 631.857698][T23207] ? lock_downgrade+0x820/0x820 [ 631.862552][T23207] ? splice_from_pipe+0x140/0x140 [ 631.867588][T23207] ? __fget_files+0x294/0x400 [ 631.872282][T23207] __x64_sys_splice+0x198/0x250 [ 631.877138][T23207] do_syscall_64+0x60/0xe0 [ 631.881558][T23207] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 631.887459][T23207] RIP: 0033:0x45cb29 [ 631.891345][T23207] Code: Bad RIP value. [ 631.895404][T23207] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 631.903911][T23207] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 [ 631.911876][T23207] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 631.919834][T23207] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 631.927798][T23207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 631.935767][T23207] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 09:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) sendto$isdn(r0, &(0x7f0000000200)={0xb0b, 0x80, "f8175913648a7511470cc992424349ab818ef6b00a34d95fe65904ceeb64ad4395ee8278cd5cd6025bf34b369842225124a3ea508d044cf7a8d913099950fcd2f770a1ce046e3d9f5cb4f5d17a6704e8b81e8b53fc8b4003635b2d178c46"}, 0x66, 0x0, &(0x7f0000000280)={0x22, 0x0, 0x9, 0xfb, 0x3}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7f, 0x40210, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, @perf_config_ext={0x5, 0x8001}, 0x500, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x50, 0xffffffffffffffff, 0x1d0e) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) bind(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80) 09:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x3) 09:48:43 executing program 1 (fault-call:10 fault-nth:7): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:43 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000340)={0x550, 0x80, 0x690, 0x394, 0x7, 0x80000000, 0x1, 0x0, {0x1, 0x9}, {0x6730, 0xfffff801, 0x1}, {0x4, 0x54, 0x1}, {0x6, 0x4}, 0x3, 0x10, 0x0, 0x81, 0x0, 0x5, 0x1, 0xfffffffd, 0x36, 0xfff, 0x5b4, 0x200, 0x4, 0x0, 0x2, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyS3\x00', 0x480802, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x20000000000000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000010000111d0af023ca00002000fa870b00010067d1e7ad00000008000200ac1e000106006e2ac93c5a9cbc00000000003d05d9956a76c7e3272581f4505f5da616656e38041de0902a9c2661ede3c6f1021cde4ec063a61efac1a64dddc005ac52e13fc676e0e1c8cede818e9d8b1ad3d5bc8e0c1b0cf413e2c7b29ffd87c9fa217e6643cd03773c08223bfeece02aa79c55af73e936218ee717789b"], 0x40}}, 0x0) pwritev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="2c098af86052b8c8cc2014c0f5cb0e3d246a170b9249cbf1ca7cdcd88a81f9a233dcc65efe8182a5040374199b48200b551a8e7367706ac12751db157cde723d31dc7464fb3fc0cb2bcd1a9a74cdd2dfae203513c874624fc2c07c0926a0f85cfc9bde4b20ae3f88d82a125c8bdb5e6d3c8d557b3629b763d4baada139607247f320dbce2aa6fe7b8572e03dd9274fc96427c9687da6f1cfd885a29fff2826ec21b7989eba5f8bb2b2d4c779a12de40731fd93bc17", 0xb5}], 0x1, 0x8001) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0xfffff258, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "3c91ba7d0dc876c0", "caf8fa81543fea640de7ac60a9ccbb27709f5a24af26568f6efc4f99ad281992", "a36d1cd0"}, 0x38) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000240)) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 632.240364][ T2844] usb 4-1: new high-speed USB device number 82 using dummy_hcd 09:48:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="642d04882298915616e11c1592d87bbd11e71f683069a7eb79040e826fa7c36bd70318a6134315ca90facc57ded94f1c363bdc50145d6bd2af3bab88d5f0e44e5cc3161ad22072112f44244049fdbf12ec692ba2786aae886221a44d2b9585112e0d0edfb3989921e85b3aba54f2ba1c6517ad355969ee86c600c34a24dd", 0x7e}], 0x1, 0x0, 0x0, 0x2000004}, 0x4) [ 632.350423][ T2844] usb 4-1: Using ep0 maxpacket: 8 [ 632.355608][ T2760] usb 5-1: new high-speed USB device number 42 using dummy_hcd 09:48:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x10000000) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x749}, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0xb93, [0x7, 0x2, 0x7f, 0x2, 0x373, 0x80000001, 0xb8]}, 0x5c) [ 632.493736][T23252] FAULT_INJECTION: forcing a failure. [ 632.493736][T23252] name failslab, interval 1, probability 0, space 0, times 0 [ 632.550331][T23252] CPU: 0 PID: 23252 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 632.559023][T23252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.569075][T23252] Call Trace: [ 632.572365][T23252] dump_stack+0x18f/0x20d [ 632.576700][T23252] should_fail.cold+0x5/0x14 [ 632.581300][T23252] should_failslab+0x5/0xf [ 632.585721][T23252] kmem_cache_alloc+0x40/0x3b0 [ 632.590492][T23252] skb_clone+0x14f/0x3c0 [ 632.594744][T23252] ip_mc_output+0x2ed/0x700 [ 632.599342][T23252] ip_push_pending_frames+0x125/0x2b0 [ 632.604723][T23252] raw_sendmsg+0x1303/0x2d40 [ 632.609317][T23252] ? mark_lock+0x83/0x1710 [ 632.613750][T23252] ? kvm_sched_clock_read+0x14/0x40 [ 632.618953][T23252] ? raw_getsockopt+0x100/0x100 [ 632.623795][T23252] ? aa_profile_af_perm+0x2e0/0x2e0 [ 632.628982][T23252] ? mark_held_locks+0x9f/0xe0 [ 632.633740][T23252] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 632.639875][T23252] ? lockdep_hardirqs_on+0x6a/0xe0 [ 632.644964][T23252] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 632.651109][T23252] ? aa_sk_perm+0x316/0xaa0 [ 632.655613][T23252] ? aa_af_perm+0x230/0x230 [ 632.660114][T23252] inet_sendmsg+0x99/0xe0 [ 632.664436][T23252] ? inet_send_prepare+0x4d0/0x4d0 [ 632.669625][T23252] sock_sendmsg+0xcf/0x120 [ 632.674021][T23252] sock_no_sendpage+0xee/0x130 [ 632.678764][T23252] ? sk_page_frag_refill+0x1d0/0x1d0 [ 632.684193][T23252] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 632.690169][T23252] ? trace_hardirqs_on+0x5f/0x220 [ 632.695193][T23252] inet_sendpage+0x109/0x140 [ 632.699855][T23252] ? inet_sendmsg+0xe0/0xe0 [ 632.704356][T23252] sock_sendpage+0xe5/0x140 [ 632.708839][T23252] ? __sock_recv_ts_and_drops+0x430/0x430 [ 632.714538][T23252] pipe_to_sendpage+0x2ad/0x380 [ 632.719366][T23252] ? propagate_umount+0x1c20/0x1c20 [ 632.724567][T23252] ? __splice_from_pipe+0x3cc/0x830 [ 632.729750][T23252] __splice_from_pipe+0x3dc/0x830 [ 632.734776][T23252] ? propagate_umount+0x1c20/0x1c20 [ 632.739980][T23252] generic_splice_sendpage+0xd4/0x140 [ 632.745329][T23252] ? __splice_from_pipe+0x830/0x830 [ 632.750533][T23252] ? __splice_from_pipe+0x830/0x830 [ 632.755740][T23252] do_splice+0xbcd/0x1820 [ 632.760057][T23252] ? lock_downgrade+0x820/0x820 [ 632.764899][T23252] ? splice_from_pipe+0x140/0x140 [ 632.769920][T23252] ? __fget_files+0x294/0x400 [ 632.774582][T23252] __x64_sys_splice+0x198/0x250 [ 632.779428][T23252] do_syscall_64+0x60/0xe0 [ 632.783845][T23252] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 632.789724][T23252] RIP: 0033:0x45cb29 [ 632.793590][T23252] Code: Bad RIP value. [ 632.797630][T23252] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 632.806025][T23252] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 [ 632.813986][T23252] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 632.821934][T23252] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 632.829882][T23252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 632.837830][T23252] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 [ 632.901389][ T2760] usb 5-1: Using ep0 maxpacket: 8 [ 632.912862][T23251] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 09:48:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) fchmod(r0, 0x85) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 632.980804][ T2844] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 632.989856][ T2844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.012989][ T2844] usb 4-1: Product: syz [ 633.017412][ T2844] usb 4-1: Manufacturer: syz [ 633.051575][ T2844] usb 4-1: SerialNumber: syz [ 633.058990][ T2844] usb 4-1: config 0 descriptor?? [ 633.101443][ T2844] hub 4-1:0.0: bad descriptor, ignoring hub [ 633.115016][ T2844] hub: probe of 4-1:0.0 failed with error -5 [ 633.125678][ T2844] sierra 4-1:0.0: Sierra USB modem converter detected [ 633.203991][ T2760] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 633.213113][ T2760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.221809][ T2760] usb 5-1: Product: syz [ 633.225977][ T2760] usb 5-1: Manufacturer: syz [ 633.230903][ T2760] usb 5-1: SerialNumber: syz [ 633.236940][ T2760] usb 5-1: config 0 descriptor?? [ 633.291045][ T2760] hub 5-1:0.0: bad descriptor, ignoring hub [ 633.297171][ T2760] hub: probe of 5-1:0.0 failed with error -5 [ 633.304339][ T2760] sierra 5-1:0.0: Sierra USB modem converter detected [ 633.372237][ T2844] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 633.424385][ T2844] usb 4-1: USB disconnect, device number 82 [ 633.433773][ T2844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 633.442957][ T2844] sierra 4-1:0.0: device disconnected [ 633.509088][ T2760] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 633.551195][ T2760] usb 5-1: USB disconnect, device number 42 [ 633.566093][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 633.579467][ T2760] sierra 5-1:0.0: device disconnected [ 634.140185][ T3840] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 634.270159][T18872] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 634.380193][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 634.510159][T18872] usb 5-1: Using ep0 maxpacket: 8 [ 634.662041][ T3840] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 634.671400][ T3840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.679374][ T3840] usb 4-1: Product: syz [ 634.683901][ T3840] usb 4-1: Manufacturer: syz [ 634.688513][ T3840] usb 4-1: SerialNumber: syz [ 634.698499][ T3840] usb 4-1: config 0 descriptor?? [ 634.740759][ T3840] hub 4-1:0.0: bad descriptor, ignoring hub [ 634.746741][ T3840] hub: probe of 4-1:0.0 failed with error -5 [ 634.753962][ T3840] sierra 4-1:0.0: Sierra USB modem converter detected [ 634.790541][T18872] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 634.799777][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.808484][T18872] usb 5-1: Product: syz [ 634.812871][T18872] usb 5-1: Manufacturer: syz [ 634.817545][T18872] usb 5-1: SerialNumber: syz [ 634.824647][T18872] usb 5-1: config 0 descriptor?? [ 634.841969][ T3840] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 634.865642][T18872] hub 5-1:0.0: bad descriptor, ignoring hub [ 634.874235][T18872] hub: probe of 5-1:0.0 failed with error -5 09:48:46 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0xc, {0x80000001, 0x1f, 0x800, 0x7}}) [ 634.888631][ T3840] usb 4-1: USB disconnect, device number 83 [ 634.898491][T18872] sierra 5-1:0.0: Sierra USB modem converter detected [ 634.922943][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 634.932683][ T3840] sierra 4-1:0.0: device disconnected 09:48:46 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000040)={0xa, 0x4e2a, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "00000400", "7ee5947bda85e9b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000010100000700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000200ac1e000104000600"], 0x40}}, 0x0) flistxattr(r4, &(0x7f0000000140)=""/149, 0x95) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x20004e22, 0x3, @loopback}, 0x1c) 09:48:46 executing program 1 (fault-call:10 fault-nth:8): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:46 executing program 0: pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYRES64=r1, @ANYBLOB="fbdf2c248edf9aeb83ea77fc602730fe2fdcbeaa13fc9fa2da458bef8ab1d68db058033de0fc4d8f80c738fca87a8f7d9004f58f9fe2430eef5f1d8bd2663e20dfd6f8b881fc7060b94bb77294be88253e20b2048516ced0"], 0x26) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0xffffffff}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f0, 0x2e8, 0x2e8, 0x1c8, 0x2e8, 0x1c8, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, &(0x7f0000000180), {[{{@ipv6={@mcast2, @private2, [0x0, 0xff, 0xff000000], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6gre0\x00', 'bridge_slave_1\x00', {}, {}, 0x87, 0x40, 0x2, 0x44}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xa4}}}, {{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x1a}, [0xffffffff, 0xff, 0x0, 0xff000000], [0x0, 0x0, 0xff000000, 0xff], 'ip6gre0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x33, 0xff, 0x4, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv6=@dev={0xfe, 0x80, [], 0x16}, 0x15, 0x17, 0x6}}}, {{@ipv6={@private1, @private2, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {}, {0xff}, 0x4e, 0x26, 0x2, 0xa0}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d5, 0x4d5], 0x0, 0x3, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xc}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x32, 0x25, 0x7ff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000880)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$KVM_NMI(r7, 0xae9a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0x0, 0x40, 0x8, r7, 0x0, &(0x7f0000000900)={0xbeb00c188e3f605a, 0xf061, [], @p_u32=&(0x7f0000000040)=0x3}}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000000980)={@fixed={[], 0x10}, 0xfffffffd, 0x9, 0x8001, 0xff, 0x0, "028e31f12eccc742403ab2800caf88dbf0eb9d874eff4790a9646ef9824cb9bcdbebb337cbe4fd9499b8ab88015d57e3489db379284917129a845a59744d12de8b775a32cbaabb9ff0e50ef8d2b3341f401118214ff09f6f83ef4220c4a2f1fd78f8388cc2aeb696fbefd0211bb778e6a69b7a04795ab4ef7e1a26207e286aed"}) 09:48:46 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c845}, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0900000009"], 0x0) [ 634.950865][T18872] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 635.002262][T18872] usb 5-1: USB disconnect, device number 43 [ 635.030028][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 635.110693][T18872] sierra 5-1:0.0: device disconnected [ 635.111075][T23369] FAULT_INJECTION: forcing a failure. [ 635.111075][T23369] name failslab, interval 1, probability 0, space 0, times 0 [ 635.262062][T23369] CPU: 1 PID: 23369 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 635.270843][T23369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.280899][T23369] Call Trace: [ 635.284199][T23369] dump_stack+0x18f/0x20d [ 635.288563][T23369] should_fail.cold+0x5/0x14 [ 635.293166][T23369] should_failslab+0x5/0xf [ 635.297589][T23369] kmem_cache_alloc+0x40/0x3b0 [ 635.302358][T23369] dst_alloc+0x9e/0x641 [ 635.306521][T23369] rt_dst_clone+0x59/0x880 [ 635.310944][T23369] ip_mc_finish_output+0xb6/0x490 [ 635.315976][T23369] ip_mc_output+0x624/0x700 [ 635.320488][T23369] ip_push_pending_frames+0x125/0x2b0 [ 635.325864][T23369] raw_sendmsg+0x1303/0x2d40 [ 635.330462][T23369] ? up_write+0x191/0x560 [ 635.334798][T23369] ? raw_getsockopt+0x100/0x100 [ 635.339654][T23369] ? aa_profile_af_perm+0x2e0/0x2e0 [ 635.344858][T23369] ? mark_lock+0xbc/0x1710 [ 635.349275][T23369] ? ima_get_action+0x76/0xa0 [ 635.353969][T23369] ? __lock_acquire+0x16e3/0x56e0 09:48:46 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 635.359006][T23369] ? aa_sk_perm+0x316/0xaa0 [ 635.363514][T23369] ? aa_af_perm+0x230/0x230 [ 635.368027][T23369] inet_sendmsg+0x99/0xe0 [ 635.372353][T23369] ? inet_send_prepare+0x4d0/0x4d0 [ 635.377465][T23369] sock_sendmsg+0xcf/0x120 [ 635.381883][T23369] sock_no_sendpage+0xee/0x130 [ 635.386644][T23369] ? sk_page_frag_refill+0x1d0/0x1d0 [ 635.391943][T23369] ? aa_file_perm+0x119/0x1100 [ 635.396706][T23369] ? find_held_lock+0x2d/0x110 [ 635.401471][T23369] ? aa_file_perm+0x5b8/0x1100 [ 635.406239][T23369] inet_sendpage+0x109/0x140 [ 635.410189][ T3840] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 635.410932][T23369] ? inet_sendmsg+0xe0/0xe0 [ 635.422940][T23369] sock_sendpage+0xe5/0x140 [ 635.427454][T23369] ? __sock_recv_ts_and_drops+0x430/0x430 [ 635.433174][T23369] pipe_to_sendpage+0x2ad/0x380 [ 635.438035][T23369] ? propagate_umount+0x1c20/0x1c20 [ 635.443234][T23369] ? mutex_lock_io_nested+0xf60/0xf60 [ 635.448605][T23369] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 635.454675][T23369] __splice_from_pipe+0x3dc/0x830 [ 635.459700][T23369] ? propagate_umount+0x1c20/0x1c20 [ 635.464907][T23369] generic_splice_sendpage+0xd4/0x140 [ 635.470372][T23369] ? __splice_from_pipe+0x830/0x830 [ 635.475565][T23369] ? apparmor_file_permission+0x26e/0x4e0 [ 635.481274][T23369] ? __splice_from_pipe+0x830/0x830 [ 635.486460][T23369] do_splice+0xbcd/0x1820 [ 635.490779][T23369] ? lock_downgrade+0x820/0x820 [ 635.495611][T23369] ? splice_from_pipe+0x140/0x140 [ 635.500616][T23369] ? __fget_files+0x294/0x400 [ 635.505284][T23369] __x64_sys_splice+0x198/0x250 [ 635.510122][T23369] do_syscall_64+0x60/0xe0 [ 635.514525][T23369] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 635.520403][T23369] RIP: 0033:0x45cb29 [ 635.524271][T23369] Code: Bad RIP value. [ 635.528319][T23369] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 635.536725][T23369] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 [ 635.544678][T23369] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.552635][T23369] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 635.560586][T23369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 635.568651][T23369] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 [ 635.577001][T18872] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 635.704023][ T3840] usb 4-1: Using ep0 maxpacket: 8 09:48:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@md5={0x1, "b426db361cc3392f0da8643ecafe711b"}, 0x11, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 635.741041][ T3840] usb 4-1: too many configurations: 9, using maximum allowed: 8 09:48:47 executing program 1 (fault-call:10 fault-nth:9): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 635.820328][T18872] usb 5-1: Using ep0 maxpacket: 8 09:48:47 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x480200, 0x0) accept4$alg(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 635.870668][ T3840] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 635.878341][ T3840] usb 4-1: can't read configurations, error -61 [ 635.907687][ C0] net_ratelimit: 9 callbacks suppressed [ 635.907699][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 635.990460][T23399] FAULT_INJECTION: forcing a failure. [ 635.990460][T23399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 636.003715][T23399] CPU: 1 PID: 23399 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 636.012378][T23399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.022428][T23399] Call Trace: [ 636.025724][T23399] dump_stack+0x18f/0x20d [ 636.030060][T23399] should_fail.cold+0x5/0x14 [ 636.034661][T23399] __alloc_pages_nodemask+0x1a3/0x930 [ 636.040036][T23399] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 636.046025][T23399] ? generic_splice_sendpage+0xd4/0x140 [ 636.051567][T23399] ? do_splice+0xbcd/0x1820 [ 636.056066][T23399] ? __x64_sys_splice+0x198/0x250 [ 636.061102][T23399] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 636.067867][T23399] ? lock_acquire+0x1f1/0xad0 [ 636.072542][T23399] ? fs_reclaim_acquire+0xf/0x40 [ 636.077477][T23399] ? find_held_lock+0x2d/0x110 [ 636.082246][T23399] cache_grow_begin+0x8c/0xb20 [ 636.082368][ T3840] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 636.087006][T23399] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 636.087026][T23399] cache_alloc_refill+0x27b/0x340 [ 636.087049][T23399] ? lockdep_hardirqs_off+0x66/0xa0 [ 636.100767][T18872] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 636.105010][T23399] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 636.105032][T23399] __kmalloc_node_track_caller+0x38/0x60 [ 636.105051][T23399] __alloc_skb+0xae/0x550 09:48:47 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 636.131456][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.134921][T23399] __ip_append_data+0x2882/0x31c0 [ 636.134945][T23399] ? raw_destroy+0x30/0x30 [ 636.134966][T23399] ? ip_finish_output+0x1f0/0x1f0 [ 636.157318][T23399] ? mark_lock+0xbc/0x1710 [ 636.161730][T23399] ? ipv4_mtu+0x331/0x3c0 [ 636.166059][T23399] ? raw_destroy+0x30/0x30 [ 636.170575][T23399] ip_append_data+0x114/0x1a0 [ 636.175259][T23399] raw_sendmsg+0xacc/0x2d40 [ 636.179772][T23399] ? up_write+0x191/0x560 [ 636.184102][T23399] ? raw_getsockopt+0x100/0x100 [ 636.188950][T23399] ? aa_profile_af_perm+0x2e0/0x2e0 [ 636.194149][T23399] ? mark_lock+0xbc/0x1710 [ 636.198573][T23399] ? ima_get_action+0x76/0xa0 [ 636.203269][T23399] ? __lock_acquire+0x16e3/0x56e0 [ 636.205594][T18872] usb 5-1: Product: syz [ 636.208294][T23399] ? aa_sk_perm+0x316/0xaa0 [ 636.208311][T23399] ? aa_af_perm+0x230/0x230 [ 636.218754][T18872] usb 5-1: Manufacturer: syz [ 636.221416][T23399] inet_sendmsg+0x99/0xe0 [ 636.221430][T23399] ? inet_send_prepare+0x4d0/0x4d0 [ 636.221445][T23399] sock_sendmsg+0xcf/0x120 [ 636.221461][T23399] sock_no_sendpage+0xee/0x130 [ 636.221475][T23399] ? sk_page_frag_refill+0x1d0/0x1d0 [ 636.221501][T23399] ? aa_file_perm+0x119/0x1100 [ 636.221515][T23399] ? find_held_lock+0x2d/0x110 [ 636.221532][T23399] ? aa_file_perm+0x5b8/0x1100 [ 636.235232][T18872] usb 5-1: SerialNumber: syz [ 636.235502][T23399] inet_sendpage+0x109/0x140 [ 636.273284][T23399] ? inet_sendmsg+0xe0/0xe0 [ 636.277788][T23399] sock_sendpage+0xe5/0x140 [ 636.282301][T23399] ? __sock_recv_ts_and_drops+0x430/0x430 [ 636.288018][T23399] pipe_to_sendpage+0x2ad/0x380 [ 636.292874][T23399] ? propagate_umount+0x1c20/0x1c20 [ 636.298077][T23399] ? mutex_lock_io_nested+0xf60/0xf60 [ 636.303462][T23399] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 636.309536][T23399] __splice_from_pipe+0x3dc/0x830 [ 636.314563][T23399] ? propagate_umount+0x1c20/0x1c20 [ 636.319769][T23399] generic_splice_sendpage+0xd4/0x140 [ 636.325145][T23399] ? __splice_from_pipe+0x830/0x830 [ 636.330360][T23399] ? apparmor_file_permission+0x26e/0x4e0 [ 636.336089][T23399] ? __splice_from_pipe+0x830/0x830 [ 636.341285][T23399] do_splice+0xbcd/0x1820 [ 636.345621][T23399] ? lock_downgrade+0x820/0x820 [ 636.350475][T23399] ? splice_from_pipe+0x140/0x140 [ 636.355516][T23399] ? __fget_files+0x294/0x400 [ 636.360202][T23399] __x64_sys_splice+0x198/0x250 [ 636.365063][T23399] do_syscall_64+0x60/0xe0 [ 636.369478][T23399] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 636.375364][T23399] RIP: 0033:0x45cb29 [ 636.379246][T23399] Code: Bad RIP value. [ 636.383303][T23399] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 636.391708][T23399] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 [ 636.399682][T23399] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 636.400898][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 636.407640][T23399] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 [ 636.407648][T23399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 636.407657][T23399] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 [ 636.440497][T18872] usb 5-1: config 0 descriptor?? 09:48:48 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 636.480820][T18872] hub 5-1:0.0: bad descriptor, ignoring hub [ 636.486803][T18872] hub: probe of 5-1:0.0 failed with error -5 [ 636.511348][T18872] sierra 5-1:0.0: Sierra USB modem converter detected [ 636.590692][ T3840] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 636.692219][T18872] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 636.700877][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 636.712694][ T3840] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 636.728651][ T3840] usb 4-1: can't read configurations, error -61 [ 636.758675][ T3840] usb usb4-port1: attempt power cycle [ 636.770786][T18872] usb 5-1: USB disconnect, device number 44 [ 636.792833][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 636.807434][T18872] sierra 5-1:0.0: device disconnected [ 637.460161][T18872] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 637.510134][ T3840] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 637.610447][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 637.650165][ T3840] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 637.730075][T18872] usb 5-1: Using ep0 maxpacket: 8 [ 637.780303][ T3840] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 637.787879][ T3840] usb 4-1: can't read configurations, error -61 [ 637.950377][ T3840] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 638.041445][T18872] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 638.055968][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.065311][ T3840] usb 4-1: device descriptor read/8, error -71 [ 638.071705][T18872] usb 5-1: Product: syz [ 638.075862][T18872] usb 5-1: Manufacturer: syz [ 638.082478][T18872] usb 5-1: SerialNumber: syz 09:48:49 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 09:48:49 executing program 1 (fault-call:10 fault-nth:10): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="66e14d9e1b69dd7d4973e02fd1621c5664478faa587e0da2aa18b5881527e14f78d73753aa5fb70dcbdab0b8f7d97a339d3571d41a088ddc395baad13254c58b0f35bdb59d722bbfa0ae16993f7b98171460476fe40927bf1bd907"], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:48:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x8000000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:49 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') r3 = syz_open_dev$vcsn(0x0, 0x0, 0x90800) r4 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x204600, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r2}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x400c802) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xcd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x598}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) 09:48:49 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0) [ 638.088818][T18872] usb 5-1: config 0 descriptor?? [ 638.127696][T18872] usb 5-1: can't set config #0, error -71 [ 638.157668][T18872] usb 5-1: USB disconnect, device number 45 [ 638.172536][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:49 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x50, r0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 638.230255][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x5) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xfffffffe}, 0x1c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @descriptor="349dd3337fd223c7"}}) listen(0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x53, "c956f432e858d518cff6ca956660f79bd6a779f271ad8b541e92c7d01c568aade9069131f5945f251391ada4aee4648ada6adb1b61ea62e037e6feb9994937b9bc607aac9753c939ff2e7e89074811b7d5613c"}, &(0x7f00000001c0)=0x5b) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x986, 0x1, 0x8000, 0x8, 0x0, 0x0, 0x2, 0x80000000, r4}, &(0x7f0000000240)=0x20) [ 638.291099][ T3840] usb 4-1: device descriptor read/8, error -71 [ 638.338127][T23462] FAULT_INJECTION: forcing a failure. [ 638.338127][T23462] name failslab, interval 1, probability 0, space 0, times 0 [ 638.351278][T23462] CPU: 0 PID: 23462 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 638.359950][T23462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.370007][T23462] Call Trace: [ 638.373327][T23462] dump_stack+0x18f/0x20d [ 638.377666][T23462] should_fail.cold+0x5/0x14 [ 638.382356][T23462] should_failslab+0x5/0xf [ 638.386777][T23462] kmem_cache_alloc+0x40/0x3b0 [ 638.391544][T23462] skb_clone+0x14f/0x3c0 [ 638.395792][T23462] ip_check_defrag+0x344/0x600 [ 638.400559][T23462] ? ip_defrag+0x2590/0x2590 [ 638.405159][T23462] ? lockdep_hardirqs_on+0x6a/0xe0 [ 638.410277][T23462] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 638.416515][T23462] packet_rcv_fanout+0x63e/0x890 [ 638.421462][T23462] ? dev_queue_xmit_nit+0x132/0xac0 [ 638.426665][T23462] ? tpacket_rcv+0x3580/0x3580 [ 638.431438][T23462] dev_queue_xmit_nit+0x3a2/0xac0 [ 638.436477][T23462] dev_hard_start_xmit+0xaa/0x950 [ 638.441522][T23462] ? validate_xmit_skb+0x848/0xe60 [ 638.446642][T23462] __dev_queue_xmit+0x2091/0x2d60 [ 638.451678][T23462] ? mark_held_locks+0x9f/0xe0 [ 638.456448][T23462] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 638.461742][T23462] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 638.467724][T23462] ? lockdep_hardirqs_on+0x6a/0xe0 [ 638.472934][T23462] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 638.479097][T23462] ? ip_finish_output2+0x1320/0x21f0 [ 638.484390][T23462] ip_finish_output2+0x1523/0x21f0 [ 638.489523][T23462] ? ip_fragment.constprop.0+0x240/0x240 [ 638.495161][T23462] ? ip_fraglist_prepare+0x38d/0x5a0 [ 638.500461][T23462] ip_do_fragment+0x169f/0x1b60 [ 638.505315][T23462] ? ip_fragment.constprop.0+0x240/0x240 [ 638.510958][T23462] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 638.516940][T23462] ? ip_frag_next+0x9a0/0x9a0 [ 638.521625][T23462] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 638.527802][T23462] ? ip_fragment.constprop.0+0xc0/0x240 [ 638.533355][T23462] ip_fragment.constprop.0+0x174/0x240 [ 638.538823][T23462] __ip_finish_output+0x466/0xbc0 [ 638.543856][T23462] ip_finish_output+0x34/0x1f0 [ 638.548620][T23462] ip_mc_output+0x212/0x700 [ 638.553147][T23462] ip_push_pending_frames+0x125/0x2b0 [ 638.558524][T23462] raw_sendmsg+0x1303/0x2d40 [ 638.563130][T23462] ? raw_getsockopt+0x100/0x100 [ 638.567993][T23462] ? aa_profile_af_perm+0x2e0/0x2e0 [ 638.573202][T23462] ? mark_lock+0xbc/0x1710 [ 638.577633][T23462] ? __lock_acquire+0x16e3/0x56e0 [ 638.582668][T23462] ? sched_clock+0x2a/0x40 [ 638.587095][T23462] ? aa_sk_perm+0x316/0xaa0 [ 638.591602][T23462] ? trace_hardirqs_on+0x5f/0x220 [ 638.596626][T23462] ? aa_af_perm+0x230/0x230 [ 638.601130][T23462] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 638.607290][T23462] inet_sendmsg+0x99/0xe0 [ 638.611644][T23462] ? inet_send_prepare+0x4d0/0x4d0 [ 638.616753][T23462] sock_sendmsg+0xcf/0x120 [ 638.621170][T23462] sock_no_sendpage+0xee/0x130 [ 638.625934][T23462] ? sk_page_frag_refill+0x1d0/0x1d0 [ 638.631235][T23462] ? mark_lock+0xbc/0x1710 [ 638.635658][T23462] ? kvm_sched_clock_read+0x14/0x40 [ 638.640860][T23462] inet_sendpage+0x109/0x140 [ 638.645453][T23462] ? inet_sendmsg+0xe0/0xe0 [ 638.649956][T23462] sock_sendpage+0xe5/0x140 [ 638.654461][T23462] ? __sock_recv_ts_and_drops+0x430/0x430 [ 638.660173][T23462] pipe_to_sendpage+0x2ad/0x380 [ 638.665025][T23462] ? propagate_umount+0x1c20/0x1c20 [ 638.670226][T23462] ? __splice_from_pipe+0x358/0x830 [ 638.675426][T23462] __splice_from_pipe+0x3dc/0x830 [ 638.680452][T23462] ? propagate_umount+0x1c20/0x1c20 [ 638.685657][T23462] generic_splice_sendpage+0xd4/0x140 [ 638.691030][T23462] ? __splice_from_pipe+0x830/0x830 [ 638.696224][T23462] ? apparmor_file_permission+0x26e/0x4e0 [ 638.701956][T23462] ? __splice_from_pipe+0x830/0x830 [ 638.707150][T23462] do_splice+0xbcd/0x1820 [ 638.711504][T23462] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 638.717667][T23462] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 638.723645][T23462] ? splice_from_pipe+0x140/0x140 [ 638.728672][T23462] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 638.734840][T23462] __x64_sys_splice+0x198/0x250 [ 638.739703][T23462] do_syscall_64+0x60/0xe0 [ 638.744124][T23462] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 638.750018][T23462] RIP: 0033:0x45cb29 [ 638.753907][T23462] Code: Bad RIP value. [ 638.757977][T23462] RSP: 002b:00007f2352addc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 638.766388][T23462] RAX: ffffffffffffffda RBX: 00000000005091a0 RCX: 000000000045cb29 [ 638.774356][T23462] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 638.782330][T23462] RBP: 000000000078bfa0 R08: 0000000000019404 R09: 0000000000000000 09:48:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x5c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x71c}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044084}, 0x20008840) [ 638.790298][T23462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 638.798267][T23462] R13: 0000000000000bed R14: 00000000004ceef8 R15: 00007f2352ade6d4 [ 638.820458][ T3840] usb usb4-port1: unable to enumerate USB device 09:48:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x900, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000140)={0x780, 0x600, 0xa00, 0x140, 0x5, 0x8, 0x1, 0x0, {0x40, 0x9}, {0x251, 0x6}, {0x81, 0xfffffe00}, {0x9, 0xa33f}, 0x2, 0x0, 0x3, 0x38, 0x0, 0x7, 0x5, 0x1, 0x8, 0x101, 0x200, 0xffff, 0x0, 0x1, 0x0, 0xb}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r4, 0xad}}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 639.039072][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:50 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="520100089a96850899000006000000000000000000000900002608b21885cef87600400000000000000300008f8a739292d98a"], 0x0) [ 639.079917][T18872] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 639.105534][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:50 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000100)={0x3f, 0x4, 0x400, 0x6, 0x5}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "1e45fcb4bff823f2", "4e6fbba183a8db7656a47a22cb458a1e", "d5240424", "41537b3dda82e89e"}, 0x28) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='\'#)/\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 639.319953][T18872] usb 5-1: Using ep0 maxpacket: 8 [ 639.542169][ T3841] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 639.620191][T18872] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 639.629327][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.638136][T18872] usb 5-1: Product: syz [ 639.642876][T18872] usb 5-1: Manufacturer: syz [ 639.647467][T18872] usb 5-1: SerialNumber: syz [ 639.654428][T18872] usb 5-1: config 0 descriptor?? [ 639.799916][ T3841] usb 4-1: Using ep0 maxpacket: 8 [ 639.931310][T18872] hub 5-1:0.0: bad descriptor, ignoring hub [ 639.937302][T18872] hub: probe of 5-1:0.0 failed with error -5 [ 639.950633][T18872] sierra 5-1:0.0: Sierra USB modem converter detected [ 639.964719][ T3841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 639.972473][ T3841] usb 4-1: no configurations [ 639.977070][ T3841] usb 4-1: can't read configurations, error -22 [ 639.987381][T18872] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 640.020873][T18872] usb 5-1: USB disconnect, device number 46 [ 640.034610][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 640.046112][T18872] sierra 5-1:0.0: device disconnected [ 640.139843][ T3841] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 640.401015][ T3841] usb 4-1: Using ep0 maxpacket: 8 [ 640.579940][ T3841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 640.587726][ T3841] usb 4-1: no configurations [ 640.593383][ T3841] usb 4-1: can't read configurations, error -22 [ 640.600740][ T3841] usb usb4-port1: attempt power cycle [ 640.659929][ T2760] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 640.900241][ T2760] usb 5-1: Using ep0 maxpacket: 8 [ 641.179858][ T2760] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 641.189194][ T2760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.197546][ T2760] usb 5-1: Product: syz [ 641.205510][ T2760] usb 5-1: Manufacturer: syz [ 641.210258][ T2760] usb 5-1: SerialNumber: syz [ 641.218806][ T2760] usb 5-1: config 0 descriptor?? 09:48:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) 09:48:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x10000, 0x0, 0x6}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x0, 0x8917}, @void, @eth={@random="9f96766b00", @dev, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@can={0xc, {{0x3, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "e04bd6954b5ef697"}}}}}, 0x26) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:48:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x1, @bcast, @bpq0='bpq0\x00', 0xa2d, 'syz0\x00', @default, 0x8c, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x100, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:52 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:48:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffff03, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_TARGET_NETNSID]}, 0x40}, 0x1, 0x0, 0x0, 0xeff7c7b04256d841}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x800, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) listen(r2, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x5072b6e9, 0x20004001, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback, 0x4}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x200) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 641.329948][ T3841] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 641.340177][ T2760] hub 5-1:0.0: bad descriptor, ignoring hub [ 641.346158][ T2760] hub: probe of 5-1:0.0 failed with error -5 [ 641.385725][ T2760] sierra 5-1:0.0: Sierra USB modem converter detected [ 641.408152][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 641.440829][ T3841] usb 4-1: Using ep0 maxpacket: 8 [ 641.453860][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 641.466668][ T2760] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 09:48:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x4e32, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:48:53 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f, 0x4}, 0x0, 0x0, 0xea}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000106010100004d000305000100070000000500011007000000"], 0x24}, 0x1, 0x0, 0x0, 0x2004c850}, 0x80) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000004c0)) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000140)=0x9, 0x4) r3 = semget(0x1, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x1410, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0c0}, 0x480e0) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f0000000280)=""/68) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x20, 0x8, 0x6ea, 0x0]) [ 641.600282][ T3841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 641.622575][ T3841] usb 4-1: no configurations [ 641.641854][ T3841] usb 4-1: can't read configurations, error -22 09:48:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000080)=[0xfffffff7, 0x1], 0x2, 0x7, 0x7cc, 0x1, 0xfff, 0x7fffffff, 0x4, {0x8000, 0xffff, 0x7, 0x7fff, 0x200, 0xfff, 0x512, 0x1, 0x8, 0x8, 0x40, 0x9f1, 0x3, 0x80000001, "cca78c8b0e062f4d4862b83d063849201a1772abdd9f86b4662c1a0830cb016b"}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 641.679848][ T2760] usb 5-1: reset high-speed USB device number 47 using dummy_hcd 09:48:53 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0400002c0004072bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="080004009e7ca9876ba4a344ad04a5c092789fc3990f957c840fcd56856c3d8b2561b325a44793f49d48570fd138dff1939084cea1d87bdb2394c6fafaf182d40406e88bf34675431e7c57d33d1b1dd4d0210edf7c11bc83866595388908683c62c9dc0e8b9d753113f629b4a1695f9afa8bb9f2a7af6125c13d8e708e309d228e3a6bcd216e7500ceeae9b2c6e68708b6d18823e10c36", @ANYRES32=r6, @ANYBLOB="0800020027000000"], 0x4fc}, 0x1, 0x0, 0x0, 0x4}, 0x24000001) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x15, 0xa, 0x101, 0x0, 0x0, {0x47122ad202b9781, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700000000ffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000200ac1e000104000600"], 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000300)=r5, 0x4) fsync(r3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x2000, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "67b65f025d50cb6f", "2809424beb54925995de7e722f4e6315869d818c200839dd99c375127ce430c7", "5cd46cc8", "75ef2b03de7dd92a"}, 0x38) [ 641.771348][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 641.809803][ T3841] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 641.904849][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 641.940242][ T2760] usb 5-1: Using ep0 maxpacket: 8 [ 641.946371][ T3841] usb 4-1: Using ep0 maxpacket: 8 [ 641.962653][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 642.020135][ T2760] usb 5-1: device firmware changed [ 642.039716][ T2760] usb 5-1: USB disconnect, device number 47 [ 642.080214][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 642.114636][ T2760] sierra 5-1:0.0: device disconnected [ 642.149840][ T3841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 642.161817][ T3841] usb 4-1: no configurations [ 642.173551][ T3841] usb 4-1: can't read configurations, error -22 [ 642.194328][ T3841] usb usb4-port1: unable to enumerate USB device 09:48:53 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="a02d3ef357adc0a34defc5447dadd8893347125c4a6a5a4ac6c7b78d303eabdcd41e861015dbe562591834b217a748f948610fb75f83ca814c83b60955a818f7ead24a816841590846fe1d5d8ba6813275f3d4ef01a71ab8308bfddda624c653172eabb1df7a9c28c620f6b17ec00a35f7eaacb4aa09d9efd2fcb861bfc016e7d86a266029cdabeeaf91efb02765bc2276b40c14b365899d098942758196d83c4f32d939a0a83f"], 0x0) 09:48:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x4, @dev={0xfe, 0x80, [], 0x2e}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 642.489795][ T2760] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 642.699763][ T2844] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 642.729685][ T2760] usb 5-1: Using ep0 maxpacket: 8 [ 642.969913][ T2844] usb 4-1: device descriptor read/64, error 18 [ 643.009835][ T2760] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 643.018877][ T2760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.027910][ T2760] usb 5-1: Product: syz [ 643.032579][ T2760] usb 5-1: Manufacturer: syz [ 643.037157][ T2760] usb 5-1: SerialNumber: syz [ 643.047190][ T2760] usb 5-1: config 0 descriptor?? [ 643.093479][ T2760] hub 5-1:0.0: bad descriptor, ignoring hub [ 643.099484][ T2760] hub: probe of 5-1:0.0 failed with error -5 [ 643.113623][ T2760] sierra 5-1:0.0: Sierra USB modem converter detected [ 643.301888][ T2760] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 643.350532][ T2760] usb 5-1: USB disconnect, device number 48 [ 643.359721][ T2844] usb 4-1: device descriptor read/64, error 18 [ 643.372822][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 643.402290][ T2760] sierra 5-1:0.0: device disconnected [ 643.629688][ T2844] usb 4-1: new high-speed USB device number 93 using dummy_hcd 09:48:55 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19402, 0x0) 09:48:55 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) pipe(&(0x7f0000000140)) 09:48:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x1, 0x9}, 0x50}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x9, 0xfff, 0x5, 0x7ff}) 09:48:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000001c0)={{0x1, 0x0, @descriptor="8bcde212247ccfbb"}}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000003513c9001000070700"/23, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000200ac1e000104000600"], 0x40}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r7], 0xfffffffffffffeac) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) 09:48:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000080)={0x101}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x853c, 0x1, 0x3ff}, 0xc) 09:48:55 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x440000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 643.859242][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 643.879333][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 643.899696][ T2844] usb 4-1: device descriptor read/64, error 18 09:48:55 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x8000401}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) write$char_usb(r3, &(0x7f0000000140)="3e4fb61e8e26553ba689829f1657200c02c9a0f40d5cdf6e8e94c781b2d395e6a9a75ef812fc4b328ef0a5355d221054f29b7bc6b539d214feea3c35352b6b44a0ecd6933e2ad6285c0355ce2bef9c5ba69b67cc73cd22f50860", 0x5a) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 644.007792][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 644.043375][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:48:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x34d4, 0x101800) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x141002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 09:48:55 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x103800, 0x0) ioctl$FITHAW(r2, 0xc0045878) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 644.209672][ T2760] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 644.299877][ T2844] usb 4-1: device descriptor read/64, error 18 09:48:55 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400000, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x8, {0x7, 0x1f, 0xf63, 0x142, 0x401, 0x8, 0x81, 0x9}}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r3, &(0x7f0000000740)="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", 0x592) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 644.420708][ T2844] usb usb4-port1: attempt power cycle [ 644.479747][ T2760] usb 5-1: device descriptor read/64, error 18 [ 644.869654][ T2760] usb 5-1: device descriptor read/64, error 18 [ 645.129578][ T2844] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 645.140669][ T2760] usb 5-1: new high-speed USB device number 50 using dummy_hcd 09:48:56 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x121000, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000080)={"9860de414834b533cb12f8f6668e9c5d4c2c57b6d89107e5267b3809794381d7f5a938f75b42050af59da481839389100f10491e58e378ec183b8f835858a2e88c5b6dfd171aa480cdfad6df0a0d7b16444c0e463afdbc44ad16304ed82ac72ad2777dfa3ff53232a2bc5abe7c3b028846e9b54d8033e3adc1c11cca9eaca26ba44792fcf909de8d5afc5ac6541465d765b94fda5cf78b4806d7fe38f1489c0142b493b8ffed47181607a962a9f7cd76a4205b75a521e1fa179990316a844a51605e2aa63585d15238cbfb440d9d812a3a2039f9f68f72b2cbc2ba18d2c1e443167002e5134a4718edc6af5542da7da6debf4d5f2d3efc1fa1f9c9494a2256d869ec6ed59a9dcae9b5d60fb1c7b1341cf920c1de4e283dc52f267d0a9b7280ab19aa986b4bc062bbfa05deddfb45b2b2fb39b29bebc977489adf8252c1db4a0c0bcf02e753eecb2a98fa5320613bbafc3d8a8b07c0864fced0a55e933cba0efbeb6c4848684c486c3c4bc61bf8138b000f3a12f6cf76e0db913b88b50dee2fe325654d753d89340a8abca100cd7f4bc47063a4fbf49207bc84265c9dc9213b09f5df60318003a4e76c9dff5980b77b7857c1e47d813008e3518982b48ddad4f8a15f92d9937a3ba9a35ab247d6b17c32f97956147880073a9491d342422afa0cd0c053afedca7f733ae67aeaa3cf9f8b938aef7575398bfb66e9f4454adaeda7287ae99c45038315987fd44640c0fef3b761c5be42b7625b82b64337935a44f12bb8c38694dee70242f2e7e89e24f903633ac3f14ef6173b474c3a5ea8a77e7e94ff3dae9894998b42dedff13e70b5648a763c9b54166e850e3580f1965de49cfa275c37a4439f35772375c28ce9243e167543215efd1e809eb3bc958a5986f0ecdb59e1091515c41fb4e8a5cee071c166f8b9b91b71ff18be4643af096fa94c08936c979a8566e91f262d395b472d765eea973f4fb3ea1d34b28061b984b94ecd07d702e7718795b9be2a318636e5e0f03556ab51b43fd62f543fab29de576cf3e36b3039ce7201e4cef844f78accc128ce9f7ad7ebe8b69211406d11e135a047eeff940004000000000000c994f97dd823cce40f2254e474c22500000000e10e000000000000a17bbbb03ac705ed08b4e5d196487821fe7245d7fb33e63de4ca128f06cccb9cf6fb94ac6897a5c61f785d4887d1ee6d0278b0b4798f085a6b3a9927034d883368a6d014ce1ad42313c27732f8a9a5efb9e0108fc082efa41e43f4523e6710af19ba514ea75f01a121cf6e2e1bbd53212093219c3c94990b09bbb9181bf4d56e3da2494e0335593d79f16726a851a9815255686e9585a4b36ac224058f52dbb3fa5847a850d8995f4a8a55bce5f11754acfb073367baba406f9c9236232b9c78b03ad350333e309bdc00"}) epoll_create1(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68528991122689d0901020301090212000100000000090400000009"], 0x0) 09:48:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20044084, &(0x7f0000000040)={0xa, 0x20004e22, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "953400", '\x00', "7ee51430da3f51b3"}, 0x28) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000080)={0x6, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000180)={0x10, 0x2, {0x56, 0x9, 0x101, {0x7, 0x8}, {0x3d9, 0x72d}, @period={0x5b, 0x7, 0x4, 0x101, 0xfff, {0x20, 0x4, 0x3, 0xe6}, 0x8, &(0x7f0000000140)=[0x200, 0x6, 0x1, 0xcc, 0xa6ad, 0x1, 0xfff7, 0x4]}}, {0x51, 0xb34b, 0x1f, {0xff24, 0x8}, {0xe74, 0x40}, @const={0x7, {0x100, 0x6, 0x9, 0x9}}}}) 09:48:56 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x21400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:56 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19403, 0x0) 09:48:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x8dc, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x83, &(0x7f0000000040)=@assoc_value={r5}, 0x8) close(r2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 645.300419][ T2844] usb 4-1: device descriptor read/8, error -61 09:48:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x1, 'lo\x00', {}, 0x3f}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 645.370652][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 645.409555][ T2760] usb 5-1: device descriptor read/64, error 18 [ 645.509902][ T2844] usb 4-1: device descriptor read/8, error -71 [ 645.799531][ T2760] usb 5-1: device descriptor read/64, error 18 [ 645.920493][ T2760] usb usb5-port1: attempt power cycle [ 645.999512][ T2844] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 646.089595][ T2844] usb 4-1: Invalid ep0 maxpacket: 40 [ 646.095309][ T2844] usb usb4-port1: unable to enumerate USB device [ 646.649514][ T2760] usb 5-1: new high-speed USB device number 51 using dummy_hcd 09:48:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0xc1b4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {}]}) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0x4}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyprintk\x00', 0x40, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000280)=0xdb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "44893400"}, 0x28) 09:48:58 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3987, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r4, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 646.829631][ T2760] usb 5-1: device descriptor read/8, error -61 09:48:58 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19405, 0x0) 09:48:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@dev={[], 0x3e}, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @local, @multicast1}}}}}}, 0x26) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x80000010, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f00000005c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x10, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000006c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="fe40771abc94540000e00000000000070012800b00010067656e657665000010000200ac1ed6618abf0600"], 0x40}}, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES64=r5, @ANYRES32=r6], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x10045, 0xc) 09:48:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r2, 0x0, 0x2, &(0x7f0000000080)='#\x00'}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) [ 646.931072][T23713] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 09:48:58 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x410643, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000200)=0x7a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote, 0x7}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000180)="d5c1d93c20273be0500c3f185fdb7c449fd358e0f7c6433e36e571e033bff40f50c549ec667ede841867e5d4dc78a2ed50f3d22672886aa3e557fdfd1e7a54b436ad0c145435f7d7aec725798509ff9200c2afbaeaa1", 0x56, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 647.039592][ T2760] usb 5-1: device descriptor read/8, error -71 [ 647.539486][ T2760] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 647.729625][ T2760] usb 5-1: device descriptor read/8, error -61 [ 647.999658][ T2760] usb 5-1: device descriptor read/8, error -61 [ 648.119537][ T2760] usb usb5-port1: unable to enumerate USB device 09:48:59 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="5201ba00047dc5941139020000000000090202edf07a0f8a929e0300220009000000"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/74, 0x4a}], 0x1, 0xdb46) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x9, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x4, 0x5}) syz_usb_connect(0x0, 0x2e5, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xdf, 0xee, 0x92, 0x0, 0x421, 0x275, 0x8949, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d3, 0x1, 0x59, 0xb2, 0x20, 0x6, [{{0x9, 0x4, 0x92, 0x1, 0xe, 0x2, 0x2, 0xff, 0x5, [@generic={0x83, 0x4, "1067cdb168359f7ee28d19a2b35d21461747310fe0fbb4e3ce7042b7a3966dffd6348dcfcad5c6337491c44c1ccab47f5a035d95b87f1d53845f5c22d16f84760b1963be701bb860a701220c08479d316e2ee941a7febc77a549efa9c0d648ea4c74a8d9b91636377753726ded1c832bb230fea57fbb19de50e3499bde0c52f6ff"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "4fd4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x91, 0x8, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfff9, 0x0, 0x80}]}], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0x81, 0x40, 0x1f}}, {{0x9, 0x5, 0xf, 0x4, 0x0, 0x7, 0x81, 0xd7}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x0, 0x9, 0x4, [@generic={0x47, 0xf, "fcda922c2a14f6d06da08aa05838d9670868e25d0ead7d23a6a7ae7374921d465a8ac25741ca99e6e918cc2401fa643bd76241ad6098ba71e67461a0846df84e62a600c555"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x1, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x81, 0x9, 0x70, [@generic={0x87, 0xe, "904b7611070949891ae0bb22583bf7caddbfcf171bd386bb4bb025e45b3f7102ab745733662bcdd31427c0c2d556348d10f48039b9870cc90fd5f9863e969acbb4edb6e3803cf9edfcee8342bce5ecab7b3d233376f37f74405423c46832c42a2219109abf0124198f0f2ba7d0c8e38c03ba197cd1219b909f92d8c7ec7eecc647b83224c6"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0xff, 0xf7, 0xc}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x6e, 0x81}}, {{0x9, 0x5, 0x8d, 0xc, 0x20, 0x0, 0x80, 0x4, [@generic={0x78, 0x2, "9aa3a321a95a54e8b1bfbf7c07f0c000b0c91fd2042d30cb32f40d011437238989c0a23f776355e300be2c1c89c53b7d0109d9250a26636fbc07846297a1e60c7a6165943f9d16ea28ba9c3b633bb376edd09cc755d13717c0b33bb392373662719fadfaf38ca8e3d5f12b98d41e9de78437c6891762"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0xb51}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x40, 0x7f}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x3, 0xfe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x6}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x4, 0x3, 0x3e}}, {{0x9, 0x5, 0x5, 0x14, 0x8, 0x0, 0xac, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8d, 0xff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x8, 0x10, 0xf9, [@generic={0x36, 0x23, "fa83a9530ae82deb5e1fd7e8e855d89c9ff00884c8b4584bee4ad93810e0d2e968dc6cc8e5e9f1ddb1f75642d8251183a77fcc6d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7e, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x45, 0x40, 0xff}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x6, 0x4, 0x40, 0x0, 0x1}, 0x19e, &(0x7f0000000600)={0x5, 0xf, 0x19e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3a877d5407d898ef, 0x6, 0x3f, 0x5}, @generic={0x66, 0x10, 0x3, "b2c7a3574653702bd551e70bedf67a4d6e06ea87e401fed4872bcc01ed9621abd16b417888f018c7e62c9f7bb9908b7f9d1ecd90efa5282054ef34ba517a5e85d8c1739e3a4bdee1b7142add66c65aca240c1e83ab0f26beef696552d87274f387e04a"}, @ssp_cap={0x24, 0x10, 0xa, 0x22, 0x6, 0x1, 0xf00, 0x8, [0xd2cb4e2627067f07, 0x0, 0xff00cf, 0x30, 0xf, 0xff0000]}, @generic={0x41, 0x10, 0xb, "112b2e2f53dc7c1795850bd2f335e5dcc706082c390715266c3dee73d45d69b13ee5da1e763b8092aff3d41d8fc7df3d70dd6474ff7074fe3243779d6920"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0xf, 0x1}, @generic={0xbd, 0x10, 0x1, "2462b6471953871d6e4dc0c10e806eb4c08d1f6b0e9b43af130fc0823eb6fc04997d2476a078303812847dd89ffede1502a42bd3e812d2bfb238756eea47aef31abd70770f4c97538ccc5997148966f25111fb63ef49a89b1ebee87c96440c3f3b8eb2a3ded8b6c6cae9deb6a84811b7bcd9546086c48c14e7f9222d33275d83386ee4753a7e8fec784dedfe6b12a8193983fd8bda06c9693943e14021a0415b5c3deb53deaafe5a26f002d1e006cd2ceba2814ae5b203bb7e38"}]}, 0x5, [{0xef, &(0x7f00000007c0)=@string={0xef, 0x3, "6df327cbd284cccf8bd0e0915303714676ff54a746d28eaaadc0086719318a0536ad43a14a86bc3c4a8a6282ce65f68e411819359f0089af2a9a39dbabbc320d5bc1a77dbf0af13387bb7d4ded7936fecba8570d53f0cfc96cdbf254a0fc1300feb9b394f3ff17c31a22814a9c3f730b4eb7d3e1c07d8c4a4dbba30ecb276ad535fef85816c62fd6ed850b6e8466b0ffdf5aba6239af6fdc0f0e7f203b6ccfba637de64c4afb379f156b2cee671e290d3e0f15de6fdfc54de775ba4af720d101d083bf8000027e1ca0679740fbc31703ac59c2d3a9f5cf0a4bfe25af71094cf3f71a3a11b6b86d90c30467ed5f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x424}}, {0x3f, &(0x7f0000000940)=@string={0x3f, 0x3, "1bcfb0806f470b9dd78be4aaee5b03a4ec299bac28569ba9c0f8e9f95411a36f0ea9181f8f6b17b8ddc8dc5023f00857ee36809846a14005ed3069ef7e"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xe3}}]}) 09:48:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x22) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r9) fsetxattr$system_posix_acl(r8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08030100", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r9, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0x0, r7, r9, 0x83}, 0x2, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:48:59 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xffffdfffffff7191) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr, 0x7ff}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f0000000240)=@getaddr={0x0, 0x16, 0x300, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000004ec0)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004e80)={&(0x7f0000000800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf25030000005000018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB="05000300060000000500020004000000"], 0x74}, 0x1, 0x0, 0x0, 0x8000021}, 0x4008011) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20044004, &(0x7f0000000040)={0xa, 0x4e1e, 0x0, @empty, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:48:59 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19408, 0x0) 09:49:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x28c, 0x0, 0xc8, 0xc8, 0x0, 0xc8, 0x1c4, 0x1a0, 0x1a0, 0x1c4, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ipv6={@private1, @loopback, [], [], 'bond_slave_1\x00', 'ip6_vti0\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2e8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000040)=[0x0], 0x1, 0x800, r3, r4}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000080)={r3}) [ 648.585750][T23741] device bridge6 entered promiscuous mode 09:49:00 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x20c080, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe002, 0x4}, 0x1004, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xb5d, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x75c}, 0x803e0d109e12dc7e) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x1, 0x3, 0x2}, 0x826}}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x218882, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000e0cc1000050735bd7000fedbdf25000000000000000000ef5228ab942a8790339382b3953c2419", @ANYRES32=0x0, @ANYBLOB="0000000000030000240012800b0001006765766500001400028008000200ac1e0001060005004e2400000000"], 0x44}}, 0x0) fcntl$dupfd(r3, 0x0, r4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "63e1d936923f2fb6", "da87d03ced4d989bb9d918e0021f89c0", "5d27fd11", "1d7d4afc7affb7ab"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 648.820695][ T2760] usb 4-1: new high-speed USB device number 96 using dummy_hcd 09:49:00 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) userfaultfd(0x800) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = accept4(r0, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x80, 0x800) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}}, {{0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}}}, 0x108) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x20, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="388000000e2f85a0b3cdee95c8a360a0664c5fac6d2753d91825e306ea7f04049732fb228519701df646c364f3b60198cbdcb8ce618d9050b77f8b17f1dc316b66b411f48e26c8096ee2678a9084c343cbaa0a08e8ee54fec7eca986c9b875f82f88aec7dbb128d98f8793c0c64d5de6a12cb62c35edf26358f6d65a29f99c1023091d5c5170eab5bfa3160d5780f2b4f41d9986dc2800346120", @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000280003800800010001000000140002007663616e3000000000000000000000000800030000000000"], 0x3c}}, 0x0) 09:49:00 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 649.089333][ T2760] usb 4-1: device descriptor read/64, error 18 09:49:00 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000140)={0x3ff, "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"}) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000280)="e9cbb8a110000000000000000000", 0x58, 0x80, 0x0, 0x0) 09:49:00 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) accept4(r2, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80, 0x80800) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 649.519385][ T2760] usb 4-1: device descriptor read/64, error 18 [ 649.799365][ T2760] usb 4-1: new high-speed USB device number 97 using dummy_hcd 09:49:01 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="5201000152b68508991122689d0901020301090212000000000000090400000009"], 0x0) 09:49:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x364f2fa364d50c5d}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065fff70000fff500000000000800", '\x00', "7ee51430da3f51b3"}, 0x28) [ 650.095167][ T2760] usb 4-1: device descriptor read/64, error 18 [ 650.489300][ T2760] usb 4-1: device descriptor read/64, error 18 [ 650.509265][T18872] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 650.620537][ T2760] usb usb4-port1: attempt power cycle [ 650.749213][T18872] usb 5-1: Using ep0 maxpacket: 8 [ 650.869387][T18872] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 650.877742][T18872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 651.049423][T18872] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 651.058547][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.066766][T18872] usb 5-1: Product: syz [ 651.071199][T18872] usb 5-1: Manufacturer: syz [ 651.075838][T18872] usb 5-1: SerialNumber: syz [ 651.087023][T18872] usb 5-1: config 0 descriptor?? [ 651.129955][T18872] hub 5-1:0.0: bad descriptor, ignoring hub [ 651.135938][T18872] hub: probe of 5-1:0.0 failed with error -5 [ 651.148769][T18872] sierra 5-1:0.0: Sierra USB modem converter detected [ 651.349210][ T2760] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 651.357259][T18872] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 651.400336][T18872] usb 5-1: USB disconnect, device number 53 [ 651.415046][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 651.427988][T18872] sierra 5-1:0.0: device disconnected 09:49:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96d7000000aa59aaaaaaaa0008004520001423de00000067907800000000e00000"], 0x26) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e6576650000000600"/40], 0x40}}, 0x0) splice(r6, 0x0, r1, 0x0, 0x23, 0x2) 09:49:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:03 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19409, 0x0) 09:49:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "0618000000000100"}, 0x28) [ 651.459965][ T2760] usb 4-1: Invalid ep0 maxpacket: 148 09:49:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x453, 0x8, 0x70bd2c, 0x25dfdbff, "6fdc3a3f5295c9ddd343f8c299557f3b15fcc185eecf8262fbf8fa45e229ed649d184234c899a9e69178b8317cf22c78fafcd6e1388bcf4935ab5eb3ad0c5fc19a0d09cb1bf8febfc6c880", ["", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x48010}, 0x40000c0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [], 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}]}, 0xc8) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x434, 0x3f4, 0x800, 0x70bd25, 0x25dfdbfd, {0x10, 0x0, 0x2e, [0x3, 0x1, 0x101, 0x48a, 0x8, 0x3, 0xff, 0x2, 0x1, 0x1ff, 0x101, 0xd21, 0x800, 0x1, 0xfff, 0x8, 0x7fff, 0x7f, 0x3f, 0x8c, 0x3, 0x4e9, 0x3, 0x2, 0x6, 0x6, 0x0, 0x6, 0x1, 0xe4e, 0x6, 0x7, 0x6, 0x8, 0x4f52, 0x7ff, 0x3, 0x8, 0x7, 0x0, 0x3f, 0x3, 0xfffffffd, 0x1f, 0x0, 0xfffffff7, 0x68a2, 0x6de0, 0x0, 0x3c, 0x3539, 0x9, 0x932, 0x9, 0x48, 0x10000, 0x2, 0x5, 0x0, 0x2, 0x401, 0x787, 0xfffffffc, 0xffffffa5], [0x2, 0x6, 0xfff, 0x5, 0x7fff, 0x26, 0x7, 0x100, 0x2, 0x7, 0x3, 0x19, 0x1, 0x7, 0xacf, 0xffffffff, 0x51, 0x0, 0x8, 0x7fffffff, 0x4, 0x6b, 0x0, 0xff, 0x10000, 0x200, 0x1000, 0x0, 0xcb, 0x1, 0xffffffc0, 0x6, 0xef4, 0x7, 0x5, 0x80000, 0x6, 0x8, 0x8000, 0x2, 0x9d78ddf, 0x401, 0x8187, 0x1c62, 0x4, 0x9, 0x8001, 0xfffffff0, 0x3, 0x6, 0x80, 0x1ff, 0x0, 0x2, 0x1, 0x71f, 0x20, 0x2, 0x400, 0x3, 0x1000, 0x6, 0x3, 0x8000], [0x7b3, 0x9, 0x1, 0x80, 0x3ff, 0x5, 0x0, 0x3ff, 0x10001, 0x3, 0xee41, 0x1, 0x8, 0x0, 0x3ff, 0x54, 0x4, 0x0, 0x4, 0x1, 0x9, 0x6, 0x87, 0x9, 0x1, 0x0, 0x1, 0x6, 0x7fffffff, 0x7, 0x1, 0x8, 0xd6, 0x8000, 0x0, 0x10001, 0x5, 0x7fff, 0x3, 0x1, 0x3ff, 0x9, 0x1ff, 0x6, 0x401, 0x5, 0x7, 0x8, 0x2, 0x2, 0x6f38, 0x81, 0x6, 0x8, 0x8, 0x4, 0x2, 0x2000, 0x2a4e8000, 0x3f, 0x81, 0x9, 0x6, 0x19], [0xffffffff, 0x4, 0x0, 0x7fff, 0x6, 0x4, 0x9, 0xa7, 0x3, 0x2, 0x7bb0, 0x3, 0x9, 0x7, 0xff, 0x6, 0x3, 0x0, 0x7ff, 0x4b5, 0x2, 0x6, 0x0, 0x2, 0x1f, 0xf52f, 0x8, 0x80, 0x0, 0x9, 0xffffffff, 0x1, 0x2, 0x10001, 0x80000001, 0xc000, 0x800, 0x7721, 0x8, 0x0, 0x904, 0xfffffffb, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x24, 0x1ff, 0x8000, 0x7fffffff, 0x8, 0xfffffffe, 0x8, 0x2, 0x1ff, 0x1ff, 0x1f, 0x7, 0x7fffffff, 0x4, 0x9, 0x2], 0x12, ['\\:\\%,/\x9f\x00', 'net/route\x00']}, [""]}, 0x434}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) r4 = dup(0xffffffffffffffff) read$midi(r4, &(0x7f0000000800)=""/30, 0x1e) setuid(r1) setfsuid(r1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 651.657203][T23826] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 09:49:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfffffffd) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000140)="7fc1b16a684d9daab234c256ad8d299d40dd479c717479dcb47111476ab8b246cc0c94b6068eb72c3b5e2cb38444aed7966d88e1ea6033d7038ef521ba8eecae01e0760bbd5686438ff57d5d051a9caa3d350439068a8a", 0x57}, {&(0x7f00000001c0)="f33d3429c949aef59b43f9261f4e35dc82e3b0ac03b9", 0x16}, {&(0x7f0000001340)="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", 0x1000}], 0x4, &(0x7f0000002340)=[@iv={0x98, 0x117, 0x2, 0x7f, "a48ee5c1b63db0a500e02c2311e50e8e3fd2bf830c9f80eaf4316eede8e407248b69c43bcd027ad6f2dcc35d17b20e6cb9ffd2bf89a203937d1bf0bbbd5675566a05ef099a4632fe50d5c7d4aa5352d8790bf0ae4d70f36fe9746266b7ff731d3576eccd0a3852fdb9cdef7fadfa980d00fe5348dc9df2b037675f64256314"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x70, 0x117, 0x2, 0x5a, "92a827d14945ae7ae09d7abe75bf4134ab299a2aa90bb6f008f15a117cc588928f7bdf693e5032f73a9ff74b82b4b317b30d0d67fdb41f766cfb7d1fecddc713d581f5475e72cf76517aa7db7a98756c912802269d211bd356bd"}, @assoc={0x18, 0x117, 0x4, 0x400}], 0x168, 0xc801}, 0x24040800) 09:49:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x7f, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x48040, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0xfea4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000140)={0x5, 0x0, 0x100c, 0xf96d, 0x80000001, 0x10000, 0x0, 0x1}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 652.100219][ T2845] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 652.129554][ T2760] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 652.250452][ T2760] usb 4-1: Using ep0 maxpacket: 8 09:49:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) r5 = openat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4ec, @mcast1, 0xff}, r4}}, 0x30) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 652.359534][ T2845] usb 5-1: Using ep0 maxpacket: 8 09:49:03 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19410, 0x0) 09:49:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 652.499977][ T2845] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 652.511568][ T2845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 652.559764][ T2760] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 652.568838][ T2760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.608998][ T2760] usb 4-1: Product: syz [ 652.620898][ T2760] usb 4-1: Manufacturer: syz [ 652.632599][ T2760] usb 4-1: SerialNumber: syz [ 652.653710][ T2760] usb 4-1: config 0 descriptor?? [ 652.691053][ T2845] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 652.709995][ T2760] hub 4-1:0.0: bad descriptor, ignoring hub [ 652.715986][ T2760] hub: probe of 4-1:0.0 failed with error -5 [ 652.732100][ T2845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.743364][ T2760] sierra 4-1:0.0: Sierra USB modem converter detected [ 652.755074][ T2845] usb 5-1: Product: syz [ 652.760037][ T2845] usb 5-1: Manufacturer: syz [ 652.764913][ T2845] usb 5-1: SerialNumber: syz [ 652.781759][ T2845] usb 5-1: config 0 descriptor?? [ 652.830061][ T2845] hub 5-1:0.0: bad descriptor, ignoring hub [ 652.836005][ T2845] hub: probe of 5-1:0.0 failed with error -5 [ 652.848899][ T2845] sierra 5-1:0.0: Sierra USB modem converter detected [ 652.924633][ T2760] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 652.960140][ T2760] usb 4-1: USB disconnect, device number 99 [ 652.974794][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 652.989593][ T2760] sierra 4-1:0.0: device disconnected 09:49:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x58a, 0x400, 0x6, 0x81, 0xfff, 0xa1c1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="5201000052b6850899090102030109021200010000000009040000000900000000f4e6725c7a36c2c760b14707487b4608ed73fcb5de7a836a43f0217c189d4f7fc0b95ab471a886f4"], 0x0) 09:49:04 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000200d7000000aaaaaaaaaa00080045000014000000000067907800000000e0000001"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 653.043579][ T2845] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 653.090125][ T2845] usb 5-1: USB disconnect, device number 54 [ 653.125364][ T2845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 653.146301][ T2845] sierra 5-1:0.0: device disconnected 09:49:04 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e657665000010000280080002000600"], 0x40}}, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xb093, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = openat2(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x6900, 0x10, 0x12}, 0x18) fsmount(r4, 0x1, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004044, &(0x7f00000001c0)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x801, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x0, 0x9, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0x8, 0x1, 0xf6, 0x52, 0x9, "09ad26a1"}, 0x800, 0x1, @fd=r6, 0xd0}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x8847c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6}]}}}]}, 0x3c}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x19, 0x4}, {0xfff1, 0x9}, {0xc, 0x3}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x48810) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 653.390048][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 653.579139][ T2845] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 653.699187][T18872] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 653.849110][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 653.890378][ T2845] usb 5-1: no configurations [ 653.895128][ T2845] usb 5-1: can't read configurations, error -22 [ 653.939135][T18872] usb 4-1: Using ep0 maxpacket: 8 [ 654.049080][ T2845] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 654.229690][T18872] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 654.238750][T18872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.258990][T18872] usb 4-1: Product: syz [ 654.263161][T18872] usb 4-1: Manufacturer: syz [ 654.267738][T18872] usb 4-1: SerialNumber: syz [ 654.274253][T18872] usb 4-1: config 0 descriptor?? [ 654.309141][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 654.329887][T18872] hub 4-1:0.0: bad descriptor, ignoring hub [ 654.335867][T18872] hub: probe of 4-1:0.0 failed with error -5 [ 654.347735][T18872] sierra 4-1:0.0: Sierra USB modem converter detected [ 654.363484][ T2845] usb 5-1: no configurations [ 654.368272][ T2845] usb 5-1: can't read configurations, error -22 [ 654.374820][ T2845] usb usb5-port1: attempt power cycle 09:49:06 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xff, 0x4, 0x400, 0x20, 0x5, 0x2f}, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 09:49:06 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:06 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1c006, 0x0) 09:49:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'\x00', {0x7, 0x4e20, @private=0xa010102}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaa0008004500001400000080006790e0000001"], 0x26) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r5) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08030100", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506c3048e4ce31ec20d66bda38b3832f60c6c99c23c8692c29b14775b70c44b0cebd6b86d8ed3292277e5903c90f8ef508fae9e475a3365483e3f8bda25e453ed50ecefce2f31c416d3d92876bac9a638957d5c0770da9e388a8987dfa2e3978754e156644caa05d01dc42b8a60618edbb0ade436e3d3f864cf571e166b3f9a6af70dc1c0837189b69518038a66818c9ecd823e020eb58eed5b080ce5e2fdb9382cb7c65b19a618e7fe7380254b1f551f88c1bbaa8876565429e632da9c251e86", @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000180)={0x90, 0xffffffffffffffda, 0x4, {0x1, 0x0, 0xffffffff80000001, 0x8, 0xc7, 0x1f, {0x2, 0x7ff, 0x1, 0x8000000000000, 0x7ff, 0x10000, 0x4, 0x2, 0x6, 0x2, 0x3, r3, r5, 0x35, 0x9e79}}}, 0x90) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 09:49:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/216) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 654.575534][T18872] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 654.649834][T18872] usb 4-1: USB disconnect, device number 100 [ 654.685712][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 654.744064][T18872] sierra 4-1:0.0: device disconnected 09:49:06 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x420800, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x401, 0x4) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000200)={0x1f, 0x31424752, 0x3, @discrete={0xffffffff, 0x1}}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xfeb6, 0x40, 0x0, 0xfffffffffffffe6f) 09:49:06 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 655.109032][ T2845] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 655.149288][T18872] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 655.212188][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 655.254934][ T2845] usb 5-1: no configurations [ 655.259896][ T2845] usb 5-1: can't read configurations, error -22 [ 655.398980][T18872] usb 4-1: Using ep0 maxpacket: 8 [ 655.419024][ T2845] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 655.529147][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 655.579083][ T2845] usb 5-1: no configurations [ 655.584354][ T2845] usb 5-1: can't read configurations, error -22 [ 655.591787][ T2845] usb usb5-port1: unable to enumerate USB device [ 655.679137][T18872] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 655.688285][T18872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.697441][T18872] usb 4-1: Product: syz [ 655.702245][T18872] usb 4-1: Manufacturer: syz [ 655.706842][T18872] usb 4-1: SerialNumber: syz [ 655.713853][T18872] usb 4-1: config 0 descriptor?? [ 655.763280][T18872] hub 4-1:0.0: bad descriptor, ignoring hub [ 655.769448][T18872] hub: probe of 4-1:0.0 failed with error -5 [ 655.775985][T18872] sierra 4-1:0.0: Sierra USB modem converter detected [ 655.976724][T18872] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 656.009856][T18872] usb 4-1: USB disconnect, device number 101 [ 656.023436][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 656.035885][T18872] sierra 4-1:0.0: device disconnected 09:49:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x10000, 0x0) write(r2, &(0x7f0000000140)="f8550c305e4202ccc835e633bce70a67e0b5b754e8f8116b13fed17be831f337d5bfd1cffaa6656bb1b3baaea51ff13aafd2f91e1b2e28723f2dd325eaefb5df3183c26fc3180fe17bc898391d5854650a5736db77ebe790a074d0e384a9daf176a13efca8b0846cdce472dd3f8b005f1285711e73a1b026674555b4b54f033ff6431a53e3395a1332664482e5980a0e89062368c610158e490242cfcc861e67b4c1e52fc874aaf8eff1103ebfca29e1b41c2469fc13bb9b31a15432d422bfa430b46d00927c34864ad4cb2e7e7b0e71183f58c83b6a6ec3b9911b008cbc0eaa25dd339bcbc8eb5075fe26", 0xeb) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:07 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{}, {0x4, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x3}, {0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}], 0x40) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:07 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x2) 09:49:07 executing program 4: time(&(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="521f4825199c0825d81122689d090102030109021200010000000000000000000918e02b210df107a304c2babef09052def172d500ede45175966994bda6985220459ffc2fb991ceb07dfc3057dbe4f1d4b142e31628311a61fab8cccde015a7bf2254ed2fba1c60d0088c446fb7ddaa5424c8bc63e9f02d3374444312da08ff00000015b15e13a5b461aaf435eb293f3035bc3864ca66dcb0b8757fea5b83da121fd2348b15766ef0871d682b2a468372b35a801799724acdb8dd8e6329a2ed8a19c214ae67258227be8a84e4bc906504a649ee91729734ac078a2f102e66a150d5c4"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@local}, &(0x7f0000000040)=0x14) 09:49:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'ip_vti0\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x86dd}, @void, @llc={@llc={0x7e, 0xfe, "ca", "bddf3fa3447e0a98546323ae73ca3a719f2d980a6a7048cae1e8c8c15aae90e62d53e430549f2cef3f18c70d0d034693269d0bbcbb860bfa3e9bb807cc9348825c66420c174593705094a6a3721116a29c7943df65a43b5716da31028cdb2f"}}}, 0x66) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0xd) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) [ 656.638956][ T2845] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 656.738972][ T3840] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 656.958954][ T2845] usb 5-1: device descriptor read/64, error 18 [ 656.978993][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 657.259760][ T3840] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 657.268852][ T3840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.276812][ T3840] usb 4-1: Product: syz [ 657.282233][ T3840] usb 4-1: Manufacturer: syz [ 657.286821][ T3840] usb 4-1: SerialNumber: syz [ 657.296723][ T3840] usb 4-1: config 0 descriptor?? [ 657.340019][ T3840] hub 4-1:0.0: bad descriptor, ignoring hub [ 657.346012][ T3840] hub: probe of 4-1:0.0 failed with error -5 [ 657.357579][ T3840] sierra 4-1:0.0: Sierra USB modem converter detected [ 657.368941][ T2845] usb 5-1: device descriptor read/64, error 18 09:49:09 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901000000800000000000000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) move_mount(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x40) 09:49:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @ethernet={0x306, @remote}, @hci={0x1f, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='bridge_slave_1\x00', 0xfff, 0x0, 0x8}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:09 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00') ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000940)='./file0/bus\x00', 0x6210, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000100)='./file0\x00', r4, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') syz_init_net_socket$ax25(0x3, 0x0, 0xca) preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000140)=""/169) 09:49:09 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x4) 09:49:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @private=0xa010100}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 657.550688][ T3840] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 657.620007][ T3840] usb 4-1: USB disconnect, device number 102 [ 657.648964][ T2845] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 657.650967][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 657.733972][ T3840] sierra 4-1:0.0: device disconnected 09:49:09 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @loopback, r6}, 0xc) [ 657.954883][ T2845] usb 5-1: device descriptor read/64, error 18 09:49:09 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000005540)=[{{0x0, 0xe00480f3, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x10480}], 0x1, 0x0, 0xef013080, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f0000000340)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba9f0f87598bd5358b6b", 0xffffffffffffff55, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 658.138961][ T3840] usb 4-1: new high-speed USB device number 103 using dummy_hcd 09:49:09 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0x3f, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="9bbde9f405b7273f9cddc8c28eb3218c126b4fc9bb8c01c9f02bf1b44fe8b4486a0a64e377df5018f3a0cd7f4ae98403ad7a5e744d96a3ae8f49e198f54629ad5713f4d343dd5b08606fb88da72aa34804868fc4310c124510ec5e9671387c48a9b711b35ef6649acc57ee94a19248219814ed8de506b22643f4362df0c67ee633a3bf45de0ea622e49de12ad2fb507845318747", 0x94, 0x40041, 0x0, 0x0) [ 658.348907][ T2845] usb 5-1: device descriptor read/64, error 18 [ 658.378962][ T3840] usb 4-1: Using ep0 maxpacket: 8 09:49:09 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x41010, &(0x7f0000000200)='\x00') listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 658.429585][ T3840] usb 4-1: no configurations [ 658.434204][ T3840] usb 4-1: can't read configurations, error -22 [ 658.469012][ T2845] usb usb5-port1: attempt power cycle 09:49:10 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x7) [ 658.598877][ T3840] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 658.858961][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 658.899561][ T3840] usb 4-1: no configurations [ 658.904196][ T3840] usb 4-1: can't read configurations, error -22 [ 658.911023][ T3840] usb usb4-port1: attempt power cycle 09:49:10 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x8000, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') 09:49:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000080)) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r5}, &(0x7f0000000200)=0x8) [ 659.198802][ T2845] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 659.329045][ T2845] usb 5-1: device descriptor read/8, error -71 [ 659.538979][ T2845] usb 5-1: device descriptor read/8, error -71 [ 659.618770][ T3840] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 659.709298][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 659.749237][ T3840] usb 4-1: no configurations [ 659.753837][ T3840] usb 4-1: can't read configurations, error -22 [ 659.908791][ T3840] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 659.999453][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 660.038817][ T3840] usb 4-1: no configurations [ 660.043583][ T3840] usb 4-1: can't read configurations, error -22 [ 660.051207][ T3840] usb usb4-port1: unable to enumerate USB device [ 660.058873][ T2845] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 660.158866][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 660.458991][ T2845] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 660.468098][ T2845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.477108][ T2845] usb 5-1: Product: syz [ 660.481866][ T2845] usb 5-1: Manufacturer: syz [ 660.486470][ T2845] usb 5-1: SerialNumber: syz [ 660.493109][ T2845] usb 5-1: config 0 descriptor?? [ 660.542767][ T2845] hub 5-1:0.0: bad descriptor, ignoring hub [ 660.548872][ T2845] hub: probe of 5-1:0.0 failed with error -5 [ 660.555357][ T2845] sierra 5-1:0.0: Sierra USB modem converter detected 09:49:12 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) 09:49:12 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) connect$netrom(r5, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default]}, 0x48) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0x0, 0x6001}, @void, @eth={@random="06b49819d512", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "b5b03e3940b94980"}}}}}, 0x22) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:12 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x8) 09:49:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x400c0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001000010453d489000000000000000000", @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000140)=r9) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 660.750485][ T2845] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 660.770113][T24119] device bridge6 entered promiscuous mode [ 660.807568][T24135] device bridge_slave_0 left promiscuous mode [ 660.820340][ T2845] usb 5-1: USB disconnect, device number 62 [ 660.832101][T24135] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.840357][ T2845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 660.863190][ T2845] sierra 5-1:0.0: device disconnected [ 660.911576][T24135] bridge6: port 1(bridge_slave_0) entered blocking state [ 660.930563][T24135] bridge6: port 1(bridge_slave_0) entered disabled state 09:49:12 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0xff, 0x37, 0x0, 0x7f, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r2, 0x8, r3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 660.965546][T24135] device bridge_slave_0 entered promiscuous mode [ 661.004554][T24135] bridge6: port 1(bridge_slave_0) entered blocking state [ 661.011846][T24135] bridge6: port 1(bridge_slave_0) entered forwarding state 09:49:12 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f00000000c0)={0x4a, 0x0, 0xa0, 0x100}) perf_event_open(&(0x7f00000002c0)={0x1, 0xffffffffffffff77, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x18022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4403}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'tls\x00'}, {0x20, 'tls\x00'}, {0x20, '\xbc}'}, {0x20, 'tls\x00'}, {0x20, 'tls\x00'}, {0x20, 'tls\x00'}, {0x20, '!#'}], 0xa, "ef847646a32112dfdb1ff9a2aa7f1d9e410d5bd7cbd184f3f9a31999f408738301f7ef512208ed81cc5a9c6524b84db55d83d2369335f65b1957bb7fbd12fc8d1c37ef8f60d0099f911933df9286db34248c613df77187a53aba6b2ac3aab3d553adbc0b3a19be527c8d821226836559af"}, 0x9b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ed42124da1f00b3"}, 0x28) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000340)={0xc8, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x344}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x30}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1c}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x4000401) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 661.058676][ T2484] usb 4-1: new high-speed USB device number 107 using dummy_hcd 09:49:12 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000007000)={'rose0\x00', r5}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000007800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000077c0)={&(0x7f0000007040)={0x754, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x1, 0x7, 0x6, 0x61}, {0x6, 0x6, 0x6, 0x4}, {0x1, 0x55, 0x6, 0x4}, {0x81, 0x7f, 0x7, 0x200}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2b6a}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8, 0x7, 0xfd6542ee}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x4, 0x9, 0x8, 0x3ff}, {0xfff, 0x0, 0x7, 0x1000}, {0x7, 0x7, 0x0, 0x6}, {0x1f, 0xa1, 0x3f, 0x9}, {0x1ff, 0x0, 0x6, 0x80}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xdd}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x3, 0x6, 0x4d3e}, {0x2, 0x2, 0x11, 0x4}, {0xfff9, 0x3f, 0x1, 0x7}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x754}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 661.328971][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 661.399278][T24158] device bridge7 entered promiscuous mode 09:49:13 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x5, 0x4840) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000180)=""/102) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:13 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x9) [ 661.528647][ T3841] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 661.629513][ T2484] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 661.647913][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.675170][ T2484] usb 4-1: Product: syz [ 661.688600][ T2484] usb 4-1: Manufacturer: syz [ 661.693211][ T2484] usb 4-1: SerialNumber: syz [ 661.724811][ T2484] usb 4-1: config 0 descriptor?? [ 661.779289][ T2484] hub 4-1:0.0: bad descriptor, ignoring hub [ 661.779873][ T3841] usb 5-1: Using ep0 maxpacket: 8 [ 661.785382][ T2484] hub: probe of 4-1:0.0 failed with error -5 [ 661.785796][ T2484] sierra 4-1:0.0: Sierra USB modem converter detected [ 662.009099][ T2484] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 662.048351][T24143] device bridge_slave_0 left promiscuous mode [ 662.059447][ T2484] usb 4-1: USB disconnect, device number 107 [ 662.078786][T24143] bridge6: port 1(bridge_slave_0) entered disabled state [ 662.088932][ T3841] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 662.090473][ T2484] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 662.097966][ T3841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.113991][ T2484] sierra 4-1:0.0: device disconnected [ 662.123940][ T3841] usb 5-1: Product: syz [ 662.128348][ T3841] usb 5-1: Manufacturer: syz [ 662.134713][ T3841] usb 5-1: SerialNumber: syz [ 662.146174][ T3841] usb 5-1: config 0 descriptor?? [ 662.189645][ T3841] hub 5-1:0.0: bad descriptor, ignoring hub [ 662.195642][ T3841] hub: probe of 5-1:0.0 failed with error -5 [ 662.223954][ T3841] sierra 5-1:0.0: Sierra USB modem converter detected 09:49:13 executing program 4: fsopen(&(0x7f0000000040)='exfat\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160551]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000080)={0xa3, 0x0, 0x4fde}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) 09:49:13 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 662.270199][ T3841] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 662.329649][ T3841] usb 5-1: USB disconnect, device number 63 [ 662.353191][ T3841] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 662.429157][ T3841] sierra 5-1:0.0: device disconnected 09:49:14 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000852b6850899111f00000000000100090212000100000000890400000009"], 0x0) 09:49:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) timerfd_create(0x3, 0x80000) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:14 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:14 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xa) 09:49:14 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 662.868655][ T3841] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 662.898668][ T2484] usb 4-1: new high-speed USB device number 108 using dummy_hcd 09:49:14 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback, 0x1f}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 663.118759][ T3841] usb 5-1: Using ep0 maxpacket: 8 [ 663.158758][ T2484] usb 4-1: Using ep0 maxpacket: 8 09:49:14 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 663.328583][ T2484] usb 4-1: unable to get BOS descriptor or descriptor too short [ 663.342304][ T2484] usb 4-1: no configurations [ 663.358676][ T2484] usb 4-1: can't read configurations, error -22 09:49:14 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe) 09:49:14 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000140)=0x1, 0x731, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 663.402793][ T3841] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 663.422468][ T3841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.480893][ T3841] usb 5-1: Product: syz [ 663.485082][ T3841] usb 5-1: Manufacturer: syz [ 663.513734][ T3841] usb 5-1: SerialNumber: syz [ 663.518627][ T2484] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 663.533736][ T3841] usb 5-1: config 0 descriptor?? [ 663.590077][ T3841] hub 5-1:0.0: bad descriptor, ignoring hub [ 663.596068][ T3841] hub: probe of 5-1:0.0 failed with error -5 [ 663.644845][ T3841] sierra 5-1:0.0: Sierra USB modem converter detected 09:49:15 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 663.790466][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 663.810557][ T3841] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 663.879569][ T3841] usb 5-1: USB disconnect, device number 64 [ 663.904393][ T3841] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 663.949721][ T3841] sierra 5-1:0.0: device disconnected [ 663.958804][ T2484] usb 4-1: unable to get BOS descriptor or descriptor too short [ 663.978246][ T2484] usb 4-1: no configurations [ 664.010657][ T2484] usb 4-1: can't read configurations, error -22 [ 664.046263][ T2484] usb usb4-port1: attempt power cycle 09:49:16 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x101800, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000080)={0x100, 0x3, 0x1, 'queue0\x00', 0x81}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0x7, 0x0, [], &(0x7f0000000140)=0xa0}) 09:49:16 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) socket$inet_udplite(0x2, 0x2, 0x88) [ 664.788536][ T2484] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 664.900142][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 664.905608][ T3841] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 665.058482][ T2484] usb 4-1: unable to get BOS descriptor or descriptor too short [ 665.076464][ T2484] usb 4-1: no configurations [ 665.082933][ T2484] usb 4-1: can't read configurations, error -22 [ 665.158436][ T3841] usb 5-1: Using ep0 maxpacket: 8 [ 665.248437][ T2484] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 665.349138][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 665.438513][ T3841] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 665.447653][ T3841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.468425][ T3841] usb 5-1: Product: syz [ 665.472713][ T3841] usb 5-1: Manufacturer: syz [ 665.477312][ T3841] usb 5-1: SerialNumber: syz [ 665.483243][ T3841] usb 5-1: config 0 descriptor?? [ 665.529141][ T3841] hub 5-1:0.0: bad descriptor, ignoring hub [ 665.533988][ T2484] usb 4-1: unable to get BOS descriptor or descriptor too short [ 665.539266][ T3841] hub: probe of 5-1:0.0 failed with error -5 [ 665.548397][ T2484] usb 4-1: no configurations [ 665.552785][ T3841] sierra 5-1:0.0: Sierra USB modem converter detected [ 665.568404][ T2484] usb 4-1: can't read configurations, error -22 09:49:17 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getpeername(r4, &(0x7f0000000240)=@rc={0x1f, @fixed}, &(0x7f0000000340)=0x80) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2, 0x0) read$usbfs(r6, &(0x7f0000000440)=""/204, 0xcc) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="03100000000000000000100065000000000034800000350076657468305f746f5f6272696467650000003500626f6e643000000000000000000000000000350076657468315f766972745f77696669000000140073797a6b616c6c65723000000000000000000a00", @ANYRES32=r7, @ANYBLOB="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"], 0x29}, 0x1, 0x0, 0x0, 0x4090}, 0x11) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 09:49:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaaaaaa0f080045000003000000000067907800000000e0000001"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000100805070000009a89c7c80724529f070000000000530be33733f6d3e50f6bd756383837de30fb270a07de", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000200ac1e000104000600"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:17 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x10) 09:49:17 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000100), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x45, 0x20004004, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffffb, @local, 0x1000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 665.598869][ T2484] usb usb4-port1: unable to enumerate USB device [ 665.727209][T24302] dlm: non-version read from control device 204 [ 665.760876][ T3841] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 665.785466][T24302] device bridge8 entered promiscuous mode [ 665.817462][T24313] device bridge_slave_0 left promiscuous mode 09:49:17 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = add_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="3c92a7c0708624d560783ed2f8d5e8dbe8bd37eb3bb14b89961535701e65c33c81cae7841b24", 0x26, 0x0) request_key(0x0, 0x0, &(0x7f0000000300)='overlay\x00', r4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000a69dba835039a453772899840675ef871d61ab9083ff871f77f6f3f195f171d0f9000000", @ANYRES32=r4, @ANYBLOB="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"]) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "0ae72dd5132f5eeb", "bade50114a78a30ae9f7af6527c4ff6df7aee1c7eed02bb9e49341b031252da8", "f28662fd", "9711f91e69d068b2"}, 0x38) [ 665.833365][ T3841] usb 5-1: USB disconnect, device number 65 [ 665.843755][T24313] bridge7: port 1(bridge_slave_0) entered disabled state [ 665.866629][ T3841] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 665.908024][ T3841] sierra 5-1:0.0: device disconnected [ 665.921305][T24313] bridge8: port 1(bridge_slave_0) entered blocking state [ 665.935195][T24313] bridge8: port 1(bridge_slave_0) entered disabled state [ 665.979792][T24313] device bridge_slave_0 entered promiscuous mode [ 665.999430][T24313] bridge8: port 1(bridge_slave_0) entered blocking state [ 666.006665][T24313] bridge8: port 1(bridge_slave_0) entered forwarding state 09:49:17 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:17 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) [ 666.238518][ T3849] usb 4-1: new high-speed USB device number 112 using dummy_hcd 09:49:17 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffffffff1000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000200ac1e000104000600"], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x19}, 0x4000090) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:18 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x60) [ 666.518417][ T3849] usb 4-1: device descriptor read/64, error 18 09:49:18 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 666.659487][ T2844] usb 5-1: new high-speed USB device number 66 using dummy_hcd 09:49:18 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ad0000000180a0108000000000000000003000004140003800800020400000000000000404687336a9000038008000240ffffffff0800014000000000180003801400f8b9000000000000746f5f7465616d000000540003801400010069705f767469300000000000000000001400010076657468305f766972745f776966690014000100766c616e3000000000000000000000001400010067656e657664300000000000000000000800014000000000080002400000ffff0c00054000000000000000010900020073797a3100000000140000000100010000000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = accept$unix(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) syncfs(r3) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000140)=0x7) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffed3, 0x20004004, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 666.908397][ T3849] usb 4-1: device descriptor read/64, error 18 [ 666.951942][ T2844] usb 5-1: device descriptor read/64, error 18 09:49:18 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 667.178389][ T3849] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 667.341286][ T2844] usb 5-1: device descriptor read/64, error 18 [ 667.458952][ T3849] usb 4-1: device descriptor read/64, error 18 [ 667.628378][ T2844] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 667.848323][ T3849] usb 4-1: device descriptor read/64, error 18 [ 667.928335][ T2844] usb 5-1: device descriptor read/64, error 18 [ 667.969052][ T3849] usb usb4-port1: attempt power cycle [ 668.348257][ T2844] usb 5-1: device descriptor read/64, error 18 [ 668.469511][ T2844] usb usb5-port1: attempt power cycle 09:49:20 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x420001, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r7, 0xc91add0bf88807dd, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x60}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4008040) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000300)) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) prctl$PR_SET_TSC(0x1a, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000050700ffbf000000060000000000", @ANYRES32=0x0, @ANYBLOB="000000000000006e6576650095e030596ca8674a0b6839cfaf001000028008000200ac1e0001240006000000000000000000000000c93b1af685c640b7550d5df7c7a0cf56fbeed932c098c9e120531494913eed32f2d33762f7aebf1bef0db4031545b9290ebcb6ef51ae082463044960496785132878a476356688998bd74b7dd79c855c5856988e1599b8e095ed1d5d5fac8376e90f5a653880bb2d479bb00f8bc737b4bafe4522e267a70fee560b0f6135"], 0x40}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000340)={0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x10003, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000003c0)={r5, 0x80000, r6}) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000030701020000000000000000020000090c000640000000000000067f0c000340000000000000800008000540000000020c0003000000000000000003"], 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe0) [ 668.678241][ T3849] usb 4-1: new high-speed USB device number 114 using dummy_hcd 09:49:20 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000540), &(0x7f0000000580)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0xfeffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x1d4, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "922e1f769b13916d267366121e85f39bdb49e2a915bfcf50f9f94ed81e73fd1492"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c88}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3], 0x0) mount$9p_tcp(&(0x7f0000000340)='127.0.0.1\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x3002000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e20,privport,posixacl,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB="2c7063723d303030303030303030c9634787c2b3267e3032382c736d61636b6673726f6f743d756470002c646f6e745f686173682c00"]) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0xfd5d274940f94ceb, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 09:49:20 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 668.798271][T24368] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 668.812729][T24373] tipc: Enabling of bearer rejected, failed to enable media [ 668.846427][T24374] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 669.161859][ T3849] usb 4-1: device not accepting address 114, error -71 [ 669.198284][ T2844] usb 5-1: new high-speed USB device number 68 using dummy_hcd 09:49:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0xe, 0x6, 0xa05, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x4004031) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) 09:49:20 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) sendto$inet6(r2, &(0x7f0000000140)="ec09a2a099735a3e5729e73a360aaf26d60ab207ffb7c0ed3d4ecf2a6e013c012288acc35a36ed3b1d07e86efc421e93e16f4da0b39591320435b891c647dde97f52175e0ca66c69ac6093bed2cdb89f139cede2d95902dca5d046c0ad34c8849a0a841eaf4e825e2831cbefbeefa4641d4f203c54c0fa94b80b60be89685f35ef77cfaf6ec4596bcce539bfc4e9a8e628f5169775cdbf2af5aae91165b7f13092fe917ef2806dd65af865ca3694035bb8fcfa6598943243a2e491dde15122ecf67bd0f465cd4288464a8289d746884421a25fbc176f2b084871f08820a3e9cf8bdafa70d247844d94087927cbe6", 0xee, 0x4004000, 0x0, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 669.374201][ T2844] usb 5-1: device descriptor read/8, error -71 09:49:21 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000240)={0xc4, &(0x7f0000000140)="a7fcaed1605e56fd09ec61e8a0c78d54e9499e44ba765d062a771ab5fc393c371688725133d23fca5b4ddd8d5fa64345467ad73f183f8dc594eef4037bced4c8c00f7c6beecbdb4d5ce6c1187284c667eb5c6dd1c99456f157319aeabca9e5b3d7c13cdac4e618653306a48c30f57b08c876569cdd3ec7b08cd0728b22bed886ec5d4fc18bfbfe9d1dccd9e3be53f5dc19440a48fe2bc666bb158195cf65530de6bbb4885e1ae3f2847c22bfb3b8c37c2e00f8adc726e394ca36fccf4b8ed37641b290f8"}) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 669.538180][ T3849] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 669.604131][ T2844] usb 5-1: device descriptor read/8, error -71 09:49:21 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x1f4) 09:49:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0xfff, {{0xa, 0x4e24, 0xbd5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1d81}}}, 0x88) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 669.718862][ T3849] usb 4-1: device descriptor read/8, error -61 09:49:21 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x3}}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000000c0)) [ 669.998984][ T3849] usb 4-1: device descriptor read/8, error -61 09:49:21 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000200012800b00010067656e657665000010000200100000000000000104000600"], 0x40}}, 0x0) r4 = pidfd_getfd(r2, r3, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0xffffffff, @private2={0xfc, 0x2, [], 0x1}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r5, 0x409, 0xb) [ 670.118312][ T2844] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 670.118382][ T3849] usb usb4-port1: unable to enumerate USB device [ 670.219685][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 670.238713][ T2844] usb 5-1: Using ep0 maxpacket: 8 [ 670.292656][T24427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 670.559337][ T2844] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 670.581656][ T2844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:49:22 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x3e8) [ 670.618081][ T2844] usb 5-1: Product: syz [ 670.622381][ T2844] usb 5-1: Manufacturer: syz [ 670.626975][ T2844] usb 5-1: SerialNumber: syz 09:49:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @mcast2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000ec72b09700000000000000000000005889", @ANYRES32=r5, @ANYBLOB="000000000000003f08000a0094494ea90426525cb836416afbe9d32ec61f7431ec3c58d7d343c34e0fd4c5c5dafcce4db6846aa753e01e86e7f5409cda4a43668406687421a3d063585c10b815d8e4949e93b742eb30ef06ea67c0cd3a62d8662a00dbcf573f923a11caf992875610ee72fa2a482576ec1dc591fa56f315", @ANYRES32=r8, @ANYBLOB="617463f169dbc78737ff63fff30a352dc0c5cc7b73c6e6fc3679ced6f6622e73c15a000000"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', r8}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private2, @loopback, @local, 0x2, 0x7, 0x8, 0x500, 0x0, 0x880000, r9}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 670.666781][ T2844] usb 5-1: config 0 descriptor?? [ 670.732451][ T2844] hub 5-1:0.0: bad descriptor, ignoring hub [ 670.751318][ T2844] hub: probe of 5-1:0.0 failed with error -5 [ 670.757763][ T2844] sierra 5-1:0.0: Sierra USB modem converter detected [ 670.820294][T24438] device bridge7 entered promiscuous mode [ 670.947549][ T2844] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 671.008886][ T2844] usb 5-1: USB disconnect, device number 69 [ 671.038283][ T2844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 671.078575][ T2844] sierra 5-1:0.0: device disconnected 09:49:23 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) 09:49:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @ipv4={[], [], @rand_addr=0x64010102}, 0x1000000}, 0x16) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:23 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10038c7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000004480250e6a148b08c272c7fd91b75e7c53112c5ec312e80f2c3425962c542cc3937709bb", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:23 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0x0, 0xfbfb}, @val={0x2, 0x3, 0x8000, 0x0, 0xc567, 0x4}, @eth={@random="9f96d700", @dev={[], 0x18}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x67, 0x0, @loopback, @multicast1}, "2f7d88374b773591773de35268ac9a5a6580d3219a94c5b94c1a85e7d9ed03ccf6a7a04791ef2a8f1ae62fa9517208"}}}}}, 0x5f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xffffff9d) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$getown(r1, 0x9) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) 09:49:23 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x470) 09:49:23 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0xffff303b, @private0={0xfc, 0x0, [], 0xaf}, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000180)={0x6a, 0x81, 0xcc, 0xfff7, 0x9}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000140)={0x8, 0x1}, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000001c0)={0xfff, 0x31303453, 0x4c, 0x80, 0x3, @stepwise={{0x1, 0x2}, {0x2, 0xcaa7}, {0x80000001, 0x2}}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:23 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000440)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) connect$ax25(r2, &(0x7f0000000140)={{0x3, @null, 0x6}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000280)={0x980000, 0x2, 0x6, r3, 0x0, &(0x7f0000000240)={0x99096f, 0x8, [], @value=0x1}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000001c0)=0x7) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0xbe, "b7d777a2d6313d1f013bb30bfb4faac60a95535cd69787caabd703bd09415b5dda12b8b15a5fd40dd020572575f1a97991c5a01e53da656ec44c3e2eb6c951ce4fbe1b46e443e96d8e2d96307bfd5e5da1888475891e604f0355c49e559e15f6c053195284042bc226d83723899c212a740b3e378836efc8c58dfd1939e2bef10d8bb9dfe77f13e9172e0f59a164fb96de303ab5d66bf5445b18d44e6531a2bbe5c0e4181009ebf806e11496e277788102812853e35cbaa224cf099d6be0"}, &(0x7f0000000200)=0xc6) [ 672.168091][ T2844] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 672.210088][ T2760] usb 4-1: new full-speed USB device number 116 using dummy_hcd 09:49:23 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0xfffffffffffffffe, 0x20a401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, [], 0x1}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private1}, 0x1c) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=""/32, &(0x7f0000000180)=0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 672.468052][ T2844] usb 5-1: device descriptor read/64, error 18 [ 672.504783][ T2760] usb 4-1: device descriptor read/64, error 18 09:49:24 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7dfda65ca9620a40de61d960972ad94fd225b923fcc6c2251a4e723251e3cad660a3e62cb78f745285e9174b552422772b921b8df77b1d9e5539d4641ba24914f240625017d71df3283d4d092c36596ff207ff59a3abf90600000000000054ca128a7222996f70491334db", @ANYRES16=r4, @ANYBLOB="04002dbd7000ffdbdf250700000008000400ac1414bb08000500e000000114000300000000000000000000000000000000012800070073797374656d5f753a6f626a6563745f723a64706b675f7661725f6c69625f743a73300008000500ac141433140006007465616d5f736c6176655f3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8801}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xc0, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:wtmp_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:dhcpd_state_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40080}, 0x8810) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) r5 = open(&(0x7f0000000140)='./file0\x00', 0x418040, 0x20) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000180)={0x0, "9d33b25d11bb856c55c188d4018696ff4b3251255bc3daae038fb60e5260c750", 0x1448, 0x7f, 0xfffffffb, 0x2, 0x3}) 09:49:24 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x484) [ 672.882076][ T2844] usb 5-1: device descriptor read/64, error 18 [ 672.909969][ T2760] usb 4-1: device descriptor read/64, error 18 [ 673.178020][ T2844] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 673.208063][ T2760] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 673.487995][ T2844] usb 5-1: device descriptor read/64, error 18 [ 673.499342][ T2760] usb 4-1: device descriptor read/64, error 18 [ 673.918004][ T2760] usb 4-1: device descriptor read/64, error 18 [ 673.924278][ T2844] usb 5-1: device descriptor read/64, error 18 [ 674.058406][ T2760] usb usb4-port1: attempt power cycle [ 674.064815][ T2844] usb usb5-port1: attempt power cycle [ 674.777903][ T2844] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 674.785611][ T2760] usb 4-1: new full-speed USB device number 118 using dummy_hcd 09:49:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x121a00, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000640)={0x0, 'ipvlan1\x00', {}, 0x40}) 09:49:26 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x20b, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x400801, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000200ac1e000104000600a372304c680cdfb562c75e20a41a71f54725eae91e075ca2f4d2b1309fc9480f7fff2b81b3022c46597ec1f14285386c52cbf5c899d34d3645aef141e0af1f4018ee017bf48de667d59ac89661da3e676d1733c66f4762e9faaaf17a3c86173643b8acdc8101e70872a802549e278da57b7f4bf94a27acdc7b25dda78b6d18afc6e906fbe69c73c5c02a4c1e5efc124b6c8fc764f884a57fc2e7865cafbd88cd4724ff21ef89ca5333f678c36b5a42f74098d1e5c757afea79fab322f014f5b16c"], 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES16=r2, @ANYBLOB="0500000000000000000001"], 0x3}, 0x1, 0x0, 0x0, 0x38e1e363aee3b962}, 0x11) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r5, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2e, 0xb, 0x8, {0x6, @sctp_ip6_spec={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, 0x4e20, 0x4e24, 0x8}, {0x0, @multicast, 0x40, 0xa54, [0x1ff, 0x2]}, @tcp_ip4_spec={@multicast2, @local, 0x4e24, 0x4e24, 0x1f}, {0x0, @local, 0x8001, 0x5, [0x8000, 0x1]}, 0x1}, 0x2, [0x9, 0x2]}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x5c8) 09:49:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) [ 674.898109][ T2844] usb 5-1: device descriptor read/8, error -71 [ 674.937989][ T2760] usb 4-1: device descriptor read/8, error -71 09:49:26 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_getaddr={0x70, 0x16, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa, 0x10, 0x80, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x3f, 0xb79, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x91}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x0, 0x3, 0x1}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = dup2(0xffffffffffffffff, r2) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000100)={0x0, 0x0, 0x7ff}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:26 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)={0x14, r1, 0x721}, 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x844) 09:49:26 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/52, &(0x7f0000000180)=0x34) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xfff, @empty}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000340)={[0x6, 0x8, 0xf4, 0x1, 0x10000, 0x5, 0x6, 0x8, 0x9, 0x80000000, 0xfffffffb, 0x3, 0x401, 0x8001, 0x401, 0xaf6d73c, 0x7f, 0x3, 0x20000, 0x7fffffff, 0x6, 0xabd9, 0x1ff, 0x6, 0xe97, 0x6, 0x3f, 0x1, 0x53, 0x1, 0xee, 0x1, 0x3, 0xccd0, 0x5, 0x2, 0xffff, 0x8, 0x159, 0x2, 0x9, 0x8, 0x5, 0x5, 0xfffffffa, 0x5, 0x4, 0x8a4a, 0x2, 0x8001, 0xab59, 0x4, 0x23, 0x81, 0x80, 0x8001, 0x7f, 0x8, 0x68, 0x1, 0x1f, 0x2, 0x401, 0x8, 0x0, 0x7fffffff, 0x0, 0x4, 0x7, 0x6, 0x8, 0x100, 0x9, 0x2, 0x7, 0xfffff7d4, 0x3, 0x51d, 0x8, 0x9, 0xfff, 0x5, 0x7ff, 0x4, 0x8, 0xe0b, 0x5, 0x0, 0x9, 0x7fff, 0x101, 0x3, 0xffff785f, 0x2a68, 0x38c, 0x1ff, 0x8, 0x19, 0x2, 0x3f, 0x6, 0xd64c, 0x4, 0x9, 0x1, 0xfff, 0xffff, 0x1000, 0x3f, 0x1, 0xb6, 0x3, 0x1eb4e, 0x6a700000, 0x10000, 0x4, 0x6, 0x8001, 0x2, 0x7ff, 0x3, 0x9, 0x1f, 0x7, 0x1, 0x2, 0x8001, 0x0, 0xb5, 0xffffca9b, 0x3, 0x5de8, 0xffff, 0xd3, 0xe4e, 0x465, 0x9, 0x1, 0x8, 0x7, 0x7e, 0x38, 0x7, 0x4, 0x8, 0x7, 0xffffffe1, 0x9, 0x4, 0x0, 0x7a, 0x7fff, 0x10000, 0x7, 0x7fffffff, 0x9, 0x3, 0x10000, 0x0, 0x2000000, 0x1, 0x5, 0x9, 0x3684, 0x5, 0x6, 0x20, 0x6, 0xffffffff, 0x401, 0x8000, 0x8, 0x3, 0xfff, 0x3, 0x337, 0x9, 0x8, 0x9, 0x0, 0x3, 0xa850, 0x1, 0x200, 0x1ff, 0x10001, 0x2, 0x7, 0x7f, 0x0, 0xfffffffd, 0x6c48, 0x55b3, 0x3, 0x1, 0x7, 0x4, 0x3, 0x7fffffff, 0x9, 0x0, 0x34e, 0xc0000000, 0xc00000, 0x3, 0x0, 0x80000001, 0xaf, 0x8, 0x7, 0x7, 0x8, 0x2, 0x7, 0xfffffffb, 0x8, 0x401, 0x3bd2, 0x0, 0x81, 0x1ff, 0xffffffff, 0x2, 0x7ff, 0x7fff, 0x6, 0x3e, 0x2, 0x8, 0x58b9, 0x10000, 0x7fff, 0x0, 0x800, 0x8001, 0x9, 0xc79, 0x6, 0x401, 0xffffffff, 0xa1a, 0x9, 0x2, 0x5, 0x401, 0x7, 0x0, 0x1ff, 0x7, 0x41f, 0x5, 0x1, 0x40, 0xfffffffa, 0x6, 0x100, 0x6, 0x7, 0x2, 0x4, 0x2, 0x8, 0xfffffffd, 0x0, 0x9, 0x1ff, 0x0, 0x6, 0x3, 0x2, 0x1, 0x3, 0x3, 0x7, 0x0, 0x644, 0x6, 0xfffffffe, 0x4, 0x1000, 0x2, 0x10000, 0x5, 0xd7, 0x2, 0x40, 0x1, 0x0, 0x8, 0x80000001, 0x0, 0x7f, 0x0, 0xffffff00, 0x1, 0xff, 0x2, 0x0, 0x5, 0x3, 0x3, 0x2, 0xb6, 0x7fff, 0x200, 0x6, 0x4d0, 0x401, 0xeb, 0x4ab, 0x81, 0xfaca, 0x7, 0xf8, 0xf6, 0xff, 0x6, 0x7, 0x81, 0x9, 0x40, 0x1f, 0xe5a, 0x3, 0x10001, 0x81, 0xffff, 0xff, 0x9, 0x1ff, 0x7, 0x10001, 0xc6, 0x8000, 0xfff, 0x439e, 0x6, 0xae, 0x1, 0x5, 0x1, 0x5, 0x1, 0x8, 0x3, 0x6, 0x5, 0xe87, 0x8000, 0x9, 0x2, 0x8000, 0xfffffffa, 0xff, 0x200, 0x6d, 0xc79, 0x1000, 0x2, 0x4, 0x1, 0xee, 0xfffffffc, 0x7, 0xfffffeff, 0x6, 0x100, 0x8, 0x1, 0x3, 0x7988, 0x6, 0x9e0, 0x81, 0x80, 0xa7, 0x81, 0xaab0, 0x100, 0xfffffff8, 0x1ff, 0x7b, 0x200, 0x747d, 0x10000, 0x7f, 0x5, 0x1, 0x8000, 0x200, 0x3, 0x4, 0x7, 0x100, 0x5, 0x1f, 0x7, 0x9, 0x2, 0x7fffffff, 0x1, 0x2, 0x6, 0x6, 0xffffff00, 0x101, 0x2, 0x8001, 0x800, 0x1, 0x8, 0x237, 0x1, 0x1f, 0x5, 0x9e1a, 0x20, 0xc3, 0x7, 0x5, 0x3, 0xbe73, 0xa6, 0x6, 0x5, 0x8, 0x5, 0x1, 0x1000, 0x5, 0x80, 0xcfa, 0xbdd, 0xff8000, 0x0, 0x7dff3c2a, 0x6adfbb93, 0x1, 0x3ff, 0x3, 0x0, 0xd, 0x101, 0x9, 0x3, 0xfffffff7, 0x81, 0x1, 0x9, 0x1000, 0x200, 0x4, 0x3, 0x40, 0x6, 0x9, 0x5, 0x70, 0x6, 0x3, 0x3, 0x1, 0x3, 0x40, 0x7, 0x8001, 0x1000, 0x53, 0xd92, 0x8000, 0x3, 0x8, 0x8, 0x80, 0x50, 0x9, 0x6, 0x4ec, 0x1, 0x2, 0x1, 0x5, 0xfff, 0x4, 0x8e8b, 0x0, 0x1, 0x7f, 0x3, 0xff, 0x20, 0xff, 0x74ff, 0x5, 0xecd, 0x8, 0x91a9, 0xcb25, 0x8, 0x145, 0x6, 0x80000000, 0x7, 0x5, 0x8, 0x100, 0x3b322359, 0x4538130a, 0x3f, 0x9, 0x9, 0x80000000, 0x200, 0x6, 0xfffffffa, 0xd7a, 0x7, 0x1, 0x4, 0x5, 0x3, 0x8, 0x5, 0x5, 0x20, 0x8, 0x1b528000, 0x2, 0x81, 0x3, 0xffff, 0x3, 0x2, 0xffff, 0x1, 0x6, 0x1, 0x9, 0x6, 0x2, 0x5, 0xaf7, 0x7, 0x5, 0x2, 0x869, 0x5, 0x200, 0xfffffff7, 0x4, 0x3f, 0x7, 0xffffb9f7, 0x200, 0x3, 0x0, 0x9, 0x7f, 0x9, 0x2, 0x244b, 0x2e, 0x0, 0xffff, 0x1000, 0xffff, 0x7, 0x80000000, 0x43c6, 0xfffffffe, 0x6, 0x7, 0x4, 0xef1, 0x100, 0x2, 0xf1, 0x3, 0x1, 0x7ff, 0x0, 0x91cb, 0x2, 0x19, 0x200, 0x3, 0x9, 0x2b, 0x80, 0x0, 0x4, 0x4, 0xfffffff8, 0x400, 0xb6c8, 0xcf, 0x3, 0x6, 0x1f, 0xc7, 0x9d93, 0x7, 0x10000, 0x7, 0x3ff, 0x7fff, 0x1, 0x7, 0x40, 0x81, 0x5318, 0x8d, 0x8, 0xed89, 0x3ff, 0xfffff000, 0x2, 0x1f, 0x1c0000, 0x47710a64, 0x3, 0x80, 0x4, 0x0, 0x80000000, 0x4, 0x7, 0x401, 0x98d, 0x2, 0x3ac, 0x1000, 0x6, 0xff, 0x8, 0x7fffffff, 0x1f, 0x4, 0xffff, 0xfffffff7, 0x3ff, 0x0, 0x5, 0x935, 0x80000001, 0x4, 0x1, 0x9, 0xffff, 0x5, 0x1000, 0x80000000, 0x8, 0x8, 0x2, 0x26, 0x4, 0x8, 0x8000, 0x200, 0xfff, 0x4, 0x636, 0x9, 0x3, 0x1, 0x4, 0x1, 0x100, 0x8001, 0x9, 0x8, 0x7, 0x5, 0x6, 0x3, 0x1, 0xd7, 0x9, 0x8, 0x7, 0x8000, 0x309000, 0x7, 0x401, 0x6, 0x3f, 0x6, 0x42b, 0x2, 0x3f, 0xe0, 0x7fffffff, 0x8000, 0x7f, 0x3, 0x7, 0x1, 0x7, 0x8001, 0x5, 0x6, 0xf4, 0x8, 0x5, 0x81, 0xc03e, 0x21, 0x7, 0x1768, 0x401, 0x3, 0x7f, 0xff, 0x7fff, 0x7d, 0x6, 0x66, 0x2, 0x200000, 0x76d, 0x1, 0x9, 0x100000, 0x400, 0x4636d885, 0x7, 0xfffffffa, 0xe3, 0x1, 0x3, 0x2, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x4e1, 0x7, 0x0, 0x1000, 0x8, 0x80000001, 0x6, 0x7fffffff, 0x7f, 0x2, 0x1000, 0x0, 0x3, 0x800, 0x9, 0x6, 0x401, 0x146c, 0x3, 0xfffffff8, 0xba94, 0x7, 0x8, 0x20, 0x8b1a, 0x1, 0x175, 0x0, 0x6, 0x4, 0x4, 0x1c, 0x1ff, 0x800, 0x6, 0x2, 0x5, 0xc4, 0x8000, 0x9, 0x7, 0x1, 0x1f, 0x3ff, 0x20, 0x5, 0x7f, 0x3f, 0x10001, 0x10001, 0x8, 0x200, 0x6, 0x4, 0x0, 0xbe10, 0x5, 0x2, 0x8, 0xfffffffc, 0x8, 0x8001, 0xcc8d, 0x6, 0x7f, 0xfe38, 0xd791, 0x80, 0x2336, 0x100, 0x7f, 0x400, 0x7, 0x1, 0xfffffffe, 0x4, 0x9, 0xb8, 0xfffffe00, 0x4, 0x6, 0x4, 0x3, 0x9, 0xe1c2, 0x7, 0x7, 0x800, 0x1, 0x7, 0xa73f, 0x9, 0x3, 0x5bc2a750, 0xa, 0x80000001, 0x2, 0x800, 0x8000, 0x3, 0xf2b, 0x5, 0x4, 0x2, 0x2, 0x0, 0x1, 0x4, 0x4, 0x0, 0x6, 0x7d, 0x4, 0x65cd90e8, 0x9, 0x8, 0x38, 0x1, 0x47a6, 0x0, 0x1, 0x1, 0x4, 0x10, 0x4, 0x8, 0x1, 0x69, 0x3, 0x81, 0xfffffffb, 0x4, 0x5, 0x6, 0x2, 0x4, 0xfffffffd, 0x2, 0xffff, 0x5, 0x8001000, 0x10000000, 0xfff, 0x1, 0xf1aa, 0x0, 0x46ca, 0x401, 0x5, 0x0, 0xffff8001, 0x400, 0x2, 0x7fff, 0x101, 0x10000, 0x10, 0xfffffff9, 0x2, 0x4, 0x6548, 0x5, 0x3, 0x8, 0x7, 0x4, 0x6, 0xffffffff, 0x6, 0x5, 0x98c8, 0xa2440, 0x3ff, 0x9ab, 0x8, 0xff, 0x7, 0xfdb, 0x0, 0x800, 0x0, 0x3ff, 0x1, 0x6, 0x9, 0x3, 0x2, 0x1, 0x5d, 0x5, 0x6, 0x2459, 0x6, 0xe7ef, 0x7ff, 0x2, 0xb38, 0x5, 0x75, 0x7, 0x8000, 0x6207cf7b, 0x6, 0x0, 0x9, 0x8, 0xad, 0x7, 0x3f, 0x7, 0xfffffeff, 0x4, 0x2, 0x2, 0xa2, 0x2a2, 0x4, 0x9, 0x8, 0xf812, 0x41fd543f, 0x5, 0x81, 0x2c52, 0xd31f8795, 0x7, 0x3, 0x5, 0x409, 0x1, 0x3, 0xfffffffd, 0x0, 0xffff, 0x0, 0x6, 0x892, 0x974e, 0x7, 0x47d5, 0x0, 0xfffffffb, 0x80000000, 0x3, 0x4, 0x9, 0x7, 0x6, 0x6, 0x3, 0x2, 0x20, 0x9c, 0x2, 0x7, 0x8, 0x80, 0x6, 0x8, 0x8, 0x401, 0x9, 0x3467, 0x1, 0x462b62c7, 0x0, 0x4, 0x7, 0x6, 0x5, 0x3, 0x1, 0x1, 0xfc, 0xaf52, 0x3, 0x9, 0x81, 0x0, 0x10000, 0x4, 0x3, 0x0, 0x7fffffff, 0xfffffffa, 0x20, 0x7]}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 675.108368][ T2844] usb 5-1: device descriptor read/8, error -71 [ 675.148528][ T2760] usb 4-1: device descriptor read/8, error -71 09:49:26 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x108, 0x218, 0x218, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x8}}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff, 0xe, 0x3, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x20, 0x2, 0x8001, 0x789e, 0x1a, 0x3, 'rose0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @remote, @multicast2, 0x8}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff, 0x0, 0x5, 0xe, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x212e, 0x2, 0x1, 0x7f, 0x6, 0x2, 'batadv_slave_0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x61}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x6b}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x438) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:27 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) fanotify_init(0x20, 0x1000) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:27 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200040, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 675.637990][ T2760] usb 4-1: new high-speed USB device number 119 using dummy_hcd 09:49:27 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = dup(r2) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x146, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)='netpci0\x00', 0x7, 0x0, 0x800}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000200)={@any, 0x10000, 0x1, 0x8, 0x2, 0x7fff, "5369a1056054162844ce8d9cc6db5bd9aed8d0ad11031d9491a896f931ebc39165b4446295c85b18800278a5da1c42ce4e9695edcc8f8d4172d551020df841c09e9de734cfb78da8ed3415846d0ebd53e4858876d41a0dc3c18e96c387f05617705faa88c4c439e30eb82be326ceb1bbc460b818e8e41ca34c35ee26f997e6b2"}) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 675.739251][ T2760] usb 4-1: Using ep0 maxpacket: 8 09:49:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000140)={0x3, 0x1}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x5dc) [ 675.903772][ T2844] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 676.003731][ T2844] usb 5-1: Using ep0 maxpacket: 8 [ 676.030120][ T2760] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 676.039469][ T2760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.047452][ T2760] usb 4-1: Product: syz [ 676.053897][ T2760] usb 4-1: Manufacturer: syz [ 676.059569][ T2760] usb 4-1: SerialNumber: syz 09:49:27 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x0, 0xda8) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0xef, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="9f96d7000000aaaaaaaaaa00f8b0202b2bf40449dd1b5baa616e000000010000000000"], 0x22) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r8, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000180)={0x7, 0x1000, 0xffc0, 0x6, 0x31, 0x11, 0x1, "b5d246b1b898dfc0ca6edd09c64300586bac45e8", "1651c10df6eb7ed1bab286d5a5165489cd67c923"}) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f00000001c0), &(0x7f0000000140)=0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 676.086371][ T2760] usb 4-1: config 0 descriptor?? 09:49:27 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929530ade91900b51fc9534", '\x00', "7ee51430fa3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 676.129074][ T2760] hub 4-1:0.0: bad descriptor, ignoring hub [ 676.135174][ T2760] hub: probe of 4-1:0.0 failed with error -5 [ 676.159066][ T2760] sierra 4-1:0.0: Sierra USB modem converter detected [ 676.288346][ T2844] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 676.297551][ T2844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.345882][ T2844] usb 5-1: Product: syz [ 676.355286][ T2760] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 676.374942][ T2844] usb 5-1: Manufacturer: syz 09:49:27 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) dup(r4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) ioctl$FIOCLEX(r0, 0x5451) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 676.400821][ T2844] usb 5-1: SerialNumber: syz [ 676.409677][ T2760] usb 4-1: USB disconnect, device number 119 [ 676.437212][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 676.467256][ T2844] usb 5-1: config 0 descriptor?? [ 676.480886][ T2760] sierra 4-1:0.0: device disconnected 09:49:28 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getuid() syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x7, 0x1, &(0x7f0000000340)=[{&(0x7f00000001c0)="885d05ce1e994cd735f828cf4cb77af9385982b44f36ca6f3fa2499daacea3c294326df9e13b21ea23ca0e34b78847700d0b82a1f0e9d3a90ebd239f4dd3b9d72aab49ed114fb729254c2c6479ad9c34c663a275c3a02e196efd030c82cb0fe2622b990244823f33022a9f0a1d91840f945c162e24c867469f084998964e4e75951d4033d49270cc96ee9f70b77b37f2a77d6e8093c0c1305e022e098aafad505d5c7ccf21e658ed1fd50094f25c37435c30dc3e8e7e2e00f2ccb4be4923b91ea06d6c17856f9c", 0xc7, 0x7fff}], 0x1000011, &(0x7f0000000380)=ANY=[@ANYBLOB='usrquota,expose_privroot,user_xattr,noacl,tails=small,barrier=flus ,lash,pcr=00000000000000000052,euid<', @ANYRESDEC=r2, @ANYBLOB=',subj_user=\'/:,\x00']) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 676.518494][ T2844] hub 5-1:0.0: bad descriptor, ignoring hub [ 676.525816][ T2844] hub: probe of 5-1:0.0 failed with error -5 [ 676.546771][ T2844] sierra 5-1:0.0: Sierra USB modem converter detected [ 676.641068][T24605] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "flus " for option "barrier" [ 676.641068][T24605] [ 676.759077][ T2844] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 676.838817][ T2844] usb 5-1: USB disconnect, device number 73 [ 676.887240][ T2844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 676.927262][ T2844] sierra 5-1:0.0: device disconnected 09:49:28 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f00000002c0)={0x8, 'macvlan0\x00', {'bond_slave_0\x00'}, 0xff}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x700) 09:49:28 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e657665f40010000d8008000200ac1e000104000600"], 0x40}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x40) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:28 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201e7ff51b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x3, 0x1000, 0xa6, &(0x7f0000000280)="bbb0542608905e40eb57c769bb7bd59fa67421db3988961acf3ceb29b98eb3251b110b84e32cac201e674d3c3ff595b078aa7bd6db243192e40431303485d84ea57b8cb1c4d040de5ca7f977b34e85d12386ade95b91b02a1288453429ad7a4d2aeaa88024127e246db9f2e4f2bc94275f89b0d555168a068d49c2ae1322159d718ff4807d46ffe3ffdb4c66b74afa0dd7ead386c220f30958a2d459febda2562540dd376426", 0xb5, 0x0, &(0x7f0000000340)="c3944af36bf948b22ed3dab718dd9e5dc4af57b58fdc1646cdcf7902bd0b9ec26e12a124891438ce48a52656dc8631cbf0ec03417bb6945f886111140baa51fcffbbea97e241e3be4fe4b0b28de91b150d012a6189b5e92460b3395c86249ab73123958ed799406960700f10c71e34825c6d9b3f82fa0b9708fdc55552eee55a3e4789433e55d0f46cdcd35fb60e95495a85e5835636e32bc1be3b8d07b403600d8d41e655e03a3b7430b367637a625b3189be5a50"}) preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000240)) setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x4, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @empty}}}, 0x108) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xe1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 09:49:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 09:49:28 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x3b1c02, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x23, 0x0, "95279193ac85466c9d7d3b606d86c1c160fa58b53a44f7bc829bbd3551d180dcdc671e0cb81834a4271ffb88a1a9ebbf730a384ab477e43885442ebf2d871b8cb60d14358a757ac63e0329a9f305b3fa"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:28 executing program 0: pipe(&(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) gettid() r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/154) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x6, 0x5, 0x4, 0x4000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xa4, 0x0, 0x1, 0x3, "3d025cbf"}, 0x20, 0x4, @offset=0x86, 0x101, 0x0, r5}) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000280)={0x1a, 0x0, 0x7, 0x0, 0x0, 0x1f}, 0x10) [ 677.398083][ T2760] usb 4-1: new high-speed USB device number 120 using dummy_hcd 09:49:28 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 677.557899][ T23] usb 5-1: new high-speed USB device number 74 using dummy_hcd 09:49:29 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0xfffffffffffffffe, 0x20a401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, [], 0x1}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private1}, 0x1c) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=""/32, &(0x7f0000000180)=0x20) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 677.637939][ T2760] usb 4-1: Using ep0 maxpacket: 8 [ 677.797831][ T2760] usb 4-1: unable to get BOS descriptor or descriptor too short [ 677.837817][ T23] usb 5-1: device descriptor read/64, error 18 09:49:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x900) 09:49:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x20004e22, 0x7f, @dev={0xfe, 0x80, [], 0x43}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200240, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000000009010300000000000000000100000408000640000000010900010073797a31000000000c000480080001400000f67a080003578000000008000540000000150900010073797a31000000000900010073797a30000000000900010073797a3000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) unlinkat(r3, &(0x7f0000000180)='./file0\x00', 0x0) 09:49:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x3e8) [ 678.048606][ T2760] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 678.060098][ T2760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.071315][ T2760] usb 4-1: Product: syz [ 678.075488][ T2760] usb 4-1: Manufacturer: syz [ 678.093002][ T2760] usb 4-1: SerialNumber: syz [ 678.121272][ T2760] usb 4-1: config 0 descriptor?? [ 678.158422][ T2760] hub 4-1:0.0: bad descriptor, ignoring hub [ 678.164411][ T2760] hub: probe of 4-1:0.0 failed with error -5 [ 678.179241][ T2760] sierra 4-1:0.0: Sierra USB modem converter detected [ 678.237701][ T23] usb 5-1: device descriptor read/64, error 18 09:49:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000140)={0x7fffffff, "6e8199bdf14c4b98a91023cc091cadb16745db702b6bb0339ef96ba05ac12cb1", 0x3, 0x1}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @eth={@link_local, @dev, @val={@val={0x9100, 0x0, 0x1, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x28, 0x4, 0x3, 0x8, 0x279, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x4e, 0x3, 0x3, [{@empty, 0x3}, {@broadcast, 0xbcc}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8}, {@empty, 0x457}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x1f, 0x0, 0x8, [0x9, 0x9, 0x2, 0xa862]}, @cipso={0x86, 0x2c, 0x1, [{0x6, 0x7, "3ebe9fefd1"}, {0x2, 0x2}, {0x2, 0x2}, {0x5, 0x5, "d9902d"}, {0x6, 0x5, "17ca7e"}, {0x7, 0x5, "6acfa6"}, {0x1, 0xc, "74d36f34444a0f4266a6"}]}, @cipso={0x86, 0xe, 0x3, [{0x7, 0x8, "f862180ea99e"}]}, @timestamp_prespec={0x44, 0x14, 0x27, 0x3, 0x2, [{@broadcast, 0x4}, {@multicast2, 0xffff}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x8, 0x3, [0x4, 0x3], "e7f2c2f6aa423f81"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xb88], "798ef832ec0518286e4dae30856a95bdb33fba8c192a4c67db971a4798dce3cc83791b87f3c23bb79055478c00c3e4167a05679256b94eac7f8dfa573a716f5b3127006afdee6f7a85ae69140108cafc50d86dcfb0ea49d14e21ffb41e1fc5e2ae8a25f1935577aaa2d4e96a31d6e975a009a7129937c31218b6f55432b399ca91f089f70370b4f8dcdb6c6cbd1d0bf16635264c01b94fe8668386035cbd2af416849cd1177cbf7ce399"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b1be3688dd7710e6b1950ce70f9424bc9fc88c3c2a9f7c8d74fd2a66edbd9ad9cf7d9074f731931e99d7dfc3e2280bc64700d2f4b7e3ea39370f411aa45804d5906ecfc8a65afdaffd4dacc1fc448ffb27701a497d992a8896dc552ac4a1092f2748e3d7eefbace285a978a00d4d2a99cad670e29bbe7bd46c4c1ec82c4a757bb177c93129055fa9fa94c4456655441b17cd8ea5f6401f216df6c2b582558257d2d86b72531def7d98dab73b"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x1, 0x3, 0x1, 0x3, 0x7, 0x8b}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x8, 0x0, 0x0, 0x0, 0x7, 0x62}, 0x2, {0x9, 0x6, 0x1, 0x9, 0x1}}}, {0x8, 0x6558, 0x2, "dd47dcdc4c5146b8e0e621a07f56d7d439b01351967e3439999106cff836fb325b96e8f83880f46589eea50c1016b2733b"}}}}}}}, 0x28f) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 678.432674][ T2760] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 678.479220][ T2760] usb 4-1: USB disconnect, device number 120 [ 678.493613][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 678.507738][ T23] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 678.518890][ T2760] sierra 4-1:0.0: device disconnected 09:49:30 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xa00) [ 678.787782][ T23] usb 5-1: device descriptor read/64, error 18 09:49:30 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="dad24d53ea0f8f40405e9fed43edeeeb1f524186ff494df975e65d179e871388baf4cfbf247abe2d9e7107e41add00a75ecaf9ce6a07634bc0862bf66c799b1afb073e406e582b97c9b8135ef470c6481aa57889f8def598d4df5a3174ca1d1950ac4053f02249adee48aa1d8bd8980e4ce080fd35dc610d2f03b31711f0b515e6c8c4a232c7f7a097a536d89208094cebba265b8578bf88d5fbe04a2c22e7bfaad71f0206d53c87c65fe962d3274c06410870a66c520c50131c41c68ec21c31e67873562db1b133b8ea87cca9d0221d3b6c19d2e4dd2f771b5a3b0de580d6b6743294edcc62eb78e5f6925c0ed2a84c7ec141c26a29", 0xf6}, {&(0x7f0000000140)="a7972ffa606ce35b5f8902961368257b83b26d7e7a20174056708877870154b3f4ac04e32307158fb8ee95665d4ae9453a6381d9e9c16407d36435a52bad62c9fdcdb58505ebd4", 0x47}], 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r4, 0x6, 0xc7, 0x2}, &(0x7f0000000240)=0x10) [ 679.191516][ T23] usb 5-1: device descriptor read/64, error 18 [ 679.321115][ T23] usb usb5-port1: attempt power cycle [ 679.447711][ T2845] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 679.687657][ T2845] usb 4-1: Using ep0 maxpacket: 8 [ 679.967713][ T2845] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 679.977127][ T2845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.986064][ T2845] usb 4-1: Product: syz [ 679.990843][ T2845] usb 4-1: Manufacturer: syz [ 679.995435][ T2845] usb 4-1: SerialNumber: syz [ 680.004115][ T2845] usb 4-1: config 0 descriptor?? [ 680.027713][ T23] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 680.048401][ T2845] hub 4-1:0.0: bad descriptor, ignoring hub [ 680.054381][ T2845] hub: probe of 4-1:0.0 failed with error -5 [ 680.067156][ T2845] sierra 4-1:0.0: Sierra USB modem converter detected [ 680.207842][ T23] usb 5-1: device descriptor read/8, error -61 09:49:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "44206551fc953400", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:31 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe) 09:49:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @val={@void, {0x8100, 0x4}}, {@x25={0x805, {0x0, 0x3, 0xf3, "3903c8c0cdb1997bd85b55"}}}}}, 0x24) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:31 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xa38) 09:49:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 680.287992][ T2845] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 680.331532][ T2845] usb 4-1: USB disconnect, device number 121 [ 680.345708][ T2845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 680.368737][ T2845] sierra 4-1:0.0: device disconnected [ 680.418286][ T23] usb 5-1: device descriptor read/8, error -71 09:49:32 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000140)=0x1c, 0x8) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160551]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x1ecc, 0x4}) [ 680.907647][ T23] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 680.998472][ T23] usb 5-1: Using ep0 maxpacket: 8 09:49:32 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 681.237728][ T2760] usb 4-1: new high-speed USB device number 122 using dummy_hcd 09:49:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) getsockname(r4, &(0x7f00000001c0)=@isdn, &(0x7f0000000240)=0x80) [ 681.277961][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 681.287020][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:49:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xb90) [ 681.351462][ T23] usb 5-1: Product: syz [ 681.369621][ T23] usb 5-1: Manufacturer: syz [ 681.391347][ T23] usb 5-1: SerialNumber: syz [ 681.424769][ T23] usb 5-1: config 0 descriptor?? [ 681.488337][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 681.494523][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 681.505137][ T2760] usb 4-1: Using ep0 maxpacket: 8 09:49:33 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19403, 0x0) [ 681.538911][ T23] sierra 5-1:0.0: Sierra USB modem converter detected [ 681.703611][ T23] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 681.749123][ T23] usb 5-1: USB disconnect, device number 77 [ 681.765063][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 681.775772][ T23] sierra 5-1:0.0: device disconnected [ 681.788161][ T2760] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 681.800697][ T2760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.809727][ T2760] usb 4-1: Product: syz [ 681.813902][ T2760] usb 4-1: Manufacturer: syz [ 681.819849][ T2760] usb 4-1: SerialNumber: syz 09:49:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) r6 = accept4$inet6(r5, 0x0, &(0x7f00000000c0), 0xc0000) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0x6, @local, 0x7}, {0xa, 0x4e22, 0x1000, @private0={0xfc, 0x0, [], 0x1}, 0x6}, 0x1000, [0x7ff, 0x78f, 0x8c, 0xffffffc1, 0x5, 0x7, 0x78f, 0x800]}, 0x5c) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 681.842169][ T2760] usb 4-1: config 0 descriptor?? [ 681.900468][ T2760] hub 4-1:0.0: bad descriptor, ignoring hub [ 681.906424][ T2760] hub: probe of 4-1:0.0 failed with error -5 [ 681.929326][ T2760] sierra 4-1:0.0: Sierra USB modem converter detected [ 682.133713][T24790] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3266459905 (104526716960 ns) > initial count (9157404736 ns). Using initial count to start timer. [ 682.169260][ T2760] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 09:49:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x801, 0xa9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xd5, @ipv4={[], [], @private=0xa010102}, 0x200}, r3}}, 0x30) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000000)=0x2) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000180)={0x5, 0x6, 0x2, 0x6, 0x7fffffff}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160551]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 682.218605][ T2760] usb 4-1: USB disconnect, device number 122 [ 682.238226][ T2760] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 09:49:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x100, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x40500, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000180)=[0x40, 0x4]) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8af308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 682.295203][ T2760] sierra 4-1:0.0: device disconnected 09:49:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe00) [ 682.386095][T24856] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3266459905 (104526716960 ns) > initial count (9157404736 ns). Using initial count to start timer. 09:49:33 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400000, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x8, {0x7, 0x1f, 0xf63, 0x142, 0x401, 0x8, 0x81, 0x9}}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r3, &(0x7f0000000740)="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", 0x592) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 09:49:34 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 682.757844][ T3849] usb 5-1: new high-speed USB device number 78 using dummy_hcd 09:49:34 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x7, 0x8440) sendmmsg$nfc_llcp(r0, &(0x7f0000001c00)=[{&(0x7f0000000080)={0x27, 0x1, 0x1, 0x6, 0x6, 0x1b, "2b9ee4e40ee6ab674123a89c2ed23899f7d0ea407d6e99db5ad4634715c904f6be175a183d32cb6f0d563a67a7a9e2b4ca9768bc8447bffe7d32863610fea4", 0x18}, 0x60, &(0x7f0000001280)=[{&(0x7f0000000100)="a7e947b6521033a8f2e55b698a19c6756414596dab7fea3fc41d9ec642b0001638287ee8c80c40cdabb958700983f7c2132efd28bc89a53944fbd82f083730aa6feeec5f7380f4f797eefd8324822a9fdb5e6acd87049e54aca2a044789c250606641d0b1ff23a0788c7b31eff61f58ec0fe5f0a628a1e73d3217e0b9f12092562289267cef3c6e14159a58908c34fa5f29dbd6386fd15c45915a4ce83b14c2abaf1fe295d0d97c29ddc307e", 0xac}, {&(0x7f00000001c0)="a2d03384609d457e41ffcc9cd6f52aaa3af6ed5eb611840b31e13556907d9b55d2eb105734585586533867dde9181994fc406139cf6cb726696ccd5ed5fdba33b198b4062ec07fd45555e72347eb10fb6868387ca86bf0181bff5fe19d2a1c9518364feecbdbdb130785bcc797241cf7aee48b199d8ac1f378fe742a0ddf0705d640bac109c8d7d3260239d4f446afe042631e877e9de8d2869303265618", 0x9e}, {&(0x7f0000000280)="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", 0x1000}], 0x3, &(0x7f00000012c0)={0x48, 0x29, 0x2, "6a660ed76ad20f183b66d0d5c8e35ea16181e66a4ac2b2272cdd56fe5e135800037af63841b7825ed1b1e94880a3fbf1aaf3974b7f99"}, 0x48, 0x40}, {&(0x7f0000001340)={0x27, 0x0, 0x0, 0x6, 0x7d, 0x3, "7b5a4832bc58f6c4ccd1ec8635c98328b79c35a331cb0034bcae1f90b9e156a0ca9bb79c80a1ffffc258a74289957f35c139fe0ec8a7d421e19100", 0x3d}, 0x60, &(0x7f0000001600)=[{&(0x7f00000013c0)}, {&(0x7f0000001400)="c11e10bbc4790eddf563754237b5eb0d9b1cf46c19605dc65c957f756e92f9ecd2bafd346bf6b38eeb2a15a35bdb5fa406fbaba27296ea91f97d8c4ee99c962a5e2129d17f2d5fa5fc277ef0e491d2153d09b3eb671adb7d33f5961d9a55c473071bb07974d8926514a984b0e2b04ab6c5594f568ac5f076803856fb0dfb1d38820d9ea2fc3a1c36f49ced210f5dd83f8e47e4b8a99635f49cb7b5b25f25aec4d5ee351ed9240960b29601092e82", 0xae}, {&(0x7f00000014c0)="71daf486663ef5bac88971dd98d77ddf77d5446aa50b065a1b735dba712fa1e9007182a123800ad97620f6c6b57e4252f4aa1351eaf62b199ce4b20bcb71bf93feed1a8bf62372ca58795c9f6b8e22d5a27255a2f7f4d50f", 0x58}, {&(0x7f0000001540)="58f2237514ecf5102f9c0a259d74efbe54027928d18a218e9205a0002414b2f6cc90c555d1a22c9e5ae6b5fd9dcd0b0b86d6c2e7d8636ee1e430336701bceef4339c5b09a17d765b4263a2e560c0116a7d61678ff0f8f25da2fb0d91d74d2e26d9178a7d86d5fda83a330b01fd4641e002565bef02894fcff3c79c7d400a108e651562148655bcf6f3a7a265606bfcc7ffe1e4b9c7ad4a2f59581aa3a8455e4cb39f152640fc0e9d810f8e6f6f8901d41846be", 0xb3}], 0x4, 0x0, 0x0, 0x40000}, {&(0x7f0000001640)={0x27, 0x1, 0x0, 0x4, 0x5, 0x1, "7d92cd73a125f5b98a4f2c6b8cb731f63e13ea1bbb97f022608ad6a319ec551b28ed088d929c93a3397c3ce59d30eba512faeeb8a1e1fdf9e9217631fe594a", 0x33}, 0x60, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0xc0080}, {&(0x7f0000001700)={0x27, 0x0, 0x1, 0x5, 0x9, 0x20, "6e02abe5640bbd00c26a2656c39db8d2045c388309689feec2f62b12e99cbb61fa61ebae2bc266dd5995facd59fa2bfc40c135af263c24534d9e8ddf5be159", 0x12}, 0x60, &(0x7f0000001a80)=[{&(0x7f0000001780)="983e62f9a177121d42f17583761375a318f339e38462fd84069784c483439e48f732202147423c47c37280d223baa19c22eab46c88b859d12870e92aabb3876a2b57d754df39140159c2d50b1a", 0x4d}, {&(0x7f0000001800)="b1bca01fa5a6022f14f3e1dc8267e3c2561b0e703b11fa1c5d7375564a1d0048d4153fb76b19c35f326fdbebcfb8f112b6e9c506a57153038d639ebd622588baf38158c1fd214e7d6a8474c3a3f78fea0c86c2134bbb8a3e25a16decd2415d111e47f1d4beee035f091ec168d7e077de0d3893564a9991408dcd74f7115d00e67ed94d8f2e7d28d5ff6422644f55ec5fc3371d70737e49d3c5599010", 0x9c}, {&(0x7f00000018c0)="5a52e9c18c978706e13eab0b689fc738ad5e9e4ad942c160e71ab6d73bad57c5ac9bc7643b112bf599f23f9ab0b7811472e959d43b39df52ff0d5567788b1fc1df5308c085", 0x45}, {&(0x7f0000001940)="c39c7f69747ac61f02081fb1b34d6d72207f739f4282c6562faf8aa38bf4f45f54fe685f561ba9b6e326b391b9666452495d4eb134044a26bee66967327400c6cefa335c12c1f3a3fcdb31401fd1adfa4f90b385597e", 0x56}, {&(0x7f00000019c0)="37aca34f56d2dce0babf59dcd14d404451e4a4b84cd4c46769c0a09db1ab8521879f29fb9087a1286e104780e7c1fafef21b40daf6341f01b953caf94f112040ad4d288667fc3249cbf945a354b1b59d8b340bfe1d17e9bf2f3711f6806f09f8c538164ad8db0178eb0f34dd98f3aa1997ceb58c1ae2a42e9277e6e0bae05f818361e66942b1c30bcd7fc2953c70c1ec035e64", 0x93}], 0x5, &(0x7f0000001b00)={0xe8, 0x113, 0xffffff81, "f6909d34413dad3917cd55e4b4bcacac03ec81766a8c73c2bc8ec7c765ace264000b84458f359b1725e8775713ee6e128345030711a24673ecd66a904dcfd76097151b63e859e1e2133578a2921ef0068bae74b14789407b0680cc638fc5e78f9dc9d82a7e22bf7add310c060757ea0f0082886ad436a290cb742345eaf200f203495f4e03d95b4b9c2204946ddb3c950f650c8ba3fe9be367929ee80ace1432d3abf3b9945271953f9ab24023d6297353cef7baffbfad69b6a8c8dd6ca91ee3f609206b945444a4fbb4ee0f59167e884b6105"}, 0xe8, 0x8050}], 0x4, 0x20008001) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 682.997585][ T3849] usb 5-1: Using ep0 maxpacket: 8 09:49:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaa0014000000000067907800000000e000000100000000000000"], 0x26) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:34 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x1014) [ 683.227494][ T2844] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 683.235308][ T2760] usb 4-1: new high-speed USB device number 123 using dummy_hcd 09:49:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4) [ 683.330602][ T3849] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 683.339962][ T3849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.348365][ T3849] usb 5-1: Product: syz [ 683.352722][ T3849] usb 5-1: Manufacturer: syz [ 683.357546][ T3849] usb 5-1: SerialNumber: syz [ 683.366853][ T3849] usb 5-1: config 0 descriptor?? [ 683.431209][ T3849] hub 5-1:0.0: bad descriptor, ignoring hub [ 683.437297][ T3849] hub: probe of 5-1:0.0 failed with error -5 [ 683.444155][ T3849] sierra 5-1:0.0: Sierra USB modem converter detected [ 683.481225][ T2844] usb 3-1: Using ep0 maxpacket: 8 [ 683.486469][ T2760] usb 4-1: Using ep0 maxpacket: 8 [ 683.660188][ T3849] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 683.698658][ T3849] usb 5-1: USB disconnect, device number 78 [ 683.709936][ T3849] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 683.730636][ T3849] sierra 5-1:0.0: device disconnected [ 683.757662][ T2844] usb 3-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 683.768327][ T2760] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 683.778414][ T2844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.786650][ T2760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.798390][ T2844] usb 3-1: Product: syz [ 683.802770][ T2760] usb 4-1: Product: syz [ 683.807111][ T2844] usb 3-1: Manufacturer: syz [ 683.812966][ T2760] usb 4-1: Manufacturer: syz [ 683.818174][ T2844] usb 3-1: SerialNumber: syz [ 683.823243][ T2760] usb 4-1: SerialNumber: syz [ 683.834157][ T2844] usb 3-1: config 0 descriptor?? [ 683.843224][ T2760] usb 4-1: config 0 descriptor?? [ 683.898507][ T2844] hub 3-1:0.0: bad descriptor, ignoring hub [ 683.904474][ T2844] hub: probe of 3-1:0.0 failed with error -5 [ 683.916137][ T2760] hub 4-1:0.0: bad descriptor, ignoring hub [ 683.922490][ T2760] hub: probe of 4-1:0.0 failed with error -5 [ 683.945173][ T2844] sierra 3-1:0.0: Sierra USB modem converter detected [ 683.963852][ T2760] sierra 4-1:0.0: Sierra USB modem converter detected [ 684.110127][ T2844] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 684.134684][ T2760] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 684.148612][ T2844] usb 3-1: USB disconnect, device number 96 09:49:35 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x402, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x68, 0xe32f, 0x1, 0x2, 0x25ba, 0x4, 0x3ff, 0x80000001, 0x3, 0x4, 0x7, 0x40, 0x7fff, 0x4, 0x0, 0x4, {0x5, 0x3}, 0x7, 0xf7}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 684.196336][ T2844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 684.208305][ T2760] usb 4-1: USB disconnect, device number 123 09:49:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 684.262549][ T2760] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 684.281172][ T2844] sierra 3-1:0.0: device disconnected [ 684.298219][ T2760] sierra 4-1:0.0: device disconnected 09:49:35 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x1410) 09:49:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @rand_addr=0x64010100}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r8, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES64=r3, @ANYRES32=r2], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 09:49:36 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x2, 0x40, 0xfffffff8, 0xff, 0x5, 0x71}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 684.607404][ T3842] usb 5-1: new high-speed USB device number 79 using dummy_hcd 09:49:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 09:49:36 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) creat(0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x7c}}, 0x80) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x31240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000180)='security.capability\x00', 0x0, 0x0, 0x0) [ 684.867463][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 684.876804][T25005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 684.948543][T25007] overlayfs: filesystem on './bus' not supported as upperdir [ 684.957967][ T3849] usb 4-1: new high-speed USB device number 124 using dummy_hcd 09:49:36 executing program 2: unshare(0x44000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001880)={r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x19, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000018c0)={r6, 0x7, 0xa0, "67319ef25975371677fe4e4a37aa645f7806596f264131ff93d112945408eb1e9438ce6797fd7d01fa9d417d0f7396945d478322821668ea9f65cf74d5b2ed7df1d4899a62ce0fd764736b6a017cbf2293955743c159910b518b39c9103e9c625625e2250095357fa30f43b54f47b65e7c6cd2248515b05f22877b6948026ea58475586b7ca235dc1c2e1664a5d62a312dad11384b5bd64cbec4f32fc6b3cbc9"}, 0xa8) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0xd1, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) [ 685.147210][T25011] IPVS: ftp: loaded support on port[0] = 21 [ 685.177665][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 685.193935][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.215569][ T3842] usb 5-1: Product: syz [ 685.228269][ T3842] usb 5-1: Manufacturer: syz [ 685.238413][ T3849] usb 4-1: Using ep0 maxpacket: 8 09:49:36 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x2000) [ 685.249348][ T3842] usb 5-1: SerialNumber: syz 09:49:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x4, 'syz0\x00', @bcast, 0x40, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendto$inet6(r0, 0x0, 0x0, 0x800, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 685.305879][ T3842] usb 5-1: config 0 descriptor?? 09:49:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x0, 0x1, 0x7, 0xd, 0x400, 0x9}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 685.382986][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 685.390387][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 685.414656][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected [ 685.527561][ T3849] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 685.544463][ T3849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.565457][ T3849] usb 4-1: Product: syz [ 685.575513][ T3849] usb 4-1: Manufacturer: syz [ 685.583635][ T3849] usb 4-1: SerialNumber: syz [ 685.595141][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 685.613962][ T3849] usb 4-1: config 0 descriptor?? [ 685.668517][ T3842] usb 5-1: USB disconnect, device number 79 [ 685.682521][ T3849] hub 4-1:0.0: bad descriptor, ignoring hub [ 685.691612][ T3849] hub: probe of 4-1:0.0 failed with error -5 [ 685.705905][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 685.718914][ T3849] sierra 4-1:0.0: Sierra USB modem converter detected [ 685.732056][ T3842] sierra 5-1:0.0: device disconnected [ 685.800989][T25011] IPVS: ftp: loaded support on port[0] = 21 [ 685.889319][ T3849] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 685.958278][ T3849] usb 4-1: USB disconnect, device number 124 [ 685.966225][ T3849] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 685.998273][ T3849] sierra 4-1:0.0: device disconnected 09:49:37 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x380a) [ 686.397314][ T3840] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 686.507577][ T316] tipc: TX() has been purged, node left! [ 686.647277][ T3840] usb 5-1: Using ep0 maxpacket: 8 [ 686.657961][ T2484] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 686.897322][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 686.957559][ T3840] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 686.966735][ T3840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.975708][ T3840] usb 5-1: Product: syz [ 686.980443][ T3840] usb 5-1: Manufacturer: syz [ 686.985047][ T3840] usb 5-1: SerialNumber: syz [ 686.996148][ T3840] usb 5-1: config 0 descriptor?? [ 687.043003][ T3840] hub 5-1:0.0: bad descriptor, ignoring hub [ 687.055059][ T3840] hub: probe of 5-1:0.0 failed with error -5 [ 687.074525][ T3840] sierra 5-1:0.0: Sierra USB modem converter detected [ 687.183885][ T2484] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 687.203313][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.246610][ T2484] usb 4-1: Product: syz [ 687.258935][ T3840] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 687.267954][ T2484] usb 4-1: Manufacturer: syz [ 687.272566][ T2484] usb 4-1: SerialNumber: syz 09:49:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000aa01efa6100d880866425c96decec8d8246a5f93781b49ebe6ca923c2c2221a91fe557aae587c823bfc551b067d97ab85c0906a11953a3f05a216a9056b44964d9932460080326249ebd0fdc5b4cb2477e79a6e977f489d392282a603ac6dfab502d48602eb27ec8c95fdda4a7c4ba9ec8dc33d0fe3f04832c60f18be7c5a7cf5dac"], 0x86) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x19, &(0x7f00000000c0)={r9}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r9, 0x81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r9, 0x9}, 0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40051, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @local}, 0x1c) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000140), &(0x7f0000000080)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:38 executing program 2: r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe(&(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000080)={0x1, 0x2, {0x2, 0x2, 0x7ff, 0x3, 0x3}, 0x1}) sendmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x2, 0x0) 09:49:38 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d090102030109021200dfff000000000000000000"], 0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x100000001, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d1895d4aab119a52cae505e4f46cf8184a42a4a2469c237d854e231fda51b65e7f04ba1cc30c0690a47237c5ce07125affe9190b6d69ecf2d636710bcd871e062877f12a6e39af4973a2e6907bb2d125cdd26af9dcee65a0a5ea428a52e3edb89d6833659cbd41e4e1a06773139ebfa0ff92f64fce67e58beddbe9fed5dca5a22585879d7077f0c93b0948f6c97f049f4dbc8c31e449d67da749f143b8020f991af6aad8917d8b2030ab32988d749801a81bb395fd5cb1ba6869f1a1e67bbfccbb2683bf27018fdca38db924432e0458748033e74affab33cb697cc00180", 0xde, 0x80000001}], 0x1002000, &(0x7f0000000200)={[{@sbsector={'sbsector', 0x3d, 0x8}}, {@map_normal='map=normal'}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_normal='map=normal'}, {@check_strict='check=strict'}], [{@seclabel='seclabel'}, {@subj_user={'subj_user'}}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000002c0)={0x5, 0x0, 0xfffffe00, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f00000013c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000340)={0x1010, 0x3ed, 0x8, 0x70bd2d, 0x25dfdbfc, "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", ["", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x90}, 0x200c0004) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000280)=""/11) [ 687.310322][ T2484] usb 4-1: config 0 descriptor?? [ 687.319669][ T3840] usb 5-1: USB disconnect, device number 80 [ 687.346491][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 687.398053][ T2484] hub 4-1:0.0: bad descriptor, ignoring hub [ 687.404185][ T2484] hub: probe of 4-1:0.0 failed with error -5 [ 687.422829][ T3840] sierra 5-1:0.0: device disconnected [ 687.435095][ T2484] sierra 4-1:0.0: Sierra USB modem converter detected 09:49:39 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x8000, 0x1f, 0xbcbb, 0x2, 0xc7f2, 0x4}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="7201000052b68508991122689d0901020301090212000100000000090400000009587f023629ab9bd0f56d62f6ae485a9f543a82e526b18cc257cb74e409aaef8046ec6698e49842eb364b4afd955ebd5ff76235b7e18e9bf577e8bed29e02e7e61eda2810a592ab6aadb29861280d80a16c2b535445a4c88465d3599e31f8f628"], 0x0) 09:49:39 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x3f00) 09:49:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7f1c) socket(0x1f, 0x5, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 687.609112][ T2484] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 09:49:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000440)=0x5) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x1d3, 0xf, &(0x7f0000000000)="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"}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r3, 0xc91add0bf88807dd, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x60}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400400c5}, 0x10) [ 687.667941][ T2484] usb 4-1: USB disconnect, device number 125 [ 687.700389][ T2484] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 687.734351][ T2484] sierra 4-1:0.0: device disconnected [ 687.839351][ T3840] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 688.105557][ T3840] usb 5-1: Using ep0 maxpacket: 8 [ 688.118135][ T2484] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 688.243201][ T3840] usb 5-1: config 255 has too many interfaces: 223, using maximum allowed: 32 [ 688.279709][ T3840] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 688.325084][ T3840] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 223 [ 688.357199][ T2484] usb 4-1: Using ep0 maxpacket: 8 09:49:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7000000090000950000000000000017528657435694a558273ad1326fc6eee6b1037a75cfc3e622430dfc958d336802232c3e1644b565be9cd9e0bf67d77e40e94d123df3d9ae65241c499b22a7561b8850821bc1f8b5b002a1e5a89f0dac861e73569bd95a57877e8d3ab9539885f753b5c5bd3e11ace9a228f364488b7fab83160d004eb44583fbccc3e40d72053c839e3e2eb7ddc88c91b4dca258861f5ab9584c392ddfe4cf2cef48a7accd726339c67fbf"], &(0x7f0000000100)='syzkaller\x00', 0x20001, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) close(r7) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000180), 0x4) preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000140)=0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) [ 688.533243][ T3840] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 688.545833][ T3840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.591736][ T3840] usb 5-1: Product: syz [ 688.607115][ T3840] usb 5-1: Manufacturer: syz [ 688.623841][ T3840] usb 5-1: SerialNumber: syz [ 688.637738][ T2484] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 688.656978][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.686545][ T2484] usb 4-1: Product: syz [ 688.702139][ T2484] usb 4-1: Manufacturer: syz [ 688.716822][ T2484] usb 4-1: SerialNumber: syz [ 688.731075][ T2484] usb 4-1: config 0 descriptor?? 09:49:40 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x4000) 09:49:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f00000000c0)={0x3, 0x3, 0x11, 0x0, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x43, 0x4, 0x0, 0x0, 0x10c, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1, {[@lsrr={0x83, 0xb, 0x29, [@broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0xa9, [@loopback]}, @timestamp_addr={0x44, 0x4c, 0xec, 0x1, 0xd, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8506}, {@multicast2, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20000008}, {@remote, 0x6}, {@private=0xa010102, 0x2}, {@empty, 0x2}, {@loopback, 0x4}]}, @cipso={0x86, 0x6e, 0xffffffffffffffff, [{0x1, 0xf, "f6f3dfe5cb46c660d227931901"}, {0x7, 0x10, "dc0a501b62f855ec740b8148bf15"}, {0x7, 0xf, "8ac939f5df7edc94c04625e524"}, {0x5, 0x8, "154564683736"}, {0x0, 0xc, "973d4ea2b4acdf9e6429"}, {0x7, 0xc, "2c22d1eadb916f03341b"}, {0x0, 0x10, "20bfb446b3991a177204beb04d3c"}, {0x1, 0x5, "2ee991"}, {0x6, 0x3, "d1"}, {0x0, 0x2}]}, @ssrr={0x89, 0x7, 0xf, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @timestamp_addr={0x44, 0x24, 0x55, 0x1, 0x9, [{@private=0xa010100, 0x1}, {@broadcast}, {@local, 0x7}, {@multicast2, 0x7}]}]}}}}}}}, 0x11e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r8, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x111d, 0x1, 0x4, 0x2000, 0x9e3, {0x0, 0xea60}, {0x3, 0x2, 0x3, 0x1, 0xfc, 0x38, "a8a8b212"}, 0x9, 0x1, @offset=0x101, 0x7, 0x0, r8}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 688.963760][ T2844] usb 5-1: USB disconnect, device number 81 [ 689.047823][ T2484] hub 4-1:0.0: bad descriptor, ignoring hub [ 689.053816][ T2484] hub: probe of 4-1:0.0 failed with error -5 [ 689.086701][ T2484] sierra 4-1:0.0: Sierra USB modem converter detected [ 689.135842][ T2484] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 689.178565][ T2484] usb 4-1: USB disconnect, device number 126 [ 689.196079][ T2484] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 689.216806][ T2484] sierra 4-1:0.0: device disconnected 09:49:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x800, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@remote, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x8001, 0x4, 0x8, 0x0, 0x9, 0x5001c4, r8}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 689.605922][T25251] device bridge8 entered promiscuous mode 09:49:41 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x6000) [ 689.737137][ T2844] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 689.807088][ T2484] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 689.980080][ T2844] usb 5-1: Using ep0 maxpacket: 8 [ 690.060459][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 690.100421][ T2844] usb 5-1: config 255 has too many interfaces: 223, using maximum allowed: 32 [ 690.123839][ T2844] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 690.154427][ T2844] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 223 09:49:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @llc={@snap={0x54, 0x154, "7dce", "b0837a", 0x883b, "9cda35b157927feac15ad2a37844cc522a23a686175bcd869cc7bf15590243f29940506e5c5ed086ce3a3522b98e56329394b4e1fda20ccee43706cb383f3c47b797027e54cd9cd86c990d13edff9c757d1db92ce52a677857eb0fb63bda0c5fc531952e6c9bc6885491de6d468bb41d7f083bb47080a92f42dfa27bfb5410cbdc2ae9de552b2e5598560fcf9d575d7bb199206d52a1b0db6023da1d962118f045321eb40d1284c1b8093ba08bb7fd5806e7f87beb9c44465c557a8eb3cc0acde23772bc9b2ef12563caa7867ce3bf845862c0f15b3e90fc1e53e3677e8e5b8960be371c09c0d6e7aff4"}}}, 0xf7) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) getsockname$netlink(r4, &(0x7f00000000c0), &(0x7f0000000180)=0xc) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 690.347706][ T2484] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 690.357573][ T2844] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 690.379023][ T2844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.412787][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.443074][ T2844] usb 5-1: Product: syz [ 690.449806][ T2484] usb 4-1: Product: syz [ 690.459001][ T2844] usb 5-1: Manufacturer: syz [ 690.463670][ T2484] usb 4-1: Manufacturer: syz 09:49:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280074ec275603f491d343f404c670b0b00010067656e65766500001000028008000200ac1e000104000600"], 0x40}}, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="fc27dc0ef5562ff42af0a1fe3bec6ff72b757eb4c972c9163444dd0ae1bc6b3f94d5523cf26d3021498a95ff9e3bb0149c61c5b86815505a9098e61aace247ee5b"], 0x0) [ 690.485057][ T2844] usb 5-1: SerialNumber: syz [ 690.491589][ T2484] usb 4-1: SerialNumber: syz [ 690.521222][ T2484] usb 4-1: config 0 descriptor?? [ 690.527179][ T2844] usb 5-1: can't set config #255, error -71 09:49:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1404, 0x8, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "4a7b9dbdbf7abc4b", "d78e4174b2abaf69f41aad12608b152f06d8d93763dabf9147afe6a7160db0b3", 'h\"#$', "23fda727dd039512"}, 0x38) [ 690.548381][ T316] tipc: TX() has been purged, node left! [ 690.580086][ T2844] usb 5-1: USB disconnect, device number 82 [ 690.616039][T25272] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:42 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x7004) [ 690.777630][ T2484] hub 4-1:0.0: bad descriptor, ignoring hub [ 690.783747][ T2484] hub: probe of 4-1:0.0 failed with error -5 09:49:42 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) getsockname(r2, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x19, &(0x7f00000000c0)={r7}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r7, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e21, 0x400, @private1}}, 0x3, 0x20}, &(0x7f0000000280)=0x90) prctl$PR_SET_TSC(0x1a, 0x1) [ 690.819283][ T2484] sierra 4-1:0.0: Sierra USB modem converter detected [ 690.878868][ T2484] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 690.917978][ T2484] usb 4-1: USB disconnect, device number 127 [ 690.939297][ T2484] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 690.978045][ T2484] sierra 4-1:0.0: device disconnected [ 691.343793][T25272] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 09:49:42 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508990e772298bf7ab7b901090212000100000000090400000009"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400200002f0a3594b6c7a7b0b83b9e87bbf30005e364dd3b5e3b27f8034b4a6b50defe4edfa1b68c443bedfc0098d0d65569d108564968bc94696a1e81f02e767f4bc1e86a4e30bb065cebf8e33c46442dce", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000200ac1e000104000600"], 0x40}}, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r4, 0xc3e5d837c2469b85, 0x0, @in6={0xa, 0x4e23, 0x45, @local, 0x401}}}, 0x90) 09:49:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x1, 0x1f}]}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val, @void, @eth={@random="9f96d700", @dev, @val={@void, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x2a) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, r3, r4) 09:49:43 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x800, 0x7, 0x1, {0x7, @raw_data="33668a55fa3842c88bea2ab3888cab54a0a14323c255d8663cb23182046e05678f3878f99f9ba1e53c10cb40ad73614d0f21c2391296798b5e677a187fb16f84627257547a56a8de37a0a7d551cf7462391e96276791d347f7ca59b2cebc55d31b11f97ff26c5d3d61360911501becd6ec8c42bb8d9f41d56713c12d79e480aa77165faafd185424817d0d6561e969072f54604dee38a833ecf0283ed79fd6b19c30caca8979285b5f573c85c04cd1ef2758c0fa0316447b9e126edc4ab007b43c3ec25d5fafcdc8"}}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000000200)="aaf5d75f9776120e6da1abf3c171fbec208593132a8b86143f69466712c3ba1f009459c8dbfe6aad8a485aa5e28810235f7657318ed25ea9b5dc8292a5ba3dd749a1edfd", &(0x7f0000000280)=""/225}, 0x20) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="8600000000000004000000000856457ff5ca0c85843ce8893a0000"], &(0x7f0000000080)=0xe) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5601000052b685e9981122689d09010a030109021200010000000009040000a509"], 0x0) 09:49:43 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x8404) [ 691.747209][ T2760] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 691.989021][ T2760] usb 5-1: Using ep0 maxpacket: 8 [ 692.009945][ T2484] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 692.267194][ T2760] usb 5-1: New USB device found, idVendor=0e99, idProduct=2277, bcdDevice=bf.98 [ 692.276340][ T2760] usb 5-1: New USB device strings: Mfr=122, Product=183, SerialNumber=185 [ 692.297000][ T2484] usb 4-1: device descriptor read/64, error 18 [ 692.307984][ T2760] usb 5-1: Product: syz [ 692.312162][ T2760] usb 5-1: Manufacturer: syz [ 692.316751][ T2760] usb 5-1: SerialNumber: syz [ 692.341828][ T2760] usb 5-1: config 0 descriptor?? 09:49:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) prctl$PR_SET_ENDIAN(0x14, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000140)=0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2010, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpgrp(r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="617ad837df13ce000600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000200ac1e000104000600"], 0x40}}, 0x0) kcmp(0xffffffffffffffff, r4, 0x3, r0, r5) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000180)={0xfc, 0x1b, 0xfff, 0x9, "d0e30441af6e2b055a8658a89924143d6a375b06904d95e2d052e847e93fa38b"}) [ 692.407718][ T2760] hub 5-1:0.0: bad descriptor, ignoring hub [ 692.413793][ T2760] hub: probe of 5-1:0.0 failed with error -5 [ 692.692935][ T2484] usb 4-1: device descriptor read/64, error 18 09:49:44 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x900b) 09:49:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaaaaaa00080045000014000000000067907800000000e00000011d3f9e2582b6d69002b717987b71b50db2a7b655834fa9efed75b15bd15c8ec163ae776c07bf4478f1bfd45c5b5e798d8f85c5ca04b261b222b8bbc2ae2513968f1a8706362035673f4077b4dc1be17bbd9f0f2e7ed0dd092cc6a0389c9e66beb5e5fe05c4934d5820d03beaa7d06934c745b0e32e73cb1fd39ba2ab918eff18f10a0306cf554fc17e304481039dd218147c400368495b251f96abc5e2e19b4de7f23c77cf07235018bd08beb89384a3bb2dfb73f549bd88ee6489428511811495e96b64549e29d9d245a3"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x19, &(0x7f00000000c0)={r8}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r8, 0x91b, 0xfffa}, 0xfffffffffffffffd) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x0, 0x2}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 692.888169][ T3849] usb 5-1: USB disconnect, device number 83 [ 692.984433][ T2484] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 693.246929][ T3849] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 693.266923][ T2484] usb 4-1: device descriptor read/64, error 18 09:49:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000080)=0xffff0c95, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 693.426969][T18872] usb 5-1: new high-speed USB device number 84 using dummy_hcd 09:49:45 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xc805) [ 693.656916][ T2484] usb 4-1: device descriptor read/64, error 18 [ 693.677119][ T3849] usb 3-1: not running at top speed; connect to a high speed hub [ 693.697379][T18872] usb 5-1: Using ep0 maxpacket: 8 [ 693.777119][ T2484] usb usb4-port1: attempt power cycle [ 693.810218][ T3849] usb 3-1: config 1 interface 0 has no altsetting 0 [ 693.858675][ T3849] usb 3-1: language id specifier not provided by device, defaulting to English 09:49:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f00000000c0)={{{0xc, 0x1}}, 0xf1, 0x101, &(0x7f0000000180)="927e713b1337d055c4642f55839bf0d2d8263a8ab0a55164c256d7293700825c4e18657af360103e45f6939999caa04f9a9d280eacb47c45de7c5af173d4ba95644e8b1d9996e5504c960c4197a67254baad1e9fc416bf22f09756eaf7e419c9d0c711b6e6fdbe267be676de239f2dc1a88cc869cb2972061c4c14940a899589b574c94bfcc81750fe6ad39059c848ab6a8e15858b547c56c7fcb68eb2be18167f84a3583184249f907f40195ff25418c02956176615ab49adf47dfe3381b87625c243dc7e6c3c1d5aff44b41abe9250ac504fec14fd201f4b6604a2ad41cfcf5af3f2590b9be2b467786086c91bd70a64"}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 694.008385][T18872] usb 5-1: New USB device found, idVendor=0e99, idProduct=2277, bcdDevice=bf.98 [ 694.017525][ T3849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.026548][ T3849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.036290][T18872] usb 5-1: New USB device strings: Mfr=122, Product=183, SerialNumber=185 [ 694.045529][ T3849] usb 3-1: Product: syz [ 694.050752][T18872] usb 5-1: Product: syz [ 694.054919][T18872] usb 5-1: Manufacturer: syz [ 694.060720][ T3849] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 694.067917][T18872] usb 5-1: SerialNumber: syz [ 694.072584][ T3849] usb 3-1: SerialNumber: syz [ 694.083117][T18872] usb 5-1: config 0 descriptor?? [ 694.143176][T18872] hub 5-1:0.0: bad descriptor, ignoring hub [ 694.149867][T18872] hub: probe of 5-1:0.0 failed with error -5 09:49:45 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) syz_usb_connect$uac1(0x5, 0xcb, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x32, 0x80, 0x5a, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0x20}, [@extension_unit={0x9, 0x24, 0x8, 0x5, 0x843, 0x8, "7a83"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x5, 0x4, "abc98a7e"}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x5, "212774ae"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0xff, 0x7f, {0x7, 0x25, 0x1, 0x83, 0x1, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x6, 0x5, "fb466486"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x4, 0x1, 0x6, "e71c40dc4700d90f"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x20, 0xec, "4be9", "9ce9f8"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x14, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0xa4, 0x5, 's', "b33f00"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x20, 0xce, 0x3, {0x7, 0x25, 0x1, 0x2, 0x32, 0xe2}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x10, 0x8, 0x0, 0x10, 0x20, 0x4}, 0xac, &(0x7f0000000180)={0x5, 0xf, 0xac, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x2, 0x9}, @generic={0xa0, 0x10, 0xa, "867d8fc36b2b103296fc734f015103cc0c03225b577a525ad18fda0429062814aea9f55ac9a9b6785ef96ec71931428c3e99657cac99f7d8f1249e7cfc1c8f2331cbd5ba04eb5cdd007f10548166f137618e67fa8bc773c6086e0268489ad54bebe3e6c7c847171ce503f7304c7819c864bd2768a6ef378e4c8a96e1b0c8b089dfeaa5648ff1ccae4c226c4a94de7a54575eaf467788f8c6b1d370083b"}]}}) 09:49:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@empty, 0x401, 0x9, 0x4e24, 0xafa, 0x0, 0x40, 0xa0, 0x3c, r7, r9}, {0x0, 0x8, 0x9ca3, 0x7, 0x5, 0xff, 0xcc, 0x2}, {0x6, 0x2, 0x7, 0x7}, 0x6, 0x6e6bb8, 0x1, 0x1, 0x2}, {{@in6=@ipv4={[], [], @local}, 0x4d4, 0x33}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0xeb, 0x8, 0x48c, 0xba}}, 0xe8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr, 0x9e}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 694.362834][T25356] tipc: Cannot configure node identity twice [ 694.441887][T25396] device bridge9 entered promiscuous mode [ 694.452648][T25396] bridge9: port 1(bridge_slave_0) entered blocking state [ 694.460753][T25396] bridge9: port 1(bridge_slave_0) entered disabled state [ 694.472443][T25396] device bridge_slave_0 entered promiscuous mode [ 694.479969][ T2760] usb 5-1: USB disconnect, device number 84 [ 694.487101][ T3849] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 694.491205][ T2484] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 694.499804][ T3849] usb 3-1: USB disconnect, device number 97 [ 694.527225][T25396] bridge9: port 1(bridge_slave_0) entered blocking state [ 694.534590][T25396] bridge9: port 1(bridge_slave_0) entered forwarding state [ 694.607867][ T2484] usb 4-1: Invalid ep0 maxpacket: 233 09:49:46 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x3, "196a1d"}, 0x4) 09:49:46 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xdc05) [ 694.888944][ T2844] usb 5-1: new high-speed USB device number 85 using dummy_hcd 09:49:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x10001, @mcast2}}, 0x0, 0x0, 0x14, 0x0, "118fc547b4c1ecb8ef841c2adce46aef1d4b883abb5567150fb0412ad0ecceae387aa7687846358dbf1b17bc24cede5f2ca91bd3316807b9f86dc708a00299f147f407b8fedac239e63d67c95206c834"}, 0xd8) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x59, 0x10, 0x705, 0x0, 0x4}, 0x20}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000180)={'syz1', "46b9cb388f2cec25872932bee095a858679bc54feb3be23e6f030762083b95cd19730600e8b832b26de581b11760a9d1baaff1e785a64cf6186702af1b10a6c5f7e9e20612013f397d0094c4ce579b9dfce2d15eae26c59914f646dc794dfe5e64db38a6240cadc0771ab25596894296edd27ddd54e8e6601b3ba9a1381782191b587eb1fa48e0d3334e0ce7d45d6639"}, 0x94) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 695.058219][ T2484] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 695.136877][ T2844] usb 5-1: Using ep0 maxpacket: 8 [ 695.147103][ T23] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 695.160822][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 695.232153][T25435] device bridge_slave_0 left promiscuous mode [ 695.239721][T25435] bridge9: port 1(bridge_slave_0) entered disabled state 09:49:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x19, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r6, 0x3, 0x10}, &(0x7f0000000140)=0xc) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 695.417463][ T2844] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 695.426572][ T2844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.435523][ T2844] usb 5-1: Product: syz [ 695.440452][ T2484] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 695.450373][ T2844] usb 5-1: Manufacturer: syz [ 695.454974][ T2844] usb 5-1: SerialNumber: syz [ 695.460981][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.474202][ T2844] usb 5-1: config 0 descriptor?? [ 695.482729][ T2484] usb 4-1: Product: syz [ 695.489095][ T2484] usb 4-1: Manufacturer: syz [ 695.493830][ T2484] usb 4-1: SerialNumber: syz [ 695.504085][ T2484] usb 4-1: config 0 descriptor?? [ 695.527546][ T2844] hub 5-1:0.0: bad descriptor, ignoring hub [ 695.533539][ T2844] hub: probe of 5-1:0.0 failed with error -5 [ 695.546452][ T2844] sierra 5-1:0.0: Sierra USB modem converter detected [ 695.569486][ T23] usb 3-1: not running at top speed; connect to a high speed hub 09:49:47 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe0ff) [ 695.579798][ T2484] hub 4-1:0.0: bad descriptor, ignoring hub [ 695.586002][ T2484] hub: probe of 4-1:0.0 failed with error -5 [ 695.607708][ T2484] sierra 4-1:0.0: Sierra USB modem converter detected [ 695.676962][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 695.716978][ T23] usb 3-1: language id specifier not provided by device, defaulting to English [ 695.729245][T25401] udc-core: couldn't find an available UDC or it's busy [ 695.736281][T25401] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.758462][ T2844] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 695.791594][ T2484] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 695.807532][ T2844] usb 5-1: USB disconnect, device number 85 [ 695.843306][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.878131][ T2844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 695.887451][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.895693][ T23] usb 3-1: Product: syz [ 695.901144][ T2484] usb 4-1: USB disconnect, device number 5 [ 695.919252][ T2484] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 695.935057][ T2844] sierra 5-1:0.0: device disconnected [ 695.942624][ T23] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 695.983357][ T2484] sierra 4-1:0.0: device disconnected [ 696.002226][ T23] usb 3-1: SerialNumber: syz 09:49:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x0, 0x2}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:49:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 696.171331][ T23] usb 3-1: can't set config #1, error -71 [ 696.201156][ T23] usb 3-1: USB disconnect, device number 98 09:49:47 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@ll, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/104, 0x68}], 0x1, &(0x7f0000000200)=""/139, 0x8b}, 0x40000000) 09:49:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:48 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe803) [ 696.617373][ T3842] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 696.649917][ T23] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 696.826770][ T2484] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 696.876778][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 697.056971][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 697.077008][ T2484] usb 4-1: Using ep0 maxpacket: 8 [ 697.140751][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 697.186760][ T23] usb 3-1: language id specifier not provided by device, defaulting to English [ 697.196983][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 697.206245][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.214789][ T3842] usb 5-1: Product: syz [ 697.219564][ T3842] usb 5-1: Manufacturer: syz [ 697.224357][ T3842] usb 5-1: SerialNumber: syz [ 697.231489][ T3842] usb 5-1: config 0 descriptor?? [ 697.278017][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 697.284016][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 697.295544][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected [ 697.308409][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.323093][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.333041][ T23] usb 3-1: Product: syz [ 697.340820][ T23] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 697.349074][ T23] usb 3-1: SerialNumber: syz [ 697.365574][ T2484] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 697.383879][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.393447][ T2484] usb 4-1: Product: syz [ 697.398338][ T2484] usb 4-1: Manufacturer: syz [ 697.402948][ T2484] usb 4-1: SerialNumber: syz [ 697.409871][ T2484] usb 4-1: config 0 descriptor?? [ 697.447408][ T2484] hub 4-1:0.0: bad descriptor, ignoring hub [ 697.462773][ T2484] hub: probe of 4-1:0.0 failed with error -5 09:49:49 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000080)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 09:49:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={0x0, @phonet={0x23, 0x3, 0x7, 0xfa}, @can={0x1d, 0x0}, @rc={0x1f, @none, 0x80}, 0xe, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000280)='syz_tun\x00', 0x800, 0x3f, 0xf000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x108, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}]}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'nr0\x00'}, {0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80001}, 0x4008000) read(r2, &(0x7f0000000140)=""/90, 0x5a) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:49 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xf401) [ 697.489574][ T2484] sierra 4-1:0.0: Sierra USB modem converter detected [ 697.510894][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 697.588318][ T3842] usb 5-1: USB disconnect, device number 86 [ 697.614660][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 697.666516][ T3842] sierra 5-1:0.0: device disconnected [ 697.872050][T25492] tipc: Cannot configure node identity twice [ 697.901634][ T2484] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 09:49:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96d7000000000067907800000000e000000100"/38], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 697.947676][ T2484] usb 4-1: USB disconnect, device number 6 [ 697.965042][ T2484] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 697.986850][ T23] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 698.007004][ T23] usb 3-1: USB disconnect, device number 99 [ 698.033562][ T2484] sierra 4-1:0.0: device disconnected [ 698.086794][ T3842] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 698.356663][ T3842] usb 5-1: Using ep0 maxpacket: 8 09:49:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r1, 0x0) membarrier(0x10, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) sendto$inet6(r2, 0x0, 0x0, 0x8f2d762606dbe1f8, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:49 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000040)) 09:49:50 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xffe0) 09:49:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x0, 0x2}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:49:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) dup2(r2, r0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @local}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d46eb8c7308ecfc4", "442065238929480ade91900b51fc95b3", '\x00', "7ee51430da3f51b3"}, 0x28) [ 698.667954][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 698.690481][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.729314][ T3842] usb 5-1: Product: syz [ 698.740855][ T3842] usb 5-1: Manufacturer: syz [ 698.751801][ T3842] usb 5-1: SerialNumber: syz [ 698.770455][ T3842] usb 5-1: config 0 descriptor?? [ 698.817547][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 698.824017][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 698.858657][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected [ 698.926745][ T3841] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 698.947510][ T3840] usb 4-1: new high-speed USB device number 7 using dummy_hcd 09:49:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000001240)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000140)={0x1060, 0x0, 0x5, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x80000000}, 0xaa, 0x2, 0xa9, 0x4, 0x28, 'syz1\x00', "000f1b2da992750e676661402f53b2ff2ad2a8d0c919d2cacf692dcbf1e83acd", "d85c72751f8b4088041c5ea16574de7dedea8ae3c3e3cdd6338101bfb46ee75d", [{0xffff, 0x1, {0x3, 0x7}}, {0x7f, 0x7, {0x3, 0x5}}, {0x6, 0x7, {0x0, 0xc7b2}}, {0x81, 0x2, {0x3, 0x5}}, {0xfffb, 0x1, {0x1, 0x7}}, {0x9e, 0x101, {0x3, 0x7}}, {0xff, 0x40, {0x1}}, {0x9, 0x40, {0x3}}, {0x1, 0x6, {0x2, 0x7f}}, {0xe88c, 0x100, {0x1, 0x2f}}, {0x4, 0xfe65, {0x1, 0x4}}, {0x2, 0x2, {0x3, 0xeaad}}, {0x3, 0x2, {0x1, 0x10001}}, {0x3f, 0x5, {0x1, 0x200}}, {0x7, 0x9, {0x0, 0x8}}, {0xfffb, 0x1e8, {0x1, 0x3f}}, {0x400, 0xd3c, {0x3, 0x7}}, {0x8000, 0x1cd, {0x1, 0x1}}, {0x0, 0x2, {0x0, 0xffff}}, {0x1, 0x9, {0x2}}, {0x7, 0x2, {0x3, 0x6f71}}, {0x5, 0x872a, {0x1, 0x6}}, {0xc0c0, 0x6, {0x1, 0x5}}, {0x20, 0x1, {0x5, 0x1}}, {0x6, 0x5}, {0x9, 0xb0, {0x3, 0x3f}}, {0xfffe, 0x9, {0x0, 0x10000007}}, {0x1ff, 0x40, {0x0, 0x8000}}, {0x0, 0x3, {0x2, 0x1f}}, {0xfffa, 0x8, {0x3, 0xe877}}, {0x5, 0x8, {0xafdd3809b77311a, 0x7ff}}, {0x20b, 0x0, {0x1, 0x1}}, {0x5, 0x7ffe, {0x0, 0xa4b}}, {0x9, 0x4, {0x1}}, {0xdb, 0x5, {0x2, 0x5}}, {0x2f9, 0x401, {0x2, 0x3}}, {0x1000, 0x401, {0x3}}, {0x3ff, 0x0, {0x2, 0xffffffff}}, {0x100, 0xff, {0x0, 0x9}}, {0x7ff, 0x6}]}}}, {{0x254, 0x1, {{0x0, 0x7a0b3e05}, 0x7, 0x7, 0xab80, 0x3, 0x1, 'syz1\x00', "52a8beb1af8319286911ace2af4767b8635252e3ccc851e445027f73cca91863", "04e9e764ce3ac366955b172349e790860022eec1df895e268066bcab83b2b6a2", [{0x8, 0x7cc, {0x1, 0x240000}}, {0x9, 0x6, {0x2, 0x40}}, {0x9c, 0x4, {0x0, 0x1}}, {0x0, 0x6, {0x3, 0x5}}, {0x6, 0x9, {0x2}}, {0x5, 0x3e0, {0x0, 0x4}}, {0x6, 0xa1f, {0x0, 0x20000000}}, {0x0, 0x92, {0x2, 0xf58}}, {0xb7a4, 0x5, {0x2, 0x8}}, {0x9, 0x1, {0x1, 0x100}}, {0xfcb1, 0x8, {0x3, 0x7}}, {0x9, 0x4, {0x0, 0x2}}, {0x9, 0x3, {0x0, 0x9}}, {0x401, 0xa097, {0x2, 0x800}}, {0xcd, 0xc, {0x3, 0x8ab}}, {0x3, 0x401, {0x1, 0x7}}, {0x7ff, 0x6, {0x0, 0x7f}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x7, {0x0, 0x80000001}}, {0x7, 0x7f, {0x2, 0x2}}, {0x5f, 0x7, {0x1, 0x492}}, {0x1, 0x6, {0x2, 0xfffffff7}}, {0xce, 0x5, {0x1, 0x974b}}, {0x101, 0x1, {0x3, 0x2}}, {0xcf0f, 0x5, {0x3, 0x3}}, {0x5, 0x8, {0x2, 0x3ff}}, {0x8, 0x8000, {0x1, 0x7f}}, {0x6, 0x2, {0x2, 0x7}}, {0xef7, 0x7, {0x0, 0x919}}, {0x800, 0x101, {0x3, 0x4}}, {0x5b1, 0x0, {0x3, 0x2}}, {0x8, 0x4, {0x3, 0xffffffff}}, {0x0, 0x200, {0x0, 0x7fff}}, {0x1000, 0x8, {0x2, 0x1}}, {0x40, 0x1ff, {0x3, 0xffffffff}}, {0x1, 0x1, {0x2, 0x4}}, {0x3ff, 0xfffd, {0x1, 0x6}}, {0x7, 0x8001, {0x1, 0xfffffffd}}, {0x761, 0x101, {0x1, 0x1}}, {0x9, 0x3c95, {0x1, 0x96}}]}}}, {{0x254, 0x1, {{0x7, 0x9}, 0x2, 0x81, 0x3ff, 0x800, 0x4, 'syz0\x00', "5294a5d149794500d173588285738b0c6954b174b322a0e790818e4158d35048", "7c56a0569d91260f579243a73ef5085cb7004b00915d5a49759b0e52bdcefbe0", [{0x9, 0xff, {0x0, 0x80}}, {0x7f, 0x7, {0x1, 0x9}}, {0x9, 0x3, {0x1, 0x200}}, {0x8, 0x3, {0x0, 0x7}}, {0x3ec, 0x7, {0x0, 0xfffffeff}}, {0x5, 0x100, {0x2, 0x6}}, {0x4, 0x800, {0x2, 0x20}}, {0xff, 0x3ff, {0x2, 0x4}}, {0x348, 0x5, {0x0, 0xfffff800}}, {0x5, 0xff, {0x0, 0x1}}, {0x5, 0x81, {0x0, 0x3}}, {0x1, 0xd7, {0x0, 0x3}}, {0xfda8, 0x81, {0x2, 0x9}}, {0x871b, 0x1, {0x1, 0x4}}, {0x8, 0x1, {0x2, 0x74a}}, {0x7, 0x6, {0x1, 0x91f4}}, {0x4, 0x6, {0x0, 0x80000001}}, {0x7f, 0x4, {0x1, 0x7ff}}, {0x8000, 0x6, {0x0, 0x5}}, {0x7, 0x401, {0x0, 0x80000001}}, {0x5, 0x57b, {0x3, 0x6}}, {0x0, 0xff, {0x0, 0x8}}, {0xc8, 0x101, {0x1}}, {0x6, 0xff7e, {0x2}}, {0x3759, 0x9, {0x3}}, {0x3, 0xfff7, {0x2, 0x5}}, {0x57, 0x3, {0x3, 0x9be4}}, {0x401, 0xffc0, {0x2, 0x3}}, {0x6, 0x3, {0x2, 0x7d7e0b71}}, {0x9, 0x2, {0x2, 0x3}}, {0xf9, 0x6, {0x2, 0x7}}, {0x0, 0x80, {0x3, 0xffff}}, {0x4feb, 0x41b, {0x3, 0x6}}, {0x8000, 0x7b, {0x2, 0x6}}, {0x8, 0x7fff, {0x2}}, {0xd4df, 0x6, {0x3, 0x3}}, {0x2, 0x3600, {0x3}}, {0x659, 0xf9a7, {0x1, 0x9}}, {0x7, 0x9, {0x3, 0x5}}, {0x200, 0x8000, {0x1, 0x5381e8e2}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x4, 0xff, 0x1, 0x1, 0x5, 'syz0\x00', "e751ee77f56cc912ee0849c2f1f703dfddc6a9c3fed0bb4850c21caaeb3208f4", "daaa35ab7c4eb621ffec5633a7399e56bd4a141699fcc3b702c4aed1095ec0c1", [{0x0, 0x6, {0x0, 0x9}}, {0x9, 0xe89, {0x0, 0x7}}, {0xffff, 0x6, {0x1, 0x40}}, {0x8, 0xff, {0x2, 0x8}}, {0x5, 0x4, {0x2, 0x5}}, {0x80, 0x1, {0x3}}, {0x902, 0x1ff, {0x0, 0xfffffffc}}, {0x4, 0x73, {0x1, 0x101}}, {0x6, 0xffff, {0x3}}, {0x2, 0x5d9, {0x7, 0x10001}}, {0xfe, 0xfc01, {0x0, 0x3}}, {0x40, 0x101, {0x1, 0x3}}, {0x7fff, 0x6, {0x1, 0x4}}, {0x101, 0x200, {0x0, 0x4a35}}, {0x4, 0x7, {0x3, 0x1}}, {0x7, 0x81, {0x1, 0x4}}, {0x7, 0x8, {0x0, 0x1000}}, {0x6, 0x7, {0x3, 0x2}}, {0x1, 0x0, {0x2, 0x6}}, {0x4, 0x400, {0x3, 0x3}}, {0xff, 0x7ff, {0x1, 0xff}}, {0x7, 0x0, {0x2, 0x2}}, {0x9, 0x1, {0x3, 0x3}}, {0x3, 0x3, {0x0, 0x9}}, {0x6, 0x58e0, {0x3, 0x9}}, {0x4, 0x2, {0x1, 0x3}}, {0x9, 0xb4f0, {0x1, 0x4}}, {0x3, 0x3, {0x1, 0x2}}, {0x1, 0x10}, {0x6, 0x7, {0x0, 0xfffffffa}}, {0x4, 0xfff7, {0x3, 0x7}}, {0x5, 0x8001, {0x1, 0x6}}, {0xfb64, 0x2000, {0x0, 0x3}}, {0x3, 0xfff7, {0x1, 0x6}}, {0x9, 0x5a, {0x3, 0x7}}, {0x400, 0x4, {0x3, 0x8000}}, {0x7f, 0x9, {0x2, 0x80}}, {0x8, 0x2, {0x1, 0x7338}}, {0x3, 0x7, {0x2}}, {0xfffa, 0x1f}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x7, 0x40, 0x8, 0x81, 0x26, 'syz0\x00', "514f320a5c29f6fc60d33c8fe1f5f2233af0862df34b907362f3de675c96372d", "9c261518389ef4d2f364c8add9361811951fe4d6ca2459fb903732a93700175f", [{0x9, 0x9, {0x0, 0x2}}, {0x1, 0x5, {0x2, 0x80000001}}, {0x2300, 0x4, {0x1, 0x6}}, {0x8, 0x60ab, {0x1, 0x8}}, {0x80, 0x20, {0x2, 0x7}}, {0xccd0, 0x9, {0x2, 0x8}}, {0x3, 0xff9c}, {0x8, 0x0, {0x2, 0xffffffe0}}, {0x1, 0x3, {0x3, 0x2}}, {0x0, 0x44dd, {0x3, 0xff}}, {0x2, 0x1, {0x3, 0x4}}, {0x31, 0x7fff, {0x3}}, {0x1, 0x6, {0x2, 0x4}}, {0x8, 0x9e, {0x1, 0x7}}, {0x8, 0x8, {0x3, 0x4}}, {0x101, 0x4, {0x2, 0x6}}, {0x0, 0x7, {0x2, 0x2}}, {0x1, 0x7f, {0x1, 0x401}}, {0x9, 0x9, {0x0, 0xff}}, {0x5, 0x8, {0x3, 0xff}}, {0x6, 0x5, {0x3, 0x3}}, {0x86, 0x6, {0x3, 0x1}}, {0x1ff, 0x20, {0x3, 0xd4c3}}, {0x8001, 0x5, {0x1, 0x80}}, {0x0, 0x7d6, {0x0, 0x5}}, {0x101, 0x5, {0x1, 0x1}}, {0xff, 0x2, {0x2, 0xf68}}, {0x8, 0xfffa, {0x3, 0x8}}, {0x10f, 0x8000, {0x1, 0xfff}}, {0x0, 0x7, {0x2, 0x7}}, {0x0, 0x7f, {0x1, 0x979}}, {0xfff, 0x5, {0x0, 0x9}}, {0x0, 0x6, {0x0, 0x4}}, {0x101, 0x5, {0x2, 0x2}}, {0x2, 0x6, {0x3, 0x7}}, {0x100, 0x5, {0x0, 0xc5b4}}, {0x5, 0x5, {0x1, 0x3}}, {0x9, 0x0, {0x0, 0x7}}, {0x0, 0x0, {0x3, 0x1}}, {0x6, 0x100, {0x0, 0x12}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x8, 0x4, 0x401, 0x9, 0x1b, 'syz0\x00', "857c4ebe2c9790c21e41d1f7a8e17699d5acdefd80564b6b1df18f96a687575f", "5c9f32c8ddb05b5d14b3e0f4fb7cfb7e7bed496bfa5b55e5e3dbb005839251bd", [{0xffff, 0x9, {0x0, 0x6}}, {0x81, 0x2, {0x2, 0x8}}, {0x2, 0x9, {0x0, 0xe17d}}, {0x3, 0x8, {0x2, 0xa9eb}}, {0x0, 0x1, {0x0, 0x8000}}, {0x200, 0xfb7, {0x1, 0x48}}, {0x80, 0x80, {0x0, 0x309c}}, {0x1, 0x2, {0x3, 0x1000}}, {0xfade, 0x3f, {0x0, 0x1000}}, {0x5, 0x3, {0x0, 0x81}}, {0x8b6, 0x1, {0x0, 0x3}}, {0x3f, 0xf57, {0x1, 0x8}}, {0x6ff, 0x0, {0x0, 0x1}}, {0x62, 0x7f10, {0x2, 0x61}}, {0x1ff, 0x9, {0x0, 0x80000000}}, {0x7, 0x7, {0x2, 0x3ff}}, {0x0, 0x40, {0x3, 0x1}}, {0x4, 0x8, {0x1, 0x8}}, {0x4, 0x81, {0x2, 0x1}}, {0x5, 0x6, {0x3, 0x1}}, {0x6, 0x200, {0x1, 0x200}}, {0x8, 0x20, {0x2, 0x1}}, {0x0, 0x7, {0x1, 0x7f}}, {0xa0f3, 0x7, {0x2, 0x9}}, {0x1, 0x7fff, {0x3, 0x5}}, {0x7, 0x3, {0x0, 0xdce0}}, {0x7f, 0x1, {0x1, 0x3}}, {0x6, 0x1, {0x3, 0x1f}}, {0x96, 0x7, {0x1}}, {0x4, 0x8, {0x2, 0x5}}, {0x401, 0x8001, {0x3, 0x2}}, {0x3, 0x3f, {0x1, 0xb0b}}, {0x7, 0xc9, {0x3, 0x3}}, {0x2, 0x8, {0x1, 0x7ff}}, {0x9da, 0x6, {0x3, 0x9}}, {0x1, 0x0, {0x1, 0x80}}, {0x2, 0x4, {0x3, 0x4a}}, {0x7f, 0xffff, {0x1, 0x48931297}}, {0x2, 0xffff, {0x2, 0x5}}, {0x5, 0x3f, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0xc4}, 0x2, 0x1, 0x2, 0x4, 0x24, 'syz1\x00', "7173841ca9502ae8b9c5eeb29c343e8139e1c306d05c9768a4c58c58f22c699b", "97093b4c90d69d58a838ad18ce67957abd0869cb5a03bc5e2994bb5fe4636dee", [{0x4, 0x2, {0x3, 0x3}}, {0x31, 0x1f, {0x0, 0xfffeffff}}, {0xfc00, 0xfffb, {0x0, 0xb484}}, {0x2, 0x4, {0x0, 0xff}}, {0x6, 0x52, {0x1, 0x81}}, {0x40, 0x9, {0x3, 0x6}}, {0x4, 0xfffa, {0x2, 0x2}}, {0x5, 0x2, {0x1, 0xffffffff}}, {0x39bf, 0x81, {0x1, 0xbc4}}, {0x19, 0x40, {0x3, 0xfffffff9}}, {0x87, 0xd83, {0x3, 0x1}}, {0x5, 0x0, {0x3, 0x2}}, {0x800, 0x8000, {0x2, 0x207}}, {0xf000, 0x21, {0x1, 0x8000}}, {0xa7, 0x0, {0x3, 0x7}}, {0x8, 0x1, {0x3, 0x3}}, {0xaac, 0x5, {0x1, 0x2}}, {0x3, 0x5, {0x0, 0xfffffffd}}, {0x0, 0x40, {0x2, 0x7fffffff}}, {0xffff, 0x5, {0x0, 0x1}}, {0xc, 0xa662, {0x1, 0x200}}, {0xfff, 0x9, {0x3, 0x2}}, {0x2, 0x7fff, {0x2, 0x3aa}}, {0x293d, 0x2, {0x2, 0x68ad15c5}}, {0x8, 0x3, {0x6, 0x7}}, {0x7, 0x9d, {0x3, 0x7}}, {0x2, 0x4, {0x0, 0x5}}, {0x3, 0x7, {0x0, 0x1}}, {0x78, 0x3, {0x2, 0x4}}, {0x4, 0x4, {0x2, 0x8000}}, {0x0, 0x7, {0x0, 0x9}}, {0x64, 0x7, {0x1, 0x20}}, {0x5, 0x6, {0x2, 0x400}}, {0x5, 0x80b2, {0x2, 0x4}}, {0xff, 0x97c, {0x3, 0x7}}, {0x3, 0x5, {0x3, 0x26b3}}, {0x81, 0x6, {0x3, 0x3b7b}}, {0x100, 0xfff, {0x1, 0x100}}, {0x2, 0xa1, {0x3, 0xffffff80}}, {0x6, 0x5, {0x2, 0xd300}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4c8f4) [ 699.196635][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 699.253879][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 09:49:50 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast2}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xffffffffffffffff, 0x141000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x2f}, 0x4}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2c}, @in={0x2, 0x4e21, @multicast1}], 0x48) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 699.330745][ T3842] usb 5-1: USB disconnect, device number 87 [ 699.355457][ T3841] usb 3-1: not running at top speed; connect to a high speed hub [ 699.364213][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 699.423751][ T3842] sierra 5-1:0.0: device disconnected [ 699.449120][ T3841] usb 3-1: config 1 interface 0 has no altsetting 0 [ 699.498192][ T3840] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 699.509886][ T3841] usb 3-1: language id specifier not provided by device, defaulting to English [ 699.532099][ T3840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:49:51 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x34000) [ 699.560741][ T3840] usb 4-1: Product: syz [ 699.570935][ T3840] usb 4-1: Manufacturer: syz [ 699.584483][ T3840] usb 4-1: SerialNumber: syz [ 699.600251][ T3840] usb 4-1: config 0 descriptor?? [ 699.658666][ T3841] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.668850][ T3840] hub 4-1:0.0: bad descriptor, ignoring hub [ 699.681858][ T3840] hub: probe of 4-1:0.0 failed with error -5 [ 699.695043][ T3841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.712978][ T3840] sierra 4-1:0.0: Sierra USB modem converter detected [ 699.729037][ T3841] usb 3-1: Product: syz [ 699.739994][ T3841] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 699.755641][ T3841] usb 3-1: SerialNumber: syz [ 699.889322][ T3840] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 699.957545][ T3840] usb 4-1: USB disconnect, device number 7 [ 699.983734][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 700.028061][ T3840] sierra 4-1:0.0: device disconnected [ 700.127616][ T3842] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 700.191214][T25603] tipc: Cannot configure node identity twice [ 700.287507][ T3841] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 700.307444][ T3841] usb 3-1: USB disconnect, device number 100 [ 700.386592][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 700.696705][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 700.706018][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.726483][ T3842] usb 5-1: Product: syz [ 700.730676][ T3842] usb 5-1: Manufacturer: syz [ 700.735282][ T3842] usb 5-1: SerialNumber: syz [ 700.743859][ T3842] usb 5-1: config 0 descriptor?? 09:49:52 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 09:49:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x9100, 0x7, 0x0, 0x3}, {0x8100, 0x3}}, {@ipx={0x8137, {0xffff, 0x101e, 0x27, 0x4, {@random=0xfffffffa, @random="c81bbcbd76eb", 0x7}, {@random=0x6, @broadcast}, "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"}}}}}, 0x1038) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14a0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0xfffffffffffffe33}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) splice(r7, &(0x7f0000000580)=0x1, r8, &(0x7f00000005c0)=0x20, 0x3f, 0xa) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f00000000c0)={0xba, 0xb, &(0x7f0000000180)}) 09:49:52 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) 09:49:52 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x100000) 09:49:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x0, 0x2}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 700.824495][ T3842] usb 5-1: can't set config #0, error -71 [ 700.843467][ T3842] usb 5-1: USB disconnect, device number 88 [ 700.976200][T25715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:49:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000140)={r2, 0x4}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0xfffffffffffffc91, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x20, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000280)=0x8, &(0x7f00000002c0)=0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 701.166525][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 701.186645][ T2484] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 701.326539][ T3842] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 701.416485][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 701.586522][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 701.596793][ T2484] usb 3-1: not running at top speed; connect to a high speed hub 09:49:53 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x400300) [ 701.677557][ T2484] usb 3-1: config 1 interface 0 has no altsetting 0 [ 701.699780][ T23] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 701.709215][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.717934][ T2484] usb 3-1: language id specifier not provided by device, defaulting to English [ 701.727429][ T23] usb 4-1: Product: syz [ 701.732011][ T23] usb 4-1: Manufacturer: syz [ 701.738146][ T23] usb 4-1: SerialNumber: syz [ 701.759506][ T23] usb 4-1: config 0 descriptor?? [ 701.797425][ T23] hub 4-1:0.0: bad descriptor, ignoring hub [ 701.803504][ T23] hub: probe of 4-1:0.0 failed with error -5 [ 701.821843][ T23] sierra 4-1:0.0: Sierra USB modem converter detected 09:49:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaaaaaa00080045001c59d101000000010000000000000067907800000000e0000001"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 701.850450][ T2484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 701.865551][ T2484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.886645][ T2484] usb 3-1: Product: syz [ 701.890929][ T2484] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 701.906436][ T2484] usb 3-1: SerialNumber: syz [ 701.932830][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 701.953438][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.973074][ T3842] usb 5-1: Product: syz [ 701.979348][ T3842] usb 5-1: Manufacturer: syz [ 701.984281][ T3842] usb 5-1: SerialNumber: syz [ 702.002326][ T3842] usb 5-1: config 0 descriptor?? [ 702.018127][ T23] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 702.058712][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 702.065462][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 702.077182][ T23] usb 4-1: USB disconnect, device number 8 [ 702.097385][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected [ 702.097645][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 09:49:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080), &(0x7f0000000140)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in=@local}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 702.141837][ T23] sierra 4-1:0.0: device disconnected [ 702.218251][T25703] tipc: Cannot configure node identity twice [ 702.275373][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 702.307140][ T2484] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 702.323527][ T3842] usb 5-1: USB disconnect, device number 89 [ 702.324170][ T2484] usb 3-1: USB disconnect, device number 101 [ 702.334782][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 702.346169][ T3842] sierra 5-1:0.0: device disconnected 09:49:54 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x1000000) 09:49:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x0, 0x2}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 702.786430][ T3841] usb 4-1: new high-speed USB device number 9 using dummy_hcd 09:49:54 executing program 0: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000180)='./file0\x00', 0xb71, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0), 0x0, 0x1}], 0x880802, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0xac, &(0x7f0000000240)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0xb058, @loopback, 0x3}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000380)={r5, 0xfffffffc}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaaaaaa00080045000014000000000067907800000000e0000001f1f0cc8e6b4e82952395b7461ef4e6c905652a8f272bf9efcd27e78a54698e47d9f674327592d63137a1673a5d3ebd3cf8c12a2eb4c0bcac9e2c8f820d2a7ca8257c01e2299a8e4a6de4"], 0x26) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 703.046508][ T3841] usb 4-1: Using ep0 maxpacket: 8 [ 703.055204][ T3842] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 703.146547][ T3848] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 703.316365][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 703.377349][ T3841] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 703.392666][ T3841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.402204][ T3841] usb 4-1: Product: syz [ 703.410551][ T3841] usb 4-1: Manufacturer: syz [ 703.415149][ T3841] usb 4-1: SerialNumber: syz [ 703.421433][ T3841] usb 4-1: config 0 descriptor?? [ 703.500557][ T3841] hub 4-1:0.0: bad descriptor, ignoring hub [ 703.528553][ T3841] hub: probe of 4-1:0.0 failed with error -5 [ 703.534889][ T3841] sierra 4-1:0.0: Sierra USB modem converter detected [ 703.576518][ T3848] usb 3-1: not running at top speed; connect to a high speed hub [ 703.636696][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 703.645827][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.654256][ T3842] usb 5-1: Product: syz [ 703.660842][ T3848] usb 3-1: config 1 interface 0 has no altsetting 0 [ 703.667653][ T3842] usb 5-1: Manufacturer: syz [ 703.672564][ T3842] usb 5-1: SerialNumber: syz [ 703.678714][ T3842] usb 5-1: config 0 descriptor?? [ 703.707779][ T3848] usb 3-1: language id specifier not provided by device, defaulting to English [ 703.720088][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 703.726075][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 703.735989][ T3841] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 703.780229][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected [ 703.807095][ T3841] usb 4-1: USB disconnect, device number 9 [ 703.838563][ T3841] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 703.847921][ T3841] sierra 4-1:0.0: device disconnected [ 703.878148][ T3848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 703.905296][ T3848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.916446][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 09:49:55 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:49:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "58d88a3691a888fb", "b08c2d2afc6831927a972963910bf711", "fe550f29", "072241bfe1941515"}, 0x28) 09:49:55 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x2000000) 09:49:55 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b6850899112268bd0901020301090212000100810000000000000009"], 0x0) [ 703.947018][ T3842] usb 5-1: USB disconnect, device number 90 [ 703.955981][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 703.974509][ T3848] usb 3-1: Product: syz [ 703.986123][ T3848] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 703.999937][ T3842] sierra 5-1:0.0: device disconnected [ 704.011234][ T3848] usb 3-1: SerialNumber: syz 09:49:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10010, r0, 0x180000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 704.416821][ T3848] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 704.425902][ T3848] usb 3-1: USB disconnect, device number 102 [ 704.446542][ T3841] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 704.486583][ T3842] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 704.716273][ T3841] usb 4-1: Using ep0 maxpacket: 8 [ 704.767024][ T3842] usb 5-1: Using ep0 maxpacket: 8 09:49:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x0, 0x2}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 704.857415][ T3841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.886560][ T3841] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 09:49:56 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x4000000) 09:49:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x4, &(0x7f0000000080)=0x4f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @private1={0xfc, 0x1, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004804, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 705.081146][ T3841] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.bd [ 705.090299][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 705.099510][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.108919][ T3841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.117577][ T3842] usb 5-1: Product: syz [ 705.121760][ T3842] usb 5-1: Manufacturer: syz 09:49:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e21, @private=0xa010101}, 0x24, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)='veth1_to_hsr\x00', 0x6, 0x0, 0x8}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x8810) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 705.127667][ T3841] usb 4-1: Product: syz [ 705.131835][ T3841] usb 4-1: Manufacturer: syz [ 705.137513][ T3842] usb 5-1: SerialNumber: syz [ 705.142876][ T3841] usb 4-1: SerialNumber: syz [ 705.152525][ T3842] usb 5-1: config 0 descriptor?? [ 705.162101][ T3841] usb 4-1: config 0 descriptor?? [ 705.196563][ T3848] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 705.207111][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 705.213198][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 705.243050][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected [ 705.422305][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 705.462165][ T3841] usb 4-1: USB disconnect, device number 10 09:49:57 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x34f280, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x4cea, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}}, 0x88) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 705.497175][ T3842] usb 5-1: USB disconnect, device number 91 [ 705.517215][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 705.536757][ T3842] sierra 5-1:0.0: device disconnected [ 705.628464][ T3848] usb 3-1: not running at top speed; connect to a high speed hub [ 705.717843][ T3848] usb 3-1: config 1 interface 0 has no altsetting 0 [ 705.768665][ T3848] usb 3-1: language id specifier not provided by device, defaulting to English 09:49:57 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x7000000) [ 705.906785][ T3848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 705.915937][ T3848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.936717][ T3848] usb 3-1: Product: syz [ 705.941042][ T3848] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 705.961967][ T3848] usb 3-1: SerialNumber: syz [ 706.186247][ T2484] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 706.337441][ T3848] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 706.346835][ T3848] usb 3-1: USB disconnect, device number 103 [ 706.436218][ T2484] usb 5-1: Using ep0 maxpacket: 8 [ 706.716377][ T2484] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 706.725488][ T2484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.740716][ T2484] usb 5-1: Product: syz [ 706.749572][ T2484] usb 5-1: Manufacturer: syz [ 706.759780][ T2484] usb 5-1: SerialNumber: syz [ 706.776343][ T2484] usb 5-1: config 0 descriptor?? [ 706.824377][ T2484] hub 5-1:0.0: bad descriptor, ignoring hub [ 706.830700][ T2484] hub: probe of 5-1:0.0 failed with error -5 [ 706.848586][ T2484] sierra 5-1:0.0: Sierra USB modem converter detected 09:49:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0) 09:49:58 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000400)={{0x2, 0x4e23, @multicast2}, {0x306, @remote}, 0x2, {0x2, 0x4e24, @loopback}, 'bond_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10001}, 0x40804) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x5}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, @in6={0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, [], 0x1b}, 0xffffcb21}], 0x48) 09:49:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000000c0)=0x3, 0x4) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:49:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x2, 0x800, 0x53) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x80001, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4840}, 0x0) listen(r2, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f0000001600)={0xca, "2e59a7648297b3ef40f2c977f170749eefe079267f55c31d239dd2c964ffcc2dfdaa7a11781e3f99400442c03b09116c6250893a59575b163886ef5e93526775e98556e9aaee5a2f7fc03ab5d29c6c636b7afe36c8892e44cf8c3bec9a42fac7c3d2e9d2f8e9146855caf4812e8dc1124204db9cc41bddea3c15040e06351efeb1c3c4b04d8922946dda5dc1b1dea90f59a9761b2c352bfd8346fd8dbca711b4324b732d2d52be02aef5830d16ac2ffc7f57186db3b4e2d46fe4c41396400ce23c735bb5724eba9cd417"}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x38880, 0x0) readv(r6, &(0x7f0000001540)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/93, 0x5d}, {&(0x7f0000001380)=""/120, 0x78}, {&(0x7f0000001400)=""/80, 0x50}, {&(0x7f0000001480)=""/145, 0x91}], 0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001700)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "000100"}, 0x28) 09:49:58 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x8000000) 09:49:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x0, 0x2}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 707.036487][ T2484] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 707.109466][ T2484] usb 5-1: USB disconnect, device number 92 [ 707.125855][ T2484] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 707.168696][ T2484] sierra 5-1:0.0: device disconnected [ 707.456307][ T3848] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 707.476210][ T2841] usb 4-1: new high-speed USB device number 11 using dummy_hcd 09:49:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4], 0x0) [ 707.728164][ T2841] usb 4-1: Using ep0 maxpacket: 8 [ 707.886340][ T2841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 707.896173][ T3848] usb 3-1: not running at top speed; connect to a high speed hub 09:49:59 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x9000000) [ 707.976752][ T2841] usb 4-1: config index 0 descriptor too short (expected 62834, got 18) [ 707.985125][ T2841] usb 4-1: config 44 has too many interfaces: 63, using maximum allowed: 32 [ 707.997578][ T3848] usb 3-1: config 1 interface 0 has no altsetting 0 [ 708.006873][ T2841] usb 4-1: config 44 has an invalid descriptor of length 100, skipping remainder of the config [ 708.046148][ T2841] usb 4-1: config 44 has 0 interfaces, different from the descriptor's value: 63 [ 708.058997][ T3848] usb 3-1: language id specifier not provided by device, defaulting to English [ 708.086397][ T3842] usb 5-1: new high-speed USB device number 93 using dummy_hcd 09:49:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:49:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}], 0x64ce, 0x0, [], 0x4, 0x3}) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x80000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "448ae500000500", '\x00', "7ee51430da3f51b3"}, 0x28) [ 708.216843][ T2841] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 708.222593][ T3848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.225978][ T2841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.242696][ T3848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.244819][ T2841] usb 4-1: Product: syz 09:49:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x54) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 708.266233][ T2841] usb 4-1: Manufacturer: syz [ 708.272157][ T2841] usb 4-1: SerialNumber: syz [ 708.272608][ T3848] usb 3-1: Product: syz [ 708.283535][ T3848] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 708.306750][ T3848] usb 3-1: SerialNumber: syz [ 708.390175][ T3842] usb 5-1: device descriptor read/64, error 18 [ 708.579319][ T2841] usb 4-1: USB disconnect, device number 11 [ 708.696348][ T3848] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 708.707266][ T3848] usb 3-1: USB disconnect, device number 104 [ 708.796144][ T3842] usb 5-1: device descriptor read/64, error 18 09:50:00 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xa000000) 09:50:00 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160551]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x40) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000040)=[0x2, 0x5, 0xde7, 0xfff, 0xff, 0x7, 0x2, 0xfffff405], 0x8, 0xc0800, r4, r5}) [ 709.066351][ T3842] usb 5-1: new high-speed USB device number 94 using dummy_hcd 09:50:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7f, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @loopback, 0x895d}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080), &(0x7f0000000140)=0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xfffffffffffffd49) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:50:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 709.386338][ T3842] usb 5-1: device descriptor read/64, error 18 09:50:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x200000, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000000009f96d7001000aaaaaaaaaa00080045000014000000000067907800000000e003000000000000bac7a55ad635ba8dce05e424eb38e1f7f289767cfac4cb16f6df664b9db1b881c82e47a010504b2c4325edea9897b07985d4a4ee9b642bc2e03d7f8c35a6fc059fad12280000caae0ba2f29898e9d5f3821f3021eb5507886eac824aeff99565d182aac8e516f08358d8aef97077175ea850d79616a20326d7e1ed4ee2c78447df1ae8869fa0c3acd7a1c04ba7a6321d75dc03857049b296cfd4c523914f40ae56a7db9b3292ba296085915399dd7f3a05827e3c44b1ea91a1a01a1899db5d1e79a3d2f06e4c42072e3564fd5e548bf0ab2adfd4a4d7b3521f1e34236793777224a7dac287439adc00000000000000"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 709.496123][ T3849] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 709.606099][ T3840] usb 4-1: new high-speed USB device number 12 using dummy_hcd 09:50:01 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe000000) [ 709.797714][ T3842] usb 5-1: device descriptor read/64, error 18 [ 709.856108][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 709.927438][ T3849] usb 3-1: not running at top speed; connect to a high speed hub [ 709.935357][ T3842] usb usb5-port1: attempt power cycle 09:50:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x3b}}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x1684, 0x18, 0x3, 0xffff733f, 0x6, 0x8, 0x0, 0x7, 0x6, 0x69f, 0x9172, 0x3, 0x4, 0x0, 0x8, 0x80000001, 0x2, 0x5d53, 0x9, 0x3ff, 0x6, 0x4, 0x8, 0xffff63a0, 0xffff, 0x5, 0x9, 0x5, 0x53, 0x1, 0x3, 0x4]}) preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000140)={0x0, {0x3, 0x5}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 710.026633][ T3849] usb 3-1: config 1 interface 0 has no altsetting 0 [ 710.086227][ T3849] usb 3-1: language id specifier not provided by device, defaulting to English [ 710.176133][ T3840] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 710.185550][ T3840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.194716][ T3840] usb 4-1: Product: syz [ 710.199686][ T3840] usb 4-1: Manufacturer: syz [ 710.204435][ T3840] usb 4-1: SerialNumber: syz [ 710.210896][ T3840] usb 4-1: config 0 descriptor?? [ 710.221719][ T3849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.231124][ T3849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.240596][ T3849] usb 3-1: Product: syz [ 710.244872][ T3849] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 710.252991][ T3849] usb 3-1: SerialNumber: syz [ 710.274492][ T3840] hub 4-1:0.0: bad descriptor, ignoring hub [ 710.289615][ T3840] hub: probe of 4-1:0.0 failed with error -5 [ 710.308061][ T3840] sierra 4-1:0.0: Sierra USB modem converter detected [ 710.499935][T26062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3266459905 (104526716960 ns) > initial count (9157404736 ns). Using initial count to start timer. [ 710.525380][T26065] tipc: Cannot configure node identity twice [ 710.535826][T26062] user requested TSC rate below hardware speed [ 710.557852][ T3840] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 710.646951][ T3849] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 710.654487][ T3840] usb 4-1: USB disconnect, device number 12 [ 710.665166][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 710.680050][ T3849] usb 3-1: USB disconnect, device number 105 [ 710.686181][ T3842] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 710.714974][ T3840] sierra 4-1:0.0: device disconnected 09:50:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xc100, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000180)=0x8) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) accept$ax25(r7, 0x0, &(0x7f00000001c0)) 09:50:02 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x10000000) 09:50:02 executing program 4: socketpair(0x23, 0x5, 0x7fff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000240)={0x2e, @rand_addr=0x64010102, 0x4e20, 0x4, 'rr\x00', 0x5109fec2a79e7c41, 0x101, 0x51}, 0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x7f, 0x5}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x8, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0x3f000000}, [@IFLA_LINKMODE={0x5, 0x11, 0x29}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24018815}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="5201000072b68508991122689d0901020101090212ff0f000009ee4388aecb04580f00000000000022b8fcd8c1ce06d290bc645ad2c89243743067c3ffe707663619c92d315f1f94005b7a2918ac0c8884981a941d4229dc251177122f2c36dba0b70fd5890c88da87d545ec104de159e875d9bfbfa267a6cb55ed9171cb9521629777a30f314f415ba378a427c708243c0f352cfd950a83cbf4da11da563d16a9a5dfa71ccd5fa74f0662a6a31457f040f19b9ead0ed6a4"], 0x0) [ 710.836155][ T3842] usb 5-1: device descriptor read/8, error -71 09:50:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x40800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000140)={0x0, r3}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote}, 0xffffffffffffff97) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 710.972161][T26136] device bridge9 entered promiscuous mode 09:50:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 711.076032][ T3842] usb 5-1: device descriptor read/8, error -71 09:50:02 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160551]}) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/77, 0x4d}, &(0x7f0000000180), 0x40}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) [ 711.127047][T26154] user requested TSC rate below hardware speed [ 711.366127][ T2845] usb 3-1: new full-speed USB device number 106 using dummy_hcd 09:50:03 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x14100000) [ 711.585924][ T3842] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 711.606002][ T3840] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 711.676155][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 711.776063][ T2845] usb 3-1: not running at top speed; connect to a high speed hub [ 711.796057][ T3842] usb 5-1: config index 0 descriptor too short (expected 65298, got 18) [ 711.805280][ T3842] usb 5-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config 09:50:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x33d, 0x4000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r8, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f0000000180)={0x6, 0x3, 0x4, 0x70800, 0x7fffffff, {}, {0x5, 0xc, 0xf8, 0x1, 0xff, 0x1, "f93ed529"}, 0x8, 0x3, @offset=0x9, 0x7, 0x0, r0}) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)={0xffff, 0x1, 0x4, 0x800, 0x1, {0x0, 0x2710}, {0x2, 0x1, 0xdd, 0x7f, 0x52, 0xf7, "8e830883"}, 0x7fffffff, 0x945373e79c6a4f5f, @offset=0x1, 0x8, 0x0, r9}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000500)={{{@in=@empty, @in=@remote, 0x4e20, 0x8, 0x4e24, 0x0, 0xa, 0xa0, 0x0, 0x6, r4, r6}, {0x6, 0x1f, 0x9, 0x7, 0x67d5, 0x1, 0x10001, 0x7fff}, {0x200, 0x20, 0x2, 0x81}, 0x1, 0x6e6bb8, 0x1025730c73661c54, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x4d6, 0x2b}, 0xa, @in=@private=0xa010100, 0x0, 0x0, 0x2, 0x80, 0x9, 0xa5e, 0x7}}, 0xe8) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e22, 0x46, @mcast2, 0x9}, {0xa, 0x4e23, 0x10000, @remote, 0x3}, 0x81, [0x5, 0x8, 0x0, 0x3, 0x7fffffff, 0xfffffffc, 0x10, 0x7]}, 0x5c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x200, @mcast1, 0x7}}, [0x3, 0x7, 0x3ff, 0x77b9, 0x4475, 0x0, 0x53, 0x8, 0xee4, 0x1, 0x7ff, 0x3721, 0xcf, 0x6, 0x3]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r8, 0x8}, &(0x7f00000002c0)=0x8) [ 711.825954][ T3842] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 15 [ 711.855932][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 711.856552][ T2845] usb 3-1: config 1 interface 0 has no altsetting 0 [ 711.919557][ T2845] usb 3-1: language id specifier not provided by device, defaulting to English [ 712.028607][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 712.037819][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 712.046884][ T3842] usb 5-1: Product: syz [ 712.047776][ T2845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.051274][ T3842] usb 5-1: Manufacturer: syz [ 712.066332][ T3842] usb 5-1: SerialNumber: syz [ 712.066551][ T2845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.075665][ T3842] usb 5-1: config 0 descriptor?? [ 712.084335][ T2845] usb 3-1: Product: syz [ 712.090039][ T2845] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 712.105472][ T2845] usb 3-1: SerialNumber: syz [ 712.185998][ T3840] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 712.195237][ T3840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.203794][ T3840] usb 4-1: Product: syz [ 712.208359][ T3840] usb 4-1: Manufacturer: syz [ 712.213045][ T3840] usb 4-1: SerialNumber: syz [ 712.221407][ T3840] usb 4-1: config 0 descriptor?? [ 712.267196][ T3840] hub 4-1:0.0: bad descriptor, ignoring hub [ 712.273162][ T3840] hub: probe of 4-1:0.0 failed with error -5 [ 712.288036][ T3840] sierra 4-1:0.0: Sierra USB modem converter detected [ 712.355742][T26150] tipc: Cannot configure node identity twice [ 712.357920][ T3849] usb 5-1: USB disconnect, device number 96 [ 712.466207][ T2845] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 712.482903][ T2845] usb 3-1: USB disconnect, device number 106 09:50:04 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x20000000) [ 712.516858][T26163] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3266459905 (104526716960 ns) > initial count (9157404736 ns). Using initial count to start timer. [ 712.551122][ T3840] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 712.605597][ T3840] usb 4-1: USB disconnect, device number 13 [ 712.624436][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 712.651329][ T3840] sierra 4-1:0.0: device disconnected 09:50:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000140)='timers\x00') ioctl$TIOCGPTPEER(r3, 0x5441, 0x9a34) preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:50:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x33d, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:04 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="524e438c3701000052958508991122689d09210203010902120089510000000000"], 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x444c43, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x9, 0x7, "73e6ae3bc3db707b200641425779cbddf73b2e49637a9bb65f8a160dcca23e97", 0xe2, 0x101, 0xef, 0xbf, 0x130}) 09:50:04 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68408991122689d0901020301270212000100000000090400000009"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x20, r3, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000800) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0xb, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb6}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '-\x00'}}]}]}, 0xa0}}, 0x40080) [ 713.270913][ T3849] usb 3-1: new full-speed USB device number 107 using dummy_hcd 09:50:05 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x380a0000) [ 713.516000][ T3842] usb 5-1: new high-speed USB device number 97 using dummy_hcd 09:50:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000001780)={0x11cc, 0x13, 0x8, 0x70bd2c, 0x25dfdbfb, {0x18, 0xa3, 0x8, 0x9, {0x4e23, 0x4e24, [0x5, 0x3, 0xad0, 0x401], [0xba, 0x8, 0x4, 0x9f], r4, [0x0, 0x4]}, 0x637c, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "f14a9f1995c1e0e671d74e9a5d3baf84f955771f4dc64b2b073e0301c088a2b6c598692bc4f34fdf2375a6bc726f059d071b483cf6ca840cc5b1209592006a5c9853d1068edd30aa1e1f368422bce8ab467961bb6d2497fdc78f8bf9e0ee4899ecba9f90e9c8fc7015a573dc841824ba1019bab23ead92d5d9a218977654043107aa3962f0204642d3056613fdf4c91997b74218f44a8841cd66cfbb4b45d2aa44c15e3f7b4305afa5fab098edd735ee"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "5b62fb"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "bf1fbe0e20810d2a803fd8509e185860773448f936fbe5b9afd304832c117cb0859a4667a1f57ae0ee10c8ee46907c081f5905eed5768c85f5d0c8a193c52eb9d4e105e67819ce9a6643bd414ca94a864259fc0b16227c7ec7329ade8f6e383591f357ecfb9ba6b14096c66ec2c790d03678171eb8a04d96b204706b92dcab688304124b2627b9"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "2def01c6706c8efb911f4e7d54ce060b3415e3b1da53354f6560fedd4d30cb3106f847796675fea9dcbed8f39686aa"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "562ecac559514dea4a5faecd098cbaf6ab12f15e829e15a68753318e397dc97d8d8705c783a20fbdd47fdf2e64efdc64019cc2e433450f7bee71ca655bb76bf10e56f134de15c3c69cea5558ea8db0fdae518c3cb79bff4665614dcb345a3eda5440b1d3c266a1e59f019fbb06583dbe0e2beeb9c877909c98f0cd9f01842417c6a9aac795d448a383b0cd89c0617e65277318cebc3057e469ab4f50dd1575f8c70e2252f5f6ff91abe721e787c99435d1bcb66688453c812ab4b1c98367e50c83c175096c8a9ba3fa3171e49e50be10f5bccd4bf4cb923540be7d1f74a0f2110f8623bc7105c055a3686346e499dc0652738215b08b061b50328cb9a8ae0c11d0a1c29d2b9efc683c421d1b835433b7df9224944a6617fe0be0f2ae3765240dc7b2a0cf8f2dbc34dc0c75ee76e5c342df49f52a5e80699e48cd60cd77fddc960491868ae1a35bb4efcaf5e38916c884acc0949fc7b3ef65df3360aa5d1c945b371142ad83f96f04ad785f42944ef1f61c6d35fb5b033407b45b4de48db19cfe1c4da631be771c8b4d31dda5d5f01bf1f71105ae22f7d08b5ca24f73117f813c7347f425f83c6f2f3508c4a7b15449bdf2fe09080ca4ca0314d7f99d980c63da9d72b230477656057071442ed2a2c1ebfb5938018f625b64458df69f9d7331c4f66ed59ce55a0f50768c67c7a5b7f9ef1d26a9a03b39385a3432d69c7c768d34f34d0e29c7f122cc8a12f91c89df27233089421033dea26dd3cf1fc8830658450205b9dea081bf9f483a0de1affed5919bc243c01d0c818a3ae7418ad127c016772fae55283bcd9a6a79d45814f0645194ad6e4562d439e15f9b48ac0f25ad1eb27686eef0149d39c58d0169371712406d2870c44b98a0f757df0799bf5ecc7f7d2135b89e6ac008879489b1d469169d9bde31d977cef30bfd1896395c40e22947e946e3c3e6be6c75b2fb3a01c17d308e0084acc0f783d59182d3f801f02f9efea4d1cb6fae8a6a05b49300f5d6cb72068b2b7ba8d813eef53e1046b2f6b98794a620ced5d705de141217b6011bd858370e3c91cc3c3e79fbc5dd44dc1ab0c1fd3f799e973acae341551a5d6510ac5ef1a9b3976f03734c803bdc7c846fecaae5a592ae9bce829d9f44b3be1842174e01d051adaa33b7ff5dc5598282a10fe517bf7fb5c5dd6225f39d2e2624ae2e128afa455fe12e571eccf6337d07200135f3574a9ae35f3c76247cb7cc0142dd8cb0d70ad1540713a91ab73b38cf5c25daf20ef7fff108cd7c03cdcd7d7e83a0abc8724c9339080909d6e76100afb1001a2f2168127dd283e3d6f3fb1f4f24c48eeadc880d96b24b9da0d65d5856961db442d0ad08a630fc304ef1c46846f3e64c0c339f2dcfa3b53fc5529820b191d4e8bfacbdeaf3c564601fd3e3e636cde8b198995443c6a56362806486283683584ba02c3434ce3b6c7381bf6c8e9926d8a2bf07478543623ddfbb3bf3b36ac9eb49d0a4dafb0dc508e4bdc569ae1e455ae7031ea62210f633c72b95e451314a070dbcd66c3608b9832d8cc58dff397c912c0bc060baeefd379657c93aab9cb1e3215f98240c5003fbe231c513bd5c2e4431be35687d7886cc0f4643453bd35a87e0926ab5ab5314a75ce32799eb36a5edc19d35ce150c7393076445589fa53e9a18db77c874cf07a27383aa4075f1140295c79d66cbe7b7b3e37f1fa00a45fd43770571cb792134ec112ba140947069d68bddb294f9a146275410558a84c61273646d41ec3e978fab3dd34f036d8ac72f6fc7f18634b8e7d06178b60c402619f7309adf7c17298412d8157c9f87eab3b3e64c25d8f52c5111fef654b86e7fc9c4d64691d3b633cdcc42934e3ce889353bf1d4fc1f82d320b4fe22ce0b1ca5d7ccef8d23ec7cf916d548d9434ce56d09a33e1cf968387346327ff36a0a6919e93d8f6c855ff8f4b9e179eb72279fbb4810d4cb132f930fc3507b1d0d41972d48d929d751e4034cfa246c54fa015d7eeaa888b1e3185fde0a1405223da91c8d468a05811ceb94f36e9886a5936b7c4ed450241320d7a9a327256f6ab6274796f249f6ed12384a2b232dd85f36eba14d2389f44e10431f8135dd06c866d910f09544c99ad5b186016ec22a21ddd3090767be3cd7bad42547a1988224344fb31e8ae25e90300404063bcaa65474d55c65eba8e20c23ec13ca7522b2af72d4f61d0867f5b6f92d7e2528825ff0bbbcfe626515d00ae6bea259e90c92942c6fed7a5d1efb9e91e612473780d4d106b442ea8d886589e167b2225c7956ac5f6b8368c655436a512e3674dfbab33f60f9a390f18cfd96b30ba25a31999db5de259269a792e178a50e3d5818a70d4187bc5fdd8730dd477e73f5fa7fc14f02384b32a885f8655f1d1920186237a1caaf3ce3981e7396c6e1d6da922b04f050df3e082e31f6afbd372c27ad9e0956347d748476db24072b5590b0d0f833741ba572befbd4041b5e04bb96342891c12e625210b5de57e1ff69eabefa95752670797d7847a27f99b49f2ea42de9141c2d65aa41c7211faafbf7fbebbbba1e4ac5f47f1b59a862ad54d79c0e47b6864d53ef064460f49345a74bf3cec44c7c92b47a408311d6ca8312f62556320526dfe1989af9b5a9cde5ed25c69ffa1899f98add46db5be1bd234405f9903734358ed24ce756361cada16842465a8885deb108f7ce786c54c8d28e6a6a3e6f27732decf1c7afc8a59866dd9828e15e0c16cadc4ca36137a977bd0134fa6c0bcfc79b924e1eb93b4bc4145fc7568c674be12a0bd41956cdd5ade01b26daca9473a4f062787ff9513f05c1c3edca3cebfd1a26647615a1cd5004fc590f59ddabf464876e1d03f0a8a45db5ff77639aa0482db4ffd77edf573fe4d8fdeafdde2c931b1bb9dbf5cb4d98c692ba8b49d1cb52587ed255ad413310170cbc3341270fe9927e81b196cc3ee29cb1bd97f71d4325bc4fb42dfff7daa4bd2e1a59d2f43d87779e70888448ead013a13de71c6cf7cb884b14314bb98397085d15f229ccdac5bfed6e5f39abc603c4ca463119c30659e6e401a642045e9d11649b96c16c830be4ce6cc5f631de8225d2b94d0cc4287cba085a5bde420ce6a037f8c4aa7019dfe0e7d0908e8defbf0f009f68e61cc9852674fbfed2867f918f2e668dfecb6c21ff208b0478a94859d2449426c834fb2d1059cf880be8a1e3207e67d12a2355930b5bae20d5f329fd2d4c7acc04535d6d4466c0ba4fab76a10abdd319987cfcd8eaf8633cbb16fdcbd5aabad3c48f0931836cfbf7e324fc434883cae7b3f770d5a98dfc47d9241c581843614de4121f425dae23f37091a142fefbb5792d2c46d5e6eab2063eb5d53185bc970517cc89b3ade717ee00ccea6a69c7416b8b4a550ce7b5b1bf7212daa342045511dee487f90f85e2ed7b935429b118a2e33f60798ca73ad407eba2f9f2e3b9b08e6585b9009e9949ad480708a80537c9dea43fc94f5c9ba0f55594ecd9cc8e5cbe63a588b2d86ac5176cea6fade3540698f81e50fe13f8c1e25408a32d32f871ace786514bd30717597ce5fe102c61aefe65385c6f5bfc4b9737d38d394afe168fb3892f6c5de7a751820c9da0ba2f80743910232508d6b5de738bf63ab5698529a6ffc7de03f5cc7d9288ecaaabf1d0949d5803ae22e6e57af1356302050b7194239ef48afc0d0312e8a67421557152ba2a8f0783cacbcb27e41936fff8fe721914cd757389e6c230e595f4b90983a794e3445fa5ce67c30db94e64b1fc24528b3d579cae8bba0a5e00a622f2affe389738edcd1978903678baba76f0db6fb09901838636dc5b67d4fec546b620fd128283a20c319e0f21cdf532d81b49421ee64a9b0a519b71cdecaed92cf437e180858b3e6a47a046caffc232ee337729851f5bfe7837e2149f03e7b2a6b491ce8e32196b92351a3fcd0e8b5a6724e3e5afbbc28eb51678b5582ada44ba2e7042c2c1ffcc6810542e7836df71ccaca05a9767910295499904d48765f31c86691bf683f51321c6fe8efa4527dbe1bfee3f1899c999861307f26ff062921884816cdd9bb7793200e5aa2ed90511a3a26dcf3d570e87fd4bea8a851bd25aba40bccb170a9511a55f6bed227d47e360ca64c4566b24ec75e312c95fa732b691ad34c60b0582ae2c463c8701e3821cff3a35114c1ca9582f2ac79c84a60a5bfc75ec90e9ddc647596d208e62a589d4f6cc73b7022a4f0d55ba18b5fd229adf9c42e28aaeaa30a0a7f1064c3040fe897c6ef88df35e69123879cc83344592165c9f4c190cc580d58b1f71b61c8aa5e0a4896e415cf3b8d26b30cf64ed151693036c5cadc453fa8cdd11b118aaadbec61e86bccd012666887f417a1945e4204f1faf01a7f39086e200a9425ae7298f08204f7edbc8de0a465ef4ce16e8762b25ec0e209d3d7ed22509e1105389a7c4f0cc628297fc9024e7e58fe88dfcb0e6a3b15ed1ee44776832ac06219f69f9a6c89570a941f5bd0a5defa854386ab506348d0cbc3558f4c4279a98caf74351dc95b997b8a65b2fa4773828533f9ae98af73e54ac88cc76acb0dbf9f692c368bf405af5735faafdab3bbbe253e3bf473b7d8e004f1a4be66eafb22322dcc3b770fe9199663515eb01cd4f32ab11aa30e7217b2c6d31242c4b372cb00902fbee000907370efcb30d49060b677bd88b1b50ec97c48680c4df96c5030a40f132e248eeaf4cae7b930eee04de78827f055986ebbb56683d528d65d0cf2087451908170f8396d987c64e8ffe19e3bee15ecfdb36bdb11d0d0ee2499c7c78349b2473d1924acff3d058000c873b8197687d63ec7f1f3da54559fb5c8df739be60c4db22b25052b96956d579fd7c460af626ceedc34ffe8ba0c4ead02b23ee374e7e9190e8f37c4bd4ce218e4a3aa28a3ae8a6e4f41a3a03954113a8d6771ed38218a0fa2e9aac24e9dfdbfda9fbc5837cad95c3798017c08a6a3f0f519a26d07561072a9b48f2c5a68570d2e492c5ed8183f56e02abc660713b98992e138bbaadf42d4de75cb13eb94dce847b62f34d8ea90649fd7ef3c8f8da7954a2732cf6dd7e14f047b90a7c89aa13eceb7f1cc03d13ccc2e53091d75c25c3af96f6e4c4b3c003e20259b4e35b9cbc9f9d4a9ca3bc8bac1f73aecfb0e54c47241a1d8a9adb6c04b080bf2bf37a01c6b4b5cd4bdc21b03b07d4ffa67cb823528cea98ed9a42153b2a0b06dc0aa76cc084dcce72520345e52a416251faacf9dcb87aa7bea1f11fb6d70d13cdd9547ecf302f20f2041fc5a9b77cf614198952a147972c4bf514e1ad97b1579dd2ff2566fa8d665faccf32fe43ac8d6b9a6861470daaaf1d65ed76545e59ea2a58b548749cfffaef5f3a2a673bb8a704271d9b4a976d7c5dbd31d35f8b279a646cbca1df0fd25767cb55967f248b3c08390a30fa7f6075588610f76946a4f2f15372f685b50f84c710b525b9927e470924c86f19c29f0fa2f883f584ca537f96c7ed482791fec9a2f66fe3a8255e2fc7e50888e8f4cb4e549f9faa8bb527aabdcc64f3954d3082986325f6bcf1474546acb75a978bb8bf0d3d0e04f929b621ae2110c612576a621b6c9f9b9c26e6616e195d34d19154fc56b76c0c5df4aed83bd8c0fb88dad15d659fffc1fbec94bf31dae737c76bada7548d2993973c024ceae471895e288219c4b37278cd2cb6eefde32cfb82f4f1c724c070ab55b193ff46d5f13eda4589f0ba148bbb6318ad5776ca1da018a0c0ed313edeccbb4f2e35f3d8f63f2a95d2100797a5d7b754a5629dfaae"}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr, 0xfffffffe}, 0x1c) listen(r5, 0x0) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(r6, &(0x7f0000000280)=[{&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/198, 0xc6}], 0x3, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/100, 0x64}], 0x3, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000780)="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", 0x1000, 0x800, &(0x7f0000000140)={0x9, @remote={[], 0x2}}, 0x12) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "4ad2055cd6f3c63b", "516bff4b40575f551534a2e613e584712ef8d0d6a0e4490b0b63505381a8763a", "ae68cea1", "a639b8a86167232d"}, 0x38) socket$inet6_mptcp(0xa, 0x1, 0x106) [ 713.660182][T26271] device bridge10 entered promiscuous mode [ 713.695986][ T3849] usb 3-1: not running at top speed; connect to a high speed hub 09:50:05 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000080)={0x101, 0x2000}) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="52000000520301090212000100000000090440000009e5f92e86ab9dc29b4bd784ed3901008853f780aea9d238abfbdd502116115b73b74f0e7463bb56c0b54da93c00000000ccd576bc167b972753fd99c655f631cdc7d79513f8355fc7000000000000000000", @ANYRES16=r0], 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) statx(r4, &(0x7f0000000280)='./file0\x00', 0x400, 0x7ff, &(0x7f00000002c0)) preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0xfffffffa, 0xdea4e483, 0x7, 0x2b}}) [ 713.765779][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 713.777853][ T3849] usb 3-1: config 1 interface 0 has no altsetting 0 [ 713.816312][ T3849] usb 3-1: language id specifier not provided by device, defaulting to English [ 713.894687][ T3842] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 713.928716][ T3842] usb 5-1: can't read configurations, error -22 [ 713.948256][ T3849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 713.963578][ T3849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.984275][ T3849] usb 3-1: Product: syz [ 713.989115][ T3849] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 713.995584][ T3849] usb 3-1: SerialNumber: syz 09:50:05 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaaaaaa00080b4500001400004e29a5def4816db4527913e99e5500000067d0780000010000000000"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r1) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000000240)={0x2f, "e0bbbde4abbd207a804172e5379585ba411e978cb4aa4c298c2ad6f4bc5813d0866e8d90f61c06a147b1e13c037c2b9d44bd655f633f9559a081d0cb6230a519f4ac5e39e8c76699eb677ef758dcc596617ae0248c527a01f8793971e47072a2cfa3217aa631287ade06ea93ff91399aa2638ebdf9be23cb441a76620b906047"}) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$rose(r7, &(0x7f0000000380)="50fcb0e543fca5ac574113d0eaad3cc91b614bbb7ee2525bff4247a7b9cec424c15fef3f31c0bd0eb99add46ef3da6ffe466d6086c4c064a696786030c1d5a9a2a2a48d359696ff6969580e98c4b1ced33796ec302e35018a37d31e7c8a42c959efdb118f46c4e76ec00864f1f4ce95df5b5dd110554563e4d47bb5182aa58c50dd2dc3559dab07f9f9ba9586fe7aab838a1d9974bf0bdc1bce753768985221a78ca4ebbbe6330e93e854b11df8a4ddc6e0b5203947f6180ab9c5a33", 0xbc, 0x40000c0, &(0x7f0000000440)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x3, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000340)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5, 0x2) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 714.085878][ T3842] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 714.155878][ T3840] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 714.258541][T26238] tipc: Cannot configure node identity twice 09:50:05 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x3f000000) [ 714.355817][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 714.367192][ T3849] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 714.378874][ T3849] usb 3-1: USB disconnect, device number 107 09:50:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xffffff81, @dev={0xfe, 0x80, [], 0x44}, 0x7ff}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 714.460094][ T3840] usb 4-1: device descriptor read/64, error 18 [ 714.485887][ T3842] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 714.494762][ T3842] usb 5-1: can't read configurations, error -22 [ 714.502092][ T3842] usb usb5-port1: attempt power cycle 09:50:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, &(0x7f0000000140)="b32d26994006dded4e9250766f09bc8068778c32fafe6a3cc0d5bf7151ed1e3c931affc0907d43d3be103d91340b6f113c5c61be825be7eaaf102638b533846cc534aeae9ba19017a66f18", 0x4b, 0x40800, &(0x7f00000001c0)={0xa, 0x4e21, 0x9, @loopback, 0xf21}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000005a42ec15730000200012800b00010067656e65766500001000028008000200ac1e004a18ae4b8ef4283ecf28f3f11c98ad53dea51cc7afe103fde47dd5c374dcba1cb79b0c1eda87f2e8b1cac114809db119e5b087f22ba97f9db2447b3c59f3e6720d051465b2a3ec9a8642fdfaa71225828a25ed32fc76f203199bfd6415ae16f6237c2d087437f9d2d1fcd8d39e48668624548ce8efb2d91c9bbb2116d85b8fc5b2b193e6e2666f780055135ba1d73c14f05ab58b92de029abed5dfc64250a6bbc37a89a2d2de4f"], 0x40}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) rt_sigaction(0x1d, &(0x7f00000002c0)={&(0x7f0000000200)="42ff6208c4c225aa483b36430f3802f6447a0743ffe7c481f9518d000000003e3e46f6aa3f900000c481fb2d3b44db7a06f20f2b7f08", 0x88000000, &(0x7f0000000240)="470f4a8b0000000041a10000000000000000adc463096bd50dc4e2ddaa790e3ef2f00fc70c1509000000441a250a000000c4c151f80636f2f245d21ec4811dc6c700", {[0x712]}}, 0x0, 0x8, &(0x7f0000000300)) [ 714.595027][T26310] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 09:50:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "2d13211a57984f47059827c7d9ec11025073ef1f12decbafb4c78f43799afbb0855c5f9d0af2328a90d318cb36dce2cc0c16e91b0f2a7bf9bb0d5c51800756091bb11f84cda4e2ab65b672b7977a4f657637bc45e67cbd91c98371159005cc2ffd7fac81f3fdeb88832f92bfed3ab778f535bc83f3c8cdd06b909197b9fea23fe5398bfd8e9a7a4f861c36d546b56d14e0be3f43d6add7d844c1b00eec17016e39a67b2cb9c6687fc0aa28a14734d8a949a1dd5c12e835e4cf7e107f201b6bdbb7eafbe9aa69e05172dc969f32b772c8962eb8c78551c9dba328fefe9836f7b521358ad9c1deb05a9c34e7724046a2466ca8e8f55443a5cefac5533551bedb4d"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 714.875762][ T3840] usb 4-1: device descriptor read/64, error 18 [ 715.115929][ T3849] usb 3-1: new full-speed USB device number 108 using dummy_hcd 09:50:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private=0xa010100}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x2, 0x5, 0xc1, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffa}) [ 715.165768][ T3840] usb 4-1: new high-speed USB device number 15 using dummy_hcd 09:50:06 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x40000000) [ 715.225750][ T3842] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 715.326195][ T3842] usb 5-1: Using ep0 maxpacket: 8 09:50:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x2, 0x0, 0xba39, 0x9, r2}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000140)) [ 715.393598][T26328] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 715.466064][ T3842] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 715.474794][ T3840] usb 4-1: device descriptor read/64, error 18 [ 715.481208][ T3842] usb 5-1: can't read configurations, error -22 [ 715.537758][ T3849] usb 3-1: not running at top speed; connect to a high speed hub [ 715.627236][ T3849] usb 3-1: config 1 interface 0 has no altsetting 0 [ 715.635865][ T3842] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 715.666935][ T3849] usb 3-1: language id specifier not provided by device, defaulting to English [ 715.755858][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 715.800402][ T3849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.809748][ T3849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.820430][ T3849] usb 3-1: Product: syz [ 715.824881][ T3849] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 715.832342][ T3849] usb 3-1: SerialNumber: syz [ 715.885838][ T3842] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 39 [ 715.894712][ T3840] usb 4-1: device descriptor read/64, error 18 [ 715.901274][ T3842] usb 5-1: can't read configurations, error -22 [ 715.909479][ T3842] usb usb5-port1: unable to enumerate USB device [ 716.015924][ T3840] usb usb4-port1: attempt power cycle [ 716.207957][T26313] tipc: Cannot configure node identity twice 09:50:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x80) fcntl$notify(r0, 0x402, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201991122689d0901020301090212000100000009000000000000"], 0x0) 09:50:07 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x60000000) 09:50:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) fcntl$setsig(r2, 0xa, 0x2e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 716.325858][ T3849] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 716.350140][ T3849] usb 3-1: USB disconnect, device number 108 09:50:08 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100001200090400000009"], 0x0) 09:50:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) read$rfkill(r2, &(0x7f0000000080), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @private1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_netdev_private(r3, 0x89f7, &(0x7f0000000140)="2a1084cbcbd5b42357708c1eeb67025f60e692787262131f0d8c9407f8d5d8f973d7a521cbf85337197f06fbe7400e9ac97693ea34f8d352e53158d3b2f0703db94b41162625e39a7dde754d83480332a3f166f0d2b5eef0929ef4baebcf4023f2727219a9d7ef16314b389d4834f31bd23a01bffca5c4c3f70bbfd66ba0e8a042f406f3130b1a2f376b21b4471971a0eaaeb7dd61911415836e422f1afbdd6455f980530fda0db3848aad8a5f5f912abcdf34d2627b7c333b941a23c3e1e5af0e588fd5205da098d5bbd8") ioctl$FIONCLEX(r0, 0x5450) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000240)="a552c9795b735f408681a0e3c15ac1acf0d97f63619e1c261f9b7b437fbbf9cf707f327ff40f3542bc2930b61acb563b0e8f7acf02ad5dacdac403ff794d149597461b4543d9169b6abba38c1b5cbac7b90ee71e98a90671a3097075c8bd14fcfb7293e293e0fb9680c7c02a6ad7202a4d473757d9b72c325998b421be35fa8210c304d53a70b373205d1cf0be5d3cf71ccb44386b8e051a19c5", &(0x7f0000000300)=""/101, &(0x7f0000000380)="135d5345bb1d4d44006aefc848ecb72b94c0100bae19", &(0x7f00000003c0)="90cea3805c03ab1a6c59bc79cb4e0c6823e868daa1c63cde1cb726098062d7e9983a92cc2d5fc03763e3e94179c4581de564e92715bfc8d6d58b219eb8c84cbff183b60c39277c68c81d0e9bbd426223d63e7a94a8ce0f752dd8ebb84b861e9d24ac3bf3e9ed3e0cf3c8da352d", 0xfff, r4}, 0x38) 09:50:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 716.742298][ T2845] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 716.759997][ T3840] usb 4-1: new high-speed USB device number 16 using dummy_hcd 09:50:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0xa00000, 0x40, 0x43, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990969, 0xffffffff, [], @ptr=0x9}}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x5, 0x2, 0x7, 0x7, 0x0, 0x1f, 0x1a, 0x5, 0x6, 0x0, 0xfd, 0x1}, {0x3f, 0x204, 0x7f, 0x20, 0x42, 0xb0, 0x7f, 0x0, 0x81, 0x81, 0x1, 0x0, 0x4}, {0x1f, 0x54ea, 0x1f, 0x80, 0x0, 0x9, 0x7, 0x3, 0x80, 0x7a, 0xfe, 0x9, 0xffffffffffff55ac}], 0xe146}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x9) 09:50:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newchain={0x44, 0x64, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x8}, {0x6, 0x7}, {0xa, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000095) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000140)="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") listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet6_dccp_int(r5, 0x21, 0x4, &(0x7f00000004c0)=0x3, 0x4) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r6}) [ 717.015690][ T2845] usb 5-1: device descriptor read/64, error 18 [ 717.107591][ T3849] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 717.297070][ T3840] usb 4-1: device not accepting address 16, error -71 09:50:08 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x70040000) 09:50:08 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val, @void, @llc={@llc={0xe0, 0xc0, "c8", "67b2316296"}}}, 0xc) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x3, 0x3, 0x101, 0x5, 0x6, 0x6, 0x7}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r6, 0x9}, 0x8) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x56, 0x0, 0xc8a, {0x8001, 0x6}, {0x4, 0x800}, @cond=[{0x9, 0x401, 0x9, 0xd2, 0x4, 0x9}, {0x3, 0xce9, 0x1, 0x1, 0xb92, 0x60cd}]}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 717.420143][ T2845] usb 5-1: device descriptor read/64, error 18 [ 717.556199][ T3849] usb 3-1: not running at top speed; connect to a high speed hub [ 717.636171][ T3849] usb 3-1: config 1 interface 0 has no altsetting 0 [ 717.676269][ T3849] usb 3-1: language id specifier not provided by device, defaulting to English [ 717.696155][ T2845] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 717.715747][ T3840] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 717.815832][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 717.821295][ T3849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.830468][ T3849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.840251][ T3849] usb 3-1: Product: syz [ 717.844423][ T3849] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 717.852255][ T3849] usb 3-1: SerialNumber: syz 09:50:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{}, "d44eb8c7308ec7c4", 'D\x00', '\x00', "7ee51430da3f51b3"}, 0x28) [ 717.965673][ T2845] usb 5-1: device descriptor read/64, error 18 [ 718.101557][T26366] tipc: Cannot configure node identity twice [ 718.135857][ T3840] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 718.145037][ T3840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.154247][ T3840] usb 4-1: Product: syz [ 718.159939][ T3840] usb 4-1: Manufacturer: syz [ 718.164645][ T3840] usb 4-1: SerialNumber: syz [ 718.171390][ T3840] usb 4-1: config 0 descriptor?? 09:50:09 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x84040000) [ 718.225927][ T3849] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 718.233484][ T3840] hub 4-1:0.0: bad descriptor, ignoring hub [ 718.240019][ T3840] hub: probe of 4-1:0.0 failed with error -5 [ 718.255280][ T3849] usb 3-1: USB disconnect, device number 109 [ 718.268318][ T3840] sierra 4-1:0.0: Sierra USB modem converter detected [ 718.355575][ T2845] usb 5-1: device descriptor read/64, error 18 [ 718.452917][ T3840] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 718.482450][ T2845] usb usb5-port1: attempt power cycle [ 718.506967][ T3840] usb 4-1: USB disconnect, device number 17 [ 718.521345][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 718.531947][ T3840] sierra 4-1:0.0: device disconnected [ 719.195580][ T2845] usb 5-1: new high-speed USB device number 103 using dummy_hcd 09:50:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0xfe2}) get_thread_area(&(0x7f0000000000)={0x7, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}) 09:50:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) sendto$inet6(r2, &(0x7f0000000140)="5889815a737486812122d6482ec36077f134c766e7f86f79169038ed784e387e50e974a06be66eff315a4ab9682b8cca9d32dc5603075bf5b7691e657177c475614368c4ad01d399061dd82082df26b52433e9e7b2e9cb5a93af00cca62c0da30aa5762e2585b417269927228ef0fe6665c7c90bd976a805e4d261966cbb2060c44f5bb2473d9def3ed9a27bb80fd37ceb6ec722adb4283119f7736acd820ec4e6578db73dfdaa91c2bdc209de885723ed", 0xb1, 0x10, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) listen(r1, 0x0) accept4(r0, 0x0, &(0x7f0000000080), 0x80000) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 719.305828][ T2845] usb 5-1: Invalid ep0 maxpacket: 9 09:50:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x6, 0x1, {0x1, 0x1, 0x7f, 0x3}, 0xffe}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1d, 0x0, @private, @multicast1}}}}}}, 0x26) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, r7, 0x5, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0xfffffffffffffcb9, 0x4, [0x8001]}]}, 0x24}, 0x1, 0x6c, 0x0, 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES16=r7, @ANYBLOB="00022abd7000ffdbdf2504000000080004003f0000000097000000000000e4c415eac1a10554", @ANYRES32=r0, @ANYRESOCT=r8, @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:10 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) 09:50:10 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x900b0000) 09:50:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040881}, 0x814) [ 719.471036][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:50:11 executing program 4: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f0050000370000022dbd7000fddbdf251b0000008314287cab517000ea5ff9f57ab894c6281b25d9fbea408ad3ebd5f6aeaebdda9630aaca3289d654baa5fe683d01c5ba4e3fc9adad68659c1dae43103c042d8eadb68c4f97efc477693aa8f89cdb50c3b7b222bd7eb30c167a218fcd38dea53b78b4f5458531bae3342c6a63b0e21056cefb11525f716266162a195deee5efe615d9f9f912b41f5c698d106ee4c681f53b5cdb09092a991e0d530cf3b2b7edc17de4ec3273463c080018000a010100df01018090f242820c006e00fbffffffffffffff5f23711c47a894068818debdad533530932c1e9afb5c420d22896c23a0a0eb8d0d1af6034822640b7d52307de124d72d6edd599b592a39157593d5a51ac31ee58e37dd46ea4454672216a498cb44f7dd8a6b5523fecadc00d18c665c12b5f1dcb526118892e5597ec21c39341d9c90691d85f136ec0e2a4f7e258aa4cd0c90380e10794b39070ef3ce00aada6dc44a90ecab809e6dc4c65b0b0e75a648da5429b9da59bec1c344182de3f937d86349d7036d72f2155178737c8f904383f53940951d14f42df9150358c5d1785d8283ed9cf40270f096e3d0871134481b0db86d1bee416b08008c00", @ANYRES32=r0, @ANYBLOB="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"], 0x5f0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vcsu\x00', 0x502, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe0000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x20000000000003}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBLED(r3, 0x4b65, 0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000a00)={0x8009, 0xffff0001, {r2}, {r5}, 0xd3f, 0x10000}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000940)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000080)=""/198, 0xc6}], 0x2) [ 719.675611][T18872] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 719.686580][ T23] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 719.945897][T18872] usb 4-1: device descriptor read/64, error 18 [ 719.975492][ T2845] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 720.065793][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 720.086171][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 720.166916][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 09:50:11 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000140)=""/125, &(0x7f00000001c0)=0x7d) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r5, r6) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000b196d7000000aaaaaaaaaa000800450000140000e581d49bf64d2fec000647f3e000000136a5e4237c"], 0x26) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:11 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x97ffffff) [ 720.215515][ T23] usb 3-1: language id specifier not provided by device, defaulting to English 09:50:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x2, 'batadv_slave_0\x00', {0xfffffc86}, 0x5}) [ 720.345555][T18872] usb 4-1: device descriptor read/64, error 18 [ 720.345564][ T2845] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 720.345581][ T2845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.369225][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 720.381644][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.390046][ T23] usb 3-1: Product: syz [ 720.394276][ T23] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 720.400821][ T2845] usb 5-1: Product: syz [ 720.405001][ T2845] usb 5-1: Manufacturer: syz [ 720.409693][ T23] usb 3-1: SerialNumber: syz [ 720.414778][ T2845] usb 5-1: SerialNumber: syz [ 720.426036][ T2845] usb 5-1: config 0 descriptor?? [ 720.466744][ T2845] hub 5-1:0.0: bad descriptor, ignoring hub [ 720.472709][ T2845] hub: probe of 5-1:0.0 failed with error -5 [ 720.489004][ T2845] sierra 5-1:0.0: Sierra USB modem converter detected [ 720.635452][T18872] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 720.659623][T26460] tipc: Cannot configure node identity twice [ 720.755821][ T23] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 720.764438][ T23] usb 3-1: USB disconnect, device number 110 [ 720.915385][T18872] usb 4-1: device descriptor read/64, error 18 09:50:12 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xc8050000) 09:50:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x80, @none, 0x137d}, 0xe) [ 721.325531][T18872] usb 4-1: device descriptor read/64, error 18 09:50:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r6) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08030100", @ANYRESDEC, @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) keyctl$chown(0x4, 0x0, r4, r6) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'lo\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 721.456400][T18872] usb usb4-port1: attempt power cycle [ 721.525443][ T3840] usb 3-1: new full-speed USB device number 111 using dummy_hcd 09:50:13 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xdc050000) [ 721.972072][ T3840] usb 3-1: not running at top speed; connect to a high speed hub [ 722.075454][ T3840] usb 3-1: config 1 interface 0 has no altsetting 0 [ 722.120379][ T3840] usb 3-1: language id specifier not provided by device, defaulting to English [ 722.165455][T18872] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 722.275836][ T3840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.285092][ T3840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.294166][ T3840] usb 3-1: Product: syz [ 722.299308][ T3840] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 722.306333][ T3840] usb 3-1: SerialNumber: syz 09:50:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)) 09:50:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6c0282, 0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x20040, 0x8, 0x22}, 0x18) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000200)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9701006000", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32=r0], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1) [ 722.375466][T18872] usb 4-1: device descriptor read/8, error -71 09:50:14 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="52010000c87c38589911689d0901020381090212000100000000090400000009008ddcf8762282d66a3ec0344f1a5e"], 0x0) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, 0x0) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/60) [ 722.559546][T26513] tipc: Cannot configure node identity twice 09:50:14 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x81007702, &(0x7f0000000300)='\x00\x00\x03\x06\x00\x00\x00\v\x00x\x92\x12\xbc\x06^\xbe\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x01\x01\x00\x00\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\"\xde~\x7f\xder\x8d\xe3\x00'/211) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d09010a0301091212000100000000091400000009"], 0x0) [ 722.611826][T18872] usb 4-1: device descriptor read/8, error -71 [ 722.639647][ T2845] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 722.675446][ T3840] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 722.697742][ T2845] usb 5-1: USB disconnect, device number 104 [ 722.702172][ T3840] usb 3-1: USB disconnect, device number 111 [ 722.719899][ T2845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 722.745739][ T2845] sierra 5-1:0.0: device disconnected 09:50:14 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe0ffffff) 09:50:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 723.115119][ T2845] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 723.115130][T18872] usb 4-1: new high-speed USB device number 21 using dummy_hcd 09:50:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 723.185727][T26585] tipc: Cannot configure node identity twice [ 723.205925][T18872] usb 4-1: Invalid ep0 maxpacket: 88 [ 723.212240][T18872] usb usb4-port1: unable to enumerate USB device 09:50:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000000c0)=0x1f) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @val={0x0, 0x0, 0x6, 0x3f, 0x6, 0xffd}, @eth={@random="0000e1ffffff", @broadcast, @void, {@ipx={0x8137, {0xffff, 0x62, 0x2, 0xa28622c6ad6cff64, {@current, @broadcast, 0x4c}, {@broadcast, @random="dea48c1bca10", 0x5}, "2b5918744ef8966de641d70b28a45577e00475383157618e9fce71275b1ab0e2f463d0da82144264eaee960363376df7ecd772460ed69fefe3e694e6a4624e974ba2752c"}}}}}, 0x7a) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 723.261001][T26590] tipc: Cannot configure node identity twice 09:50:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 723.385093][ T2845] usb 5-1: Using ep0 maxpacket: 8 09:50:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 723.545243][ T2845] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 723.552823][ T2845] usb 5-1: can't read configurations, error -61 09:50:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 723.616087][T26607] tipc: Cannot configure node identity twice 09:50:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r3) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08030100", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) r4 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r5) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000600013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08030100", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES16=r4, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) r6 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r7) fsetxattr$system_posix_acl(r6, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001d88a520e865b97835b013e07", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08030100", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r7, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [{0x2, 0x6}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x7}, {}, {0x2, 0x1}], {}, [{0x8, 0x1}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x6}, {0x8, 0x6, r3}, {0x8, 0x6, r5}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x3, r7}], {0x10, 0x7}, {0x20, 0x4}}, 0xa4, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 723.735090][ T2845] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 723.974990][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 724.135165][ T2845] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 724.142812][ T2845] usb 5-1: can't read configurations, error -61 [ 724.154178][ T2845] usb usb5-port1: attempt power cycle [ 724.864903][ T2845] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 724.955145][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 725.114907][ T2845] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 725.122576][ T2845] usb 5-1: can't read configurations, error -61 [ 725.274864][ T2845] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 725.364934][ T2845] usb 5-1: Using ep0 maxpacket: 8 09:50:17 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="5201000052b68508991122689d090102030109021200010032bae98d2f6fdd624e0000000904000000091e4019efabbb2c31e2a776abc654c262be57444f718d5ed0dfea77e19fe01d1bb9f06de90b43e2dedbb80e62dda5e718fe70b235cfa7e0e5637065909bbdce32727315819529448da2b73f2cbea961651b5d86e46f022075d1234031571355777284422268ece1546f6234e7277ddb2e982e2f82215669d8fb43be1601b097fee6e72e6296f464dbb45daf721c5be68ccf41630903d1ea0f58bf7909ba38763cd260c8ea0e8d7107c8c2f7ecef9bfecd9c"], 0x0) [ 725.524858][ T2845] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 725.532513][ T2845] usb 5-1: can't read configurations, error -61 [ 725.540083][ T2845] usb usb5-port1: unable to enumerate USB device 09:50:17 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socket$bt_bnep(0x1f, 0x3, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) 09:50:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:17 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe8030000) 09:50:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0xa, 0x17, 0x5, "7d8148a10a9f6024aeea5efe582ee69104c8d46c1c142c37bea818ba25b2a104620f6141daa829be34cc09aa855f719e388d9b90aadc17b71647a988ba56b1e8", "22a8213aa76293de1042914b4dca98889fb2ec925f234d796cc6f7f70cc564417113e60ce4e36c5abd55942de4b8bb6d6b21fedbd02e2b1e0c83fed3ee9b65dc", "7e674ad5b525b9856195be135d6b0501517ac7b4e8339a554ae4d169e1d0e426", [0x0, 0x558]}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000b6762458d6ee879f96d7000000aaaaaaaaaa0008004500001400000000c1ba60562a130d1f6f000001"], 0x26) r6 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r6, 0xd, 0x0) shmat(r6, &(0x7f0000ffc000/0x1000)=nil, 0x6000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f00000000c0)=0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x200000, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x6e, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:50:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) 09:50:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) [ 726.078225][T18872] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 726.158873][ T3842] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 726.337911][T18872] usb 4-1: Using ep0 maxpacket: 8 [ 726.434788][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 726.484905][T18872] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 726.495741][T18872] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 726.675312][T18872] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 726.684483][T18872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.697647][T18872] usb 4-1: Product: syz [ 726.701803][T18872] usb 4-1: Manufacturer: syz [ 726.707606][T18872] usb 4-1: SerialNumber: syz [ 726.713083][T18872] usb 4-1: config 0 descriptor?? [ 726.774793][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 726.784088][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.792841][ T3842] usb 5-1: Product: syz [ 726.797895][ T3842] usb 5-1: Manufacturer: syz [ 726.802538][ T3842] usb 5-1: SerialNumber: syz [ 726.812206][ T3842] usb 5-1: config 0 descriptor?? [ 726.869279][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 726.875541][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 726.883345][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected [ 727.016068][T18872] usb 4-1: USB disconnect, device number 22 [ 727.084111][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 727.115569][ T3842] usb 5-1: USB disconnect, device number 109 [ 727.124007][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 727.139448][ T3842] sierra 5-1:0.0: device disconnected 09:50:19 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xf4010000) [ 727.615667][ T0] NOHZ: local_softirq_pending 08 [ 727.844580][ T3842] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 728.104482][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 728.414673][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 728.423735][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.433280][ T3842] usb 5-1: Product: syz [ 728.438065][ T3842] usb 5-1: Manufacturer: syz [ 728.442664][ T3842] usb 5-1: SerialNumber: syz [ 728.451209][ T3842] usb 5-1: config 0 descriptor?? [ 728.509239][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 728.515455][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 728.521877][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected 09:50:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) connect(r0, &(0x7f0000000040)=@ipx={0x4, 0xfffc, 0x3, "e3d42ff3bed2", 0x1}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) 09:50:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000080)=0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000140)=0xafb, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) 09:50:20 executing program 0: pipe(&(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x141042, 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0x4c4) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 09:50:20 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001740)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000001780)={0x12, 0x10, 0xfa00, {&(0x7f0000001700), r2, r3}}, 0x18) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) writev(r4, &(0x7f0000001640)=[{&(0x7f00000000c0)="025d96e78be9771249d35160059e1a4c5a3a84f10c2e51f6322040e5fce8fcdc21f55940dc9dbe617d3ac0e2243a96a20829bd1673737442e9f6216d85247ce7f3434b840dfd45adeea2620bc11e009acbc24406414f03620ca60ae5680d324ff592662a28b0da257464e73eaa1f9ba737f4d59849f21e3937fc9227ff9d7757dbdb04da23f65f41c9813b3b4b3a50336d4c2e1d92eb100fb70a177606b566319894f765cdd4e320436563e088", 0xad}, {&(0x7f0000000180)="d6220d3ac49431186a69f7cd64e0b3f6a9756203690fba725b56507b110542041c30bc4f4f29930ab45c5f18d1251820a90adefd1a4eb542b65e22f52b37ac463c29f0824753cdbe6a19d788e66c5e3ad29657d2a0562fab7fd652e6aa433b2e1fd1", 0x62}, {&(0x7f0000000200)="6021a244fb5790d0a95127068aaf6ef847fc01a62026e442df29a1def28ca8b76eb6b997af438266c6b727edec76a1dad0d1ae63229665c2991db50f7112940edd5ed181d14d95c57b37c6690f845f4fdac0410ced1c8424cb70b70a502b78b2dcd66cab9eedf0e53fabf05262c0f1bb6943b114f09eaa24c169184fabaedcde", 0x80}, {&(0x7f0000000280)="1c61340e0c8892dcf724caec06ead3e0c99559dbaa3b", 0x16}, {&(0x7f00000002c0)="ae6dd888b9a1ccb5399000e8d180df6a5ee6e24b73a24961e9d220e32569367112b14ecd646d1ce01b57414b96b99999fe66be07c0d82048b85f1e8b0145ba92875765ca85e976794e632c1357b2d39a35d4d1c1942fcc73ff4a574a652ea7543403e400e6e99924cd4118dbf34fab6490342094ec04b62e8555b36cbc2d05f5e83be7de072ba963398daa3d08fa69169036aa61ce49a0c1077fa9c9dfa8af0c96fe3f5166d077641f5bf29701471f12a6599e7e85f0a7a5d2315234e0c89201ee01918da0d0f3624dd2186d21a791ad63910816713e54a76c80112b7ce2b4191078336530ac2ca7355d23cea0a85d5b9a30bcd923e2e6b9", 0xf8}, {&(0x7f00000003c0)="2c0c225d9e3b2a0b3b094ce086d37ac2e9dd8bd93f5fd8968863de16319c783a208378b7d33ff62fd56aadd946f310d1be5b7d441176edd4442ca5379e1c57a37b9cca26e5c81cf9aa17cf8f2b602e66d4f232de4e89ec2539aea52ddcdc2eeb465dba89f6a8709966f3ac9a356accae37fd5cd71db6376cf3bb5945f07448521d1df76bdc20e0844a27f7b9128e9e27d985dcd60fd4e65635934ae108862fb8e1ea4f369206137efe2e8db4ba998f661627197b4663689f9681124f4eb7060536d23066f039d2d9fea02735a3fd6202fb8607ce1cb05cf9d88aa17713893114f897c38683390b4877cc2ad604eaeee7d8e2a4cfa090", 0xf6}, {&(0x7f00000004c0)="37df0f4f3e9b20bdeb55b7ce6e2f3e9937f563b70614327164d38b6d239b79e6fc4b59cda3589e8e5a9495296bd88b725fcf8ab41e8d5d7acc74cb199331b299191bc2c9e49d35932773cdf0bf53cb083c43c298d22b632b0e78c14aafb422e37ef89924853bd9a1b79f2b8cbc6175dedb7a5b676cdc17bdc63c24e7dc8bbc0d083c0e83078bb0d4a133ceeace0405d061d83a6048b693e9d6b7916a42dfe74522483f7172ac2a291e406e5d6739b1db1e09c3306bb3421094beea6c67d8d5122dfa00b304f0dacb44ce6eb04a486986801b361c8fcfe1f8857e94f7255a66c6035656baf8b0cfbe288bfdb758973b01043405b1a1336e1df300d916bae46d16c06debdd8394b8c68192b0659fd003b9d4ae432faa313321040b675e270caec48adf9a35e85949123af6d47a6eb42919b7efada69fbcc5c035eb42f9ba73eefdb1b476f7342fb8da5c808edb91c796e24546c3f827086cd53b84cf67207b2cefea22fc4105c858704d6c16fd75bbf02b305e7f6c9f4724b62c90df8b6552ead8bdf1abf7dfa7fd9a357d0f64de0b6026bbe1830194d9490b52e54445d7a2493176987757b8eb3130b3fd9c59863b8aff15b2749fa0d8801c5cfc8ef84a8d735f814be69f5f57f9a0ca1db492dd013ec8bfc8306b80b328d7271ceb24e8b63b25dfc50baa64e1edfff0f15ab5d7aaa48ebdbc69e4592089559bff9bd19eaecdce4be53c8ce05915596d2a93e02a38e29ba47527856deaaadfe0fdd914cd3f6684cc24fcfb35b06705526afca130000b4eecbf829898eb55cf19081385d7688db3bb2e0337d7b4b45c83bc6f7b0502ebba2787b861e61c089b7e2c211e8de4cacdc15595029347c5582af3533d975e1564e44dd90356373abc43d9d93a98eea1ed76892b22c43dd57e4bc2b94b63f1c54aa847a5c9853c22c90f0197a29590a57a427daa679fc96c717e1fd60498a3aa857539304a821c1740a875474c0ea81e08f8aed6f9db797a38bc87894b59bf6b4edadcb2527c7615bfdcef04901d9a0e4605cd4c38f63087c90bf607b929ed879dfd1a265460f8cac4b6815b9c94bfefc7d7fd2ddc918349a895095d030a4f8aebd80e16a83f2369a9175796fab8ff4b1096a4282c7547b5eead4ead235c37c5e69f02408cca16a9ec84e66122fc97c70fa542797b4868a97e5a17c06b1d126991e8c1e0a46a46d2a75d5cd32a5f7219ab2713653cf69ee2892d2e91c1ee919e9f7c05844033c669c96392517a4a46229f437f83c25ca04a74b3185448eec10858dc2430cbdf8afd0b6a8dbc73be51ee77fe1f3fdaf93d177e4a9ddc296a2b73ebc00675d1700c9fa8f64d87f680c49295a8717b3613db8c65adbf72bc07fed44f66771a7641ff30a7c89c13ee9e4498284086d492fa79104a3deb53e39c7ec1c92788cfe011403bdaaf503bde5c721ffe357471de3f92297ec152dbe2d81ebf04794b9dceb5129fa5a42401a7907eaf0b37bead750039c334c7cce974fbf7c70bd9c60fa9e09e1fdd0a997396da985ca5ababada56db71599dede9b39cca12584cb0f27d29bd2bd457ef6e85e1aeae1b577254dc1fe7f9f3fd1f03dfd63420ebd214f98d226a07dc38607425f0155156bc37900b9f19bccbb346034827b56940e5ec6171cadb26f647dc69d2bb17c75c487e05b077f93e681c7da09c276a90c15feb78125f601d995aa6cbc6a0e35f93440550908193564c99c498b1e55952877e38174d16d4d97d03e87f90aaba8eb4bd9929adfb4167e7b6a82e776e0648e4170e54f5ace1c43204cd58ee97341f80347d2ef6faa7eb1b9f98554d38207f8943766bff4fa57d3d1f3099fe98bf726b7b2504578472f4a5c2d2d6f5b67fbcc8ae8ea1129eb15f99f24cc5c060e0a3dccd925ff06d968672ad312529c84613559bfd1ff0e9e387ccc1b3a7b30f9bc69fc82f9ebb955e57a524edbf9f3aea4d6b9c38dce8de46829b79668ebf6fcae53a562497c0e1adc8e2b12342a9f96c63bb46d0405cad09a8850a29682301942653a51d84160845730ca7b3d32ba3d1a0d5d856785c64e513b43de9a0569358f55342863f477c3d98a06c43c2eabfbadd4753ac4953dcf82ffc85ceec4d56578346cf76643d171b7c24ae893d0e8cbb400c86f095d7969b122e90927f6a6c8cedb8c61afc04997e59b8ebe28fef815e72cb80abca45f7c4926a806807cd497159ca006b29cd2cf86bc809165c5a6e85f468d2fcdc6867877d713f8401c0d9f00240c10bd7c0ba3fc60378b78aff984cfd46554a90610471442177a0ef1ae0fa3606bce31af3fa0c7b63d1ef61c544fb9c0e2481fc7a1cbf58b1f77508389715db00e787102cec6a89df0837fdde6edc4b92c6c72f25cac3aba99c485cb0438f36be6601ba97382e634662f3ecf4ed13ec7314a79abdd33429cafc0649b4da51ecf8483d3288445ee900d341b9868ac444d7684c1361b18409d110e069c2f00111897ee3a7e87d89c3e342890703f2cf98793330f83f084e11b401186be8164407888a9cb10dc0d4f33eac313e96c50d4e4d944e2d4b74b707b46fa7a930c2d0e1b6c0d14c5bd95e113c3f1929fd16ac08c7f227b840a206757fb088b70714fd3aa1f1fc9ac7a9df7f34295dfb7fd722d4194f260174b28e61cac0c1961233a7cd31b374419b08ff8ce3b9ccfe173b5073897d28d26aa967499aa46bee0a74b767173338d980fd11651b94de6acea853ee899f8899beee4bf48c1bde086ebf12b9093516b78ccc413648eab17224f666d4c2bb85f2948abfeb24fa0ab6ec90a3a3b492a363201c3ad95eb8bba5749f17bd8931251600dec6ea527761f129416ffe9afc000cf51f7a66baf4638a633f63bc6859bf4054e2160ede0caabc089829134d86c75700847b4ab977e4441fc9b729efeef2e915f2e48931185c97c1ffba5090d3d385a9790d5773f8229268fb901845531a351954095a96fb1b56704499f2d84e6654df6c2e2b23f8ed8733c25509c1a287c43152cc0e0fd698b857fcb4dbaa244b3a9af31c375dad50b12760a6735ded7dca495fab5a0d5bc19a3798852a83f4a6f60f53152f52b100c64c8079103a041fa141087a82949fa6af44beaa94bf85775953eea44f6d4396cd90bbbc590e53c577bbfe1062bdf9c9cc631f3c6d91b5d689eca10623cd146bcffbd82cb1d8369f2d7fdf64fcd0c3b0e43c9a7a2895005151f27b6895f29a75306ff59d02b5521b35d7b8bb2403034113cde26612226a04567883455c71d1e99fa92c849c27e511752a34ae4646cfb1a91e61b6bf621d218b2d74dbf56c72c1d312863491c8dce745372d82de785461f5926a0d2997390af2a29317ec9d2ff21f593fed13260936956d1d7dd23c3c54d59d87c9ed845e53959506560aaa41053f7d554b026fe85196af420ac096f556817408526d443f29d993a760d7992675bea0d3a15d2cabbcf79805d884dfdb6807db49cb2b1236aed75b1077aeabf29b16766792c3e3e586fc1bd2507f003ee9b9014888ee0c82a55080bb8af42c8ae7e107c392c5eaba98312343eaa0d828f26644a33f33f51110101a81448081af3e8f9c8088f3c82daa00303e7fe4b1c0a2d3ff72aea637dc09a80218ff040ec475660a34c728dda85c98e1387e6a567c88d6205cd0393edb484191650dfcfef2652648262f3ff097233259f46f3e6cce73eb247284cf8dd8d9ec54b1944dd2dbeec524f626657346795fd4c8a1e5e937ec0aa772533aa9ed503729e868374a1070649f54a1b9dc77477988799f9712f6d8c72f37b5dbe6437dfb1fbca98ec8c997bf7d141097c05e74332d9cf207d2a48cf6034ad6899b83008c53b630fc7dbd52abca30438ccda9fad03a271e877544bae3133b434ce82f1021ef3819ae1c60e00119b7bbd6db8a4cfea03c05985fee152f898cee26ba91a0979438733d51d8ef3ee6bdc3794804c251289503e920285e834e472538893f870dfee48ded38489e339fabdbbcfa0d53c5a6128bad0dd890d885369258eea4324949e76c3b7eb24c84ae5d0eb87fcdf8c820f651eec0afd6a1c0b25eb44041e925adc29a51c8d20ed3e0b1853a21a91ea1951fd5a74123efbcb78b0858cf87acf1e31a2513b7d2c785373c1e7b2fcb628a7bc82eaef6fbb98ec6461413d6fe0264ee646efc19e4c9eb5d63d98ea8cd88a528929b21e32abf2a298a4db7c0cb5126d635898f27d4b3d635e05dfc82d2287d99c1986d38d282f023942dc7eb213f9fe69021c8c88a7428485e3db32549c5cf73f9f8a0a372f264097c150005f563e0961113aecec5acc6033aea0ac27789489d6ccd4318c9d0ca88a1e8e5afe6ec1d61a043bfdbbb3ec4fad10b092e103ba2e05f539e1c11f19f7c1899e83faf5dd4713116a837e5c9989c180c7d1376d5559d2488346461189137ed8103d98fee13496586d39e0f3f733249b626e1fa5219642db74c226bb5fe569f57bd163b4110ca9413d47bc699f9e17eb3e6012c208e2a51847b9040a8f7d217654d56780cf3ff89c51d916c2201b4e58604ab0a306c694d92dbca8ddfee6dd233575782b9dd56bce06dfdc1ffd4105fefb0fe4a2b35ef882b62c713ef6b58892af7e9e31942560208e28db9372244d55dfa4f229ac809762734bfa141a3600e3a23f69334d57c2d88c17a4b227f882a13d56e7a38818d9818e6434bbba000d9b4759dd2f3dd0ece593b006b65aafacc3ea68faac726448027c8f486ae52003e2df3384e321adafa0d7fff0c231b4737ff65728c9e0e0086d966964d1543258a3eb71eb41e699e0061ea0d53a00f5f0b66d9089be106b84d5ea70bec827dba57824f5678f840fde20aef84b0af45aa224c51ca6a00f733464111bd0c9f1f3073c7928a33656a75868cf33ddcd55754e0cfe51b4f302dfa416895cd781de2b413a9d646843fee2ef3af6badc961b09fe31c550076244efd3c642181ed7ea76f28a8af489b3c0e50149bd3459e99169767044ac34c7d851a84a10fee47480d7858e924f84197892c78624129898caf07498cd2f17f486d78074f6bec29655bf9c5d1e4a0bfa11eb7072740cb0711e1906ed64757c6409dae973b920d935b993f189429c7cf3aadb67648f04378bef6a04de1534cfe0db614c39ab0e2e1602c976c37f56ad67d341f1425982c3303288e0f95013e980cabd65b537aa3de1e28b137e116cff4b952b6fc0d2a624aa18d5ec560a05f821bd8a0517026f186502b6e341a8bf1184e722849fe790776a53b373cf0eb195f89029f0dbaf164566e0d44e5e49975096279837124f6950ceb503c7a3a9bd0a8ad940bd63fd1d763c7c85ff7a032805196eee30110dfe82be76016130ea9db7929666fd4902c23ee866b2e0cb45ab2c0306d0eefa2427c10490cf30e6d943f28bdf0c6cf442ccef967fa813a90e455ab5caf2a58754d3ddc0d85bbd986d02edbf58096d279ee54aa627a7abb66b03a6118a6afa779b94b44b5a07e8d12d34c52874413edab0891951c2ef4da61e7e681c389d39d9504fc1550e856ab41a67f9357fadc280a78d3e7d31402328532e432750b7a3f9653d6198918e4ffde60c1871afdd2deb501b1109cb1cb7cc898ee91ace6c2adc17f2314a197635da98d189f264f08f1a084b62cc9cab575f40faf37c91712f0e7c8450455bd18abbefd3556101ac6d22820d3277aa5a7beb99114d8e9ab8616c5c48276b961fa9c496a9c9148ca352422cddc873b17d3edb588dd30d39efcecd7ce08f935db5bfdf1cf99e2ee3abe67757fba8a030d10ace4b4186", 0x1000}, {&(0x7f00000014c0)="4762af1f630ba07ddad9fa15a89fa49db8e8a073aac836cae5488cf7b6ada45a532b5bf7cedc109d17ef62a0ca7f6333b40b767f093523e0957b21b24e3ebb3bc862ed4822e34136871bd53673eef3b812309713e51715abe388fe25610a21f01f378c57ff5d97372d889ecf924d01392a5c1a3f731b2b831791996300c34d1742bdf087a70073cffacc00586fc47c1ba6d5eb45083413903ab53045395d335633e99dcb7c94547da5a8722a7abe39f72666b9ba6533d16e4f9c27ee1eea8c706c40c9a6b84a4c97b086f092320a19", 0xcf}, {&(0x7f00000015c0)="dc74ae2a217a605284a82db037104239d2a3481c27244d4c8dee86643629cb7de3c1467067ab1309766d90c5c71abd36e0a7ca5da3f775b48b55cc5f312b32447f265be090a0f8dd01ff2e178dd5aec5e7223120ca97fbd0e543894d14a2a356ee9ae035", 0x64}], 0x9) 09:50:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xffffff97) [ 728.716065][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 728.755235][ T3842] usb 5-1: USB disconnect, device number 110 [ 728.777369][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 728.812740][ T3842] sierra 5-1:0.0: device disconnected 09:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 728.838401][ T29] audit: type=1800 audit(1593769820.341:45): pid=26719 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16296 res=0 09:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 09:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 09:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 09:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 729.144370][ T3840] usb 4-1: new high-speed USB device number 23 using dummy_hcd 09:50:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 729.270246][ T3842] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 729.394483][ T3840] usb 4-1: Using ep0 maxpacket: 8 [ 729.534481][ T3842] usb 5-1: Using ep0 maxpacket: 8 [ 729.686105][ T3840] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 729.717047][ T3840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.735965][ T3840] usb 4-1: Product: syz [ 729.749243][ T3840] usb 4-1: Manufacturer: syz [ 729.757822][ T3840] usb 4-1: SerialNumber: syz [ 729.776470][ T3840] usb 4-1: config 0 descriptor?? [ 729.839632][ T3840] hub 4-1:0.0: bad descriptor, ignoring hub [ 729.845825][ T3840] hub: probe of 4-1:0.0 failed with error -5 [ 729.852249][ T3840] sierra 4-1:0.0: Sierra USB modem converter detected [ 729.864451][ T3842] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 729.873496][ T3842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.882025][ T3842] usb 5-1: Product: syz [ 729.886406][ T3842] usb 5-1: Manufacturer: syz [ 729.890991][ T3842] usb 5-1: SerialNumber: syz [ 729.897060][ T3842] usb 5-1: config 0 descriptor?? [ 729.955017][ T3842] hub 5-1:0.0: bad descriptor, ignoring hub [ 729.961008][ T3842] hub: probe of 5-1:0.0 failed with error -5 [ 729.973949][ T3842] sierra 5-1:0.0: Sierra USB modem converter detected [ 730.066111][ T3840] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 730.109439][ T3840] usb 4-1: USB disconnect, device number 23 [ 730.120516][ T3840] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 730.135204][ T3840] sierra 4-1:0.0: device disconnected [ 730.170715][ T3842] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 730.215065][ T3842] usb 5-1: USB disconnect, device number 111 [ 730.228648][ T3842] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 730.238882][ T3842] sierra 5-1:0.0: device disconnected 09:50:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) 09:50:22 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="520100005ab68508991122689d090182031e090212004218d334000904000002090a04c291925d56767c859f3e8c9bf8989893f4a288089d8f0c82152781d54e9b6c054b5def7d96bc0738617253d054d245d5aea238205d9022edc3d99a1fab92c76dbac715b2ace5c8f6c4d5b7b1017958d554c9b6821effff5a91c524ad86004a8e6610b494070f"], 0x0) 09:50:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000180)={[0x2, 0xffffffff, 0x1000, 0x3, 0x20, 0x9, 0x10000, 0xee, 0x2, 0x6, 0x7, 0x7ff, 0x7f, 0x2, 0x4, 0x401, 0x9, 0x2, 0x101, 0x100, 0xff, 0x4, 0x7e, 0x0, 0x0, 0x5, 0x653f, 0x5, 0x8, 0x5, 0x1f, 0x9, 0x42b, 0xff, 0x4, 0x4, 0x1, 0x79, 0xe81, 0x10001, 0x1, 0x3, 0x7a, 0xffff, 0x1, 0x7, 0x2, 0xfff, 0x81, 0x3, 0x9, 0x8001, 0x80000001, 0x9, 0x10000, 0x300, 0x5, 0x8, 0x9, 0x1ff, 0xffffffff, 0x81, 0xe2e8, 0x30d, 0x2, 0x12, 0x9, 0x3, 0xfff, 0x7fff, 0x7ff, 0x9, 0x1, 0x3, 0x1, 0xfff, 0x1, 0x4, 0x7, 0xffffffff, 0x4, 0x800, 0xa63, 0x8, 0x6, 0x1, 0x40000, 0x1, 0x2, 0x9, 0x5, 0x3, 0x9, 0x0, 0xe1aefc0, 0x6, 0x0, 0x0, 0x9, 0xbad, 0x80, 0xec9, 0xff, 0x200, 0x6, 0x120, 0x81, 0xa9, 0x4, 0x0, 0x1ff, 0x0, 0xffffff5f, 0x3ff, 0x3b1, 0x5, 0x1, 0x2, 0xa3, 0x7fff, 0x0, 0x100, 0x2, 0x0, 0x1, 0x2, 0x8, 0x1ff, 0x2, 0x0, 0x8001, 0xb4, 0x0, 0x8001, 0x10001, 0xffffffff, 0x1, 0x0, 0x8001, 0x8001, 0x9, 0x3, 0x8, 0x6, 0x0, 0x1000, 0xffffffc1, 0x2, 0x2, 0x10001, 0x3, 0x7, 0x9, 0x800, 0x1, 0x8, 0x3, 0xccb, 0xb, 0x1, 0x401, 0x6, 0x0, 0x9, 0x9, 0x4, 0x9, 0x24, 0x0, 0xfffffffd, 0x3ff, 0x2, 0x6, 0x400, 0xffffffe1, 0x3ff, 0xcd, 0x1, 0x2, 0xfffffff7, 0x5, 0x0, 0x2, 0x5e8, 0x400, 0x6026, 0x79, 0x4, 0xbbf, 0x7, 0x3c01, 0x80, 0x200, 0xffffffff, 0x10000, 0x4, 0x6, 0x0, 0x3d, 0xffff, 0x9, 0x3f, 0x9, 0x200, 0x3, 0x3, 0x15f5, 0x3, 0x9, 0xe3d, 0xccf, 0x4, 0x0, 0x4, 0xa570, 0x234, 0x1, 0x7f, 0x80, 0xfffffffb, 0xc0000, 0x7, 0x8, 0x9, 0x0, 0x5, 0x8, 0x8, 0x5, 0x6731, 0xba15, 0x1, 0x0, 0x6, 0x8, 0x9, 0x1000, 0x2, 0x80, 0x7ff, 0x80000000, 0x2, 0x2, 0xfc000000, 0x0, 0x459, 0x10000, 0x401, 0x6b3a, 0x401, 0xfffffffa, 0x6, 0xfad2, 0x8, 0x800, 0x2, 0x8001, 0x8, 0x10001, 0x4, 0x9, 0x1f, 0x200, 0x1, 0x100, 0xfffffff8, 0x400000, 0x6, 0x80000000, 0x0, 0x7f, 0x8, 0xca, 0x7, 0x8, 0x4, 0x7, 0x1, 0xa9, 0x8, 0xfff, 0x7fffffff, 0x6, 0x83, 0x3ff, 0x3ff, 0x9, 0x10000, 0x2c, 0x80000001, 0x100, 0x6, 0x2, 0x5bf6236c, 0x4, 0xca5f, 0xbf37, 0x0, 0xf5f0, 0x100, 0x800, 0x3, 0x7, 0x1f, 0x8, 0xcb, 0x7ff, 0xfffffffd, 0xffffffff, 0x0, 0x1, 0x5, 0x6, 0xffff, 0xe4b, 0x4c67, 0x90, 0x1, 0x846, 0x7e, 0x1, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0xd5, 0x7fffffff, 0xc038, 0x15, 0x800, 0xe1, 0x1, 0x3, 0x5172, 0x49, 0xe0d, 0x1, 0x2529, 0xffff, 0x0, 0x6, 0x9, 0x47, 0x401, 0x10001, 0x2, 0x7ff, 0x5, 0x3f, 0x400, 0x14000000, 0x2, 0x4ab, 0x2, 0x7ff, 0x40, 0x2, 0x1, 0x3, 0x81, 0xcd9, 0x8, 0x6, 0x2, 0x4, 0x2, 0x80000000, 0x841, 0xfffffffd, 0xfc2, 0x3, 0xffff8000, 0x7ff, 0x9, 0x3, 0x7ff, 0x1, 0x0, 0x0, 0xb2, 0x2, 0x2, 0x19d4, 0x20000000, 0x1, 0x1, 0xec, 0xfffffffd, 0x6, 0x7, 0x7, 0xffffcdfb, 0x3000000, 0x40, 0x401, 0x2, 0x4, 0x15d, 0x8, 0x0, 0x8000, 0x20, 0x81, 0x8, 0x21, 0xff, 0x2, 0xa7bd, 0x1, 0x20, 0x3ff, 0xe2, 0x3, 0xffffff14, 0x6, 0x1, 0xfffffff9, 0x13, 0x8c4, 0x1b9, 0x4f295e18, 0xffffffff, 0xa1, 0x2, 0x3f, 0x1000, 0x5f9, 0xd02, 0x5, 0x0, 0x7fffffff, 0x200, 0x5, 0x0, 0x10000, 0xfffffbff, 0x1, 0xffffdd92, 0x2, 0x8, 0x6, 0x7ff, 0x7, 0x10000, 0x0, 0x9, 0x7, 0x1, 0x8, 0x81, 0x3, 0x810, 0xfffffffe, 0x80, 0x0, 0x800, 0x4, 0x3, 0x80000000, 0x3ff, 0x401, 0x9, 0x2, 0x2, 0x8, 0x3, 0x40, 0x2, 0x5, 0x4, 0x7ff, 0x7, 0x5ca1, 0x3, 0x3, 0x8, 0x216, 0x1ff, 0x9f1c, 0x7f, 0x8, 0x3, 0x7, 0x9, 0x3, 0xfb7, 0xffff7fff, 0x20, 0x1000, 0x7ff, 0x2, 0xfffffff9, 0xfc000000, 0x4, 0x8, 0x1, 0x3, 0xff, 0x4, 0x2d5, 0xffffffff, 0x8, 0x0, 0x3, 0xffffffff, 0x1, 0x0, 0x5, 0x81, 0x4, 0x4, 0xff, 0x5, 0x80000001, 0x4, 0x27, 0x4, 0x200, 0xff, 0x5, 0xffff, 0x401, 0x6, 0x1000, 0x3, 0xffff, 0x8, 0x722f, 0xff, 0x0, 0x80, 0x7, 0x5, 0x5, 0x1, 0x0, 0x7, 0x20, 0x100, 0x59a, 0x6, 0x9, 0x4, 0x5, 0x7f, 0x6, 0x20, 0x1, 0x6, 0x8, 0x7, 0x5, 0x4, 0x0, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x9, 0xab3, 0x3, 0x4, 0x60, 0x3cef, 0x81, 0x3, 0x9a2c, 0x1507b1b5, 0x0, 0x9, 0xffffff81, 0x70000, 0x1, 0x400, 0x80000001, 0x7ff, 0x8, 0xed9, 0x9, 0x2000000, 0x0, 0x1f, 0x5, 0x0, 0x0, 0xffffffff, 0xfffffe00, 0x8, 0xba0, 0x9, 0x1, 0x9, 0x4, 0x100, 0x5, 0x1, 0x7, 0x7, 0x0, 0xffffffff, 0x5, 0xf436, 0x3f, 0x1, 0x7fff, 0x6, 0x600000, 0x1, 0x1, 0xffff, 0x2, 0x2, 0x81, 0xe3af, 0x5, 0x4, 0x8001, 0x0, 0x905, 0x9, 0xfff, 0x7, 0x8, 0xce, 0x4, 0x7f, 0x7, 0xfff, 0x7, 0x5d69108c, 0x9, 0x2, 0x23b, 0x2440, 0x80000001, 0x4, 0x1, 0x2, 0xbf, 0xfffffff7, 0x559e, 0x4, 0x9, 0xffff, 0xfffffffd, 0x1, 0x8, 0x9, 0x9, 0x80000000, 0x7ff, 0x1, 0x1f, 0x1ff, 0x100, 0x3, 0x9, 0xfc, 0x80000000, 0x8d1, 0x2, 0xffffc000, 0xdc0, 0x7b13b438, 0x3, 0x3bd, 0x10000, 0x8, 0x5, 0x9, 0x5, 0x80000000, 0x9, 0x6, 0x7, 0x200, 0x2, 0x7, 0x3ff, 0x9, 0x3, 0x1, 0xe3cf, 0x8, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffffff8, 0x98ab, 0x1, 0x7, 0x2, 0x8b, 0x9, 0x7, 0x6, 0x7fffffff, 0xfffff41f, 0x8, 0x7f, 0x80, 0x80000000, 0x597, 0x7b9d, 0x1, 0x2, 0xffffffc4, 0x83, 0x8, 0x10001, 0x3f, 0xfb, 0x7fff, 0x8, 0x1000, 0x6, 0x20, 0x5, 0x0, 0x5, 0x5, 0x5, 0x142a, 0x81, 0x217, 0xf4, 0x7, 0xffffffff, 0x800, 0x9, 0x0, 0x1, 0x8000, 0x7, 0x80000000, 0x4, 0x7, 0x3, 0x5, 0x3, 0xfffffffb, 0x8, 0x40, 0x1ff, 0x1f, 0x2, 0x6c, 0x7fff, 0x3, 0x4, 0x5, 0x80000000, 0x8, 0x9, 0x0, 0x9, 0x7fffffff, 0x3, 0x4, 0x2, 0x4, 0x8000, 0x0, 0x40, 0x6, 0xa10b, 0x3, 0x9, 0x6d7, 0x7, 0x1, 0x7, 0x1ff, 0x60, 0x9, 0xffff0001, 0xb03c4a6, 0x5, 0x5e6a111e, 0xa7, 0x7ff, 0xe383, 0x7f, 0x2a63, 0x1, 0x0, 0x2, 0x8, 0xd02d, 0xff, 0xffff, 0x453, 0x3062, 0x1a9, 0x7ff, 0x20, 0x100, 0x80000001, 0x10000, 0xbc9a, 0xff, 0x300, 0xea4, 0x1020000, 0x5, 0x45080, 0x3, 0x200, 0x7fff, 0x3, 0xec, 0x3f, 0x1000000, 0x3, 0x10001, 0x81, 0x4, 0xf0000000, 0x200, 0xfffffffb, 0x3f, 0x800, 0x8001, 0xfffffffa, 0x3, 0x8, 0x4, 0xfc9, 0x244, 0x1000, 0x1, 0x8, 0x9, 0x0, 0x7, 0x80, 0x6, 0x7, 0x7, 0xfffffffd, 0x6, 0x5, 0xffff, 0x4ad, 0x2, 0x3, 0x1, 0xab52, 0x3, 0x2434, 0x3, 0x2, 0x0, 0x7f, 0x4, 0xffffffff, 0x2, 0x4, 0x4, 0x0, 0x0, 0xf4dd0000, 0xe547, 0x20, 0x9, 0x8, 0x7fffffff, 0x7, 0x7, 0x7fff, 0x0, 0x1, 0x10001, 0x401, 0x6, 0x5, 0x7fff, 0x4, 0x10001, 0x8, 0x101, 0xff, 0x20, 0x4, 0x9, 0x1000, 0x7f, 0xffffffff, 0x2, 0x81, 0x3ff, 0x6, 0x6, 0xeb69, 0xc0000000, 0x8, 0x80000001, 0x7b6, 0x8, 0x9, 0x8, 0xee, 0x0, 0x3f, 0x1000, 0x3, 0x100, 0xed93, 0x7, 0x6, 0x2, 0x0, 0x100, 0x81, 0x7fff, 0x101, 0x2, 0x7, 0xfffffff9, 0x1, 0x2, 0x7f, 0x40, 0x0, 0x0, 0xf6d6, 0x8001, 0x80, 0x7fff, 0x1, 0xfffffffd, 0x68, 0x34, 0xffff8000, 0xe1d, 0x2, 0x58, 0x2, 0x7fff, 0xff, 0x0, 0x9, 0x7, 0x5, 0x9, 0x5, 0x1, 0x3, 0x3, 0x20, 0x1c36, 0x8, 0x7c75, 0xfffffffb, 0xfff, 0xd828, 0x1, 0x1f, 0x7fff, 0x0, 0x1000, 0x3, 0x7, 0x6, 0x0, 0x43f, 0x7ff, 0x10001, 0x2, 0x401, 0xff, 0xfffff766, 0xc6, 0x10001, 0xffff, 0x3, 0xc2, 0x5, 0x3, 0x3, 0x3, 0x9, 0x2, 0xffff, 0x200, 0x6, 0x9, 0x1, 0xfffffffc, 0x9, 0x80000001, 0x8bd2, 0x7ad, 0xad6, 0x10000, 0xfff, 0x80000001, 0x6, 0xf81b, 0x3, 0xffff, 0x6, 0x8, 0x1f, 0x4, 0x7ff, 0x1c, 0x1, 0x5, 0x7f, 0x1, 0x8, 0xabe, 0x6, 0xff, 0x9, 0x80, 0x2]}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002380)={&(0x7f00000000c0)="01960af2d34008d6e9d53e36a0839a40", &(0x7f0000001180)=""/223, &(0x7f0000001280)="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", &(0x7f0000002280)="61b032c07635ca2865210774bc4560f530e687a2a78ba345452abcc02b62fe48611ec6908a2c4e0f8cbc1c27292d2d1fca01ed430f095fce57fe0c0cf14c629c8804e3d20d36b636cef3562184a4141af479a09ef5eb60fcb2772b9e5396d72edee62dc7203413c3c1e7004c22dbb27b72fd1ea4a32845ff4a87002d132e3457da8af233e0e0d6698f102b3dbec405efbed5b1d46fc23305e256872fadba52697ff7a873798a7e4f1328be47c59e02e6a4eacc0149b83ae7a355a0eb15435b869702b5bed6b15bc34bd66daad7ff2eae252bdbd5726e52d7403ef106", 0x0, r0}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:22 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xffffffe0) 09:50:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, "1fe3bc"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4ef}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48d0}, 0x0) 09:50:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) 09:50:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 731.064208][ T23] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 731.134274][ T2845] usb 4-1: new high-speed USB device number 24 using dummy_hcd 09:50:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 731.354349][ T23] usb 5-1: device descriptor read/64, error 18 [ 731.384204][ T2845] usb 4-1: Using ep0 maxpacket: 8 [ 731.425288][ T2845] usb 4-1: too many configurations: 30, using maximum allowed: 8 [ 731.504947][ T2845] usb 4-1: config 24 has too many interfaces: 66, using maximum allowed: 32 [ 731.513831][ T2845] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 66 [ 731.524585][ T2845] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 731.614747][ T2845] usb 4-1: config 24 has too many interfaces: 66, using maximum allowed: 32 [ 731.623451][ T2845] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 66 [ 731.639162][ T2845] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 731.730619][ T2845] usb 4-1: config 24 has too many interfaces: 66, using maximum allowed: 32 [ 731.742841][ T2845] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 66 [ 731.759735][ T23] usb 5-1: device descriptor read/64, error 18 [ 731.766277][ T2845] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 731.864718][ T2845] usb 4-1: config 24 has too many interfaces: 66, using maximum allowed: 32 [ 731.873479][ T2845] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 66 [ 731.883655][ T2845] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 731.975020][ T2845] usb 4-1: config 24 has too many interfaces: 66, using maximum allowed: 32 [ 731.983728][ T2845] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 66 [ 731.994407][ T2845] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.064048][ T23] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 732.084816][ T2845] usb 4-1: config 24 has too many interfaces: 66, using maximum allowed: 32 [ 732.093498][ T2845] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 66 [ 732.104629][ T2845] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.194405][ T2845] usb 4-1: config 24 has too many interfaces: 66, using maximum allowed: 32 [ 732.203095][ T2845] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 66 [ 732.213242][ T2845] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.307537][ T2845] usb 4-1: config 24 has too many interfaces: 66, using maximum allowed: 32 [ 732.316396][ T2845] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 66 [ 732.329525][ T2845] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.342645][ T23] usb 5-1: device descriptor read/64, error 18 [ 732.504101][ T2845] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 732.513307][ T2845] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 732.522449][ T2845] usb 4-1: Product: syz [ 732.527218][ T2845] usb 4-1: Manufacturer: syz [ 732.531803][ T2845] usb 4-1: SerialNumber: syz [ 732.743925][ T23] usb 5-1: device descriptor read/64, error 18 [ 732.854356][ T2845] hub 4-1:24.0: bad descriptor, ignoring hub [ 732.860449][ T2845] hub: probe of 4-1:24.0 failed with error -5 [ 732.871764][ T23] usb usb5-port1: attempt power cycle [ 732.877962][ T2845] sierra 4-1:24.0: Sierra USB modem converter detected [ 732.905642][ T2845] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 732.954790][ T2845] usb 4-1: USB disconnect, device number 24 [ 732.969818][ T2845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 732.999526][ T2845] sierra 4-1:24.0: device disconnected [ 733.583852][ T23] usb 5-1: new high-speed USB device number 114 using dummy_hcd 09:50:25 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x10000000000000) 09:50:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 09:50:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) recvfrom$rose(r2, &(0x7f0000000080)=""/64, 0x40, 0x40, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @bcast]}, 0x40) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:50:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 09:50:25 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 09:50:25 executing program 4: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000080)=0x28) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000001240)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0, @ANYRES64=r1, @ANYBLOB="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", @ANYBLOB="f60eba678de140a99a5f48e55afd36aecdf619982d033fd3efb705821af5791c98f48c62f4a5c6d41edf01949b722a107584abe88b563cbf8444b8f4cd20e54c8815d56ef470644342b1ca254ad2b639f3cde2c579d038e14380400a8c11994bf178a847051c1db6f527414d1958db6d472117e665ad697e105d2a40a85b0315e083308c6b9ccb29041dc84b6330aa03ab5e514d55e3b0deb6c8f713c195a0e33c", @ANYRES64=r2, @ANYRES64=r1, @ANYRESHEX=r3, @ANYRESHEX=r4], 0x0) [ 733.753850][ T23] usb 5-1: device descriptor read/8, error -61 09:50:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 09:50:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 733.964209][ T23] usb 5-1: device descriptor read/8, error -71 09:50:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 734.071432][T26914] tipc: Cannot configure node identity twice [ 734.123876][ T2845] usb 4-1: new high-speed USB device number 25 using dummy_hcd 09:50:25 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) [ 734.373773][ T2845] usb 4-1: Using ep0 maxpacket: 8 [ 734.423798][ T3842] usb 3-1: new full-speed USB device number 112 using dummy_hcd 09:50:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x40030000000000) [ 734.654540][ T2845] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 734.669436][ T2845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.687003][ T2845] usb 4-1: Product: syz [ 734.691387][ T2845] usb 4-1: Manufacturer: syz 09:50:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/llc/socket\x00') getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f0000000180)=""/69, 0x45) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "3d82f43d54c3e366", "ed22b1e1b8967a15f3ab5ac1f9aa30b746685a16f7c562be478e698a875e810e", "0d0400", "4422b121b4185e32"}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendfile(r0, r4, &(0x7f0000000100)=0x4, 0xffffffff00000001) [ 734.702379][ T2845] usb 4-1: SerialNumber: syz [ 734.713182][ T2845] usb 4-1: config 0 descriptor?? [ 734.753773][ T23] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 734.784553][ T2845] hub 4-1:0.0: bad descriptor, ignoring hub [ 734.790539][ T2845] hub: probe of 4-1:0.0 failed with error -5 09:50:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000280)={0x5, 0x80000000, 0x73, &(0x7f0000000200)="f5b21587d2cb07bde6f7c01042f2e9c6f4bdc8d4efb568a36749f23821ac88a931e32ff1b1c126eeb831f215c6586b677f49ffb0742052fa98e8a2fccca2da0d3307b7b4a1f6288adb7ae49f22c58041e135c164b96faac17cd359eab99f4b2789a9a21c4a1e530b752fabb000581c608398cf"}) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001ffff656e10766500001000158008000200ac1e000104000600"], 0x40}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000080)={'vlan0\x00', 0x3}) [ 734.817979][ T2845] sierra 4-1:0.0: Sierra USB modem converter detected [ 734.854094][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 734.884523][ T3842] usb 3-1: not running at top speed; connect to a high speed hub [ 734.997520][ T3842] usb 3-1: config 1 interface 0 has no altsetting 0 [ 735.009199][ T2845] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 735.057442][ T3842] usb 3-1: language id specifier not provided by device, defaulting to English [ 735.064875][ T2845] usb 4-1: USB disconnect, device number 25 [ 735.094179][ T2845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 735.133377][ T2845] sierra 4-1:0.0: device disconnected [ 735.143903][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 735.157624][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.198686][ T23] usb 5-1: Product: syz [ 735.219240][ T23] usb 5-1: Manufacturer: syz [ 735.226903][ T23] usb 5-1: SerialNumber: syz [ 735.235271][ T3842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.248863][ T3842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.250759][ T23] usb 5-1: config 0 descriptor?? [ 735.259695][ T3842] usb 3-1: Product: syz [ 735.269678][ T3842] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 735.279404][ T3842] usb 3-1: SerialNumber: syz [ 735.304474][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 735.310877][ T23] hub: probe of 5-1:0.0 failed with error -5 09:50:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10009, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x19, &(0x7f00000000c0)={r9}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r9, 0x81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r9, 0x4, 0xe541, 0x2, 0x6, 0x1}, 0x14) [ 735.331800][ T23] sierra 5-1:0.0: Sierra USB modem converter detected [ 735.529410][ T23] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 735.580884][T26917] tipc: Cannot configure node identity twice [ 735.584556][ T23] usb 5-1: USB disconnect, device number 115 [ 735.596382][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 09:50:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x100000000000000) 09:50:27 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="5201000052b66ea22f332212000100000000090400000009000000190800000000ffa75210578c11fbc3fd54b32801338b767124842f10d67af1a0acd8653f8f4410f5b89a4faa5299f4bff0bdd63f6856998d1b08f84aa4313d559808df3d5f9bed5510db62bb9b86cf5dd544f1395f4cbe2901acb428a53eb531fe794219d37bf82e3df09d7ec0db3e0df4fd1f8f34526744cc2e9c113725a0942a079b2c560e23c26ccafe9ee6"], 0x0) [ 735.642729][ T23] sierra 5-1:0.0: device disconnected [ 735.720071][ T3842] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 735.730036][ T3842] usb 3-1: USB disconnect, device number 112 09:50:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x19, &(0x7f0000000280)={r5}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x1000, 0x8008, 0x10001, 0x20, r5}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r6, 0x5}, &(0x7f0000000240)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f00000002c0)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x42000, 0x0) fdatasync(r8) [ 736.073582][ T2841] usb 4-1: new high-speed USB device number 26 using dummy_hcd 09:50:27 executing program 2: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) [ 736.273513][ T23] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 736.343527][ T2841] usb 4-1: device descriptor read/64, error 18 09:50:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=@encrypted_update={'update ', 'default', 0x20, 'user:', '*]+'}, 0x18, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x200000000000000) [ 736.503708][ T2845] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 736.523835][ T23] usb 5-1: Using ep0 maxpacket: 8 09:50:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0xc00) r3 = socket$inet6(0xa, 0x6, 0xfff) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x7ffffffd, @mcast1, 0x404}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 736.743567][ T2841] usb 4-1: device descriptor read/64, error 18 [ 736.753572][ T2845] usb 3-1: Using ep0 maxpacket: 8 [ 736.803510][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 736.812734][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.821302][ T23] usb 5-1: Product: syz [ 736.825853][ T23] usb 5-1: Manufacturer: syz [ 736.830576][ T23] usb 5-1: SerialNumber: syz [ 736.840609][ T23] usb 5-1: config 0 descriptor?? [ 736.889418][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 736.896206][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 736.902670][ T23] sierra 5-1:0.0: Sierra USB modem converter detected [ 737.013519][ T2841] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 737.034448][ T2845] usb 3-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 737.043930][ T2845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.052097][ T2845] usb 3-1: Product: syz [ 737.056804][ T2845] usb 3-1: Manufacturer: syz [ 737.061537][ T2845] usb 3-1: SerialNumber: syz [ 737.071074][ T2845] usb 3-1: config 0 descriptor?? [ 737.095968][ T23] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 09:50:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/4080, 0xff0}], 0x2, 0x8000004000) write$P9_RSTAT(r0, &(0x7f0000001180)={0x4a, 0x7d, 0x1, {0x0, 0x43, 0x4, 0x800, {0x8, 0x0, 0x7}, 0x40040000, 0xfff, 0x8, 0x3a, 0x5, 'D]\\/)', 0x5, 'syz1\x00', 0x5, 'syz1\x00', 0x1, '('}}, 0x4a) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x2, 0x6, 0x2, 0x4, 'syz1\x00', 0x6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) [ 737.120545][ T2845] hub 3-1:0.0: bad descriptor, ignoring hub [ 737.154689][ T2845] hub: probe of 3-1:0.0 failed with error -5 [ 737.174632][ T23] usb 5-1: USB disconnect, device number 116 [ 737.199233][ T2845] sierra 3-1:0.0: Sierra USB modem converter detected [ 737.209149][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 737.237543][ T23] sierra 5-1:0.0: device disconnected [ 737.293638][ T2841] usb 4-1: device descriptor read/64, error 18 [ 737.373820][ T2845] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 09:50:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x400000000000000) [ 737.424382][ T2845] usb 3-1: USB disconnect, device number 113 [ 737.456850][ T2845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 737.476008][ T2845] sierra 3-1:0.0: device disconnected [ 737.653356][ T23] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 737.688393][ T2841] usb 4-1: device descriptor read/64, error 18 09:50:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x8}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1, 0x0, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x5, 0x18}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000140)={{0x6, 0x49}, {0x31, 0x2}, 0x4, 0x5, 0x2}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) dup(r5) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) 09:50:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32=r5], 0x4e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000001c0)={{0x0, 0x0, @reserved="db7d013e0aa6312cf739e6d43e83c1e80ea0226fe0774ce96e4f375090fe3d79"}}) r7 = dup(r6) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 737.813661][ T2841] usb usb4-port1: attempt power cycle 09:50:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 737.903351][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 738.183446][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 738.192752][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.201113][ T23] usb 5-1: Product: syz [ 738.205537][ T23] usb 5-1: Manufacturer: syz [ 738.210250][ T23] usb 5-1: SerialNumber: syz [ 738.216387][ T23] usb 5-1: config 0 descriptor?? [ 738.253349][ T3842] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 738.254184][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 738.277209][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 738.288411][ T23] sierra 5-1:0.0: Sierra USB modem converter detected 09:50:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x700000000000000) [ 738.474694][ T23] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 738.515735][ T23] usb 5-1: USB disconnect, device number 117 [ 738.523585][ T2841] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 738.541736][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 738.581074][ T23] sierra 5-1:0.0: device disconnected 09:50:30 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009c3073c00f1a226397e75e0600b2e33baa17eb1d2f51e31b94d14dae41b2da011c20421dcc28b8698dd186c11dbfd588ebec19ada65bf0afafae53652300b0da98f373f289704b32f13fd82b6cc724a6ee9e9ef3d88f0bacf7a481043"], 0x0) 09:50:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) r3 = geteuid() ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000080)={0x3, @default, r3}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 738.634079][ T2841] usb 4-1: Invalid ep0 maxpacket: 162 [ 738.673315][ T3842] usb 3-1: not running at top speed; connect to a high speed hub [ 738.764626][ T3842] usb 3-1: config 1 interface 0 has no altsetting 0 [ 738.815225][ T3842] usb 3-1: language id specifier not provided by device, defaulting to English [ 738.955300][ T3842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.965312][ T3842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.975842][ T3842] usb 3-1: Product: syz [ 738.980016][ T3842] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 738.987831][ T3842] usb 3-1: SerialNumber: syz 09:50:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x7, 0x4e20, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96d7000000aa0a3eaaaa00080045000014000000000063907800000000e0000001"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 739.093150][ T2841] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 739.183223][ T2841] usb 4-1: Using ep0 maxpacket: 8 09:50:30 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x800000000000000) [ 739.266751][T27087] tipc: Cannot configure node identity twice [ 739.274124][T18872] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 739.380596][ T3842] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 739.424497][ T3842] usb 3-1: USB disconnect, device number 114 [ 739.469757][ T2841] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 739.490506][ T2841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.510668][ T2841] usb 4-1: Product: syz [ 739.515904][ T2841] usb 4-1: Manufacturer: syz [ 739.520896][ T2841] usb 4-1: SerialNumber: syz [ 739.523193][T18872] usb 5-1: Using ep0 maxpacket: 8 [ 739.538978][ T2841] usb 4-1: config 0 descriptor?? 09:50:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mlockall(0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e22, @local}, 0x18b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='ipvlan0\x00', 0x2, 0x7, 0x3}) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 739.833389][ T2841] hub 4-1:0.0: bad descriptor, ignoring hub [ 739.839837][ T2841] hub: probe of 4-1:0.0 failed with error -5 [ 739.853380][T18872] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 739.861298][ T2841] sierra 4-1:0.0: Sierra USB modem converter detected [ 739.867000][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:50:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x12f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d, 0x1, 0x1, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "c15c5862"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf504, 0x5, 0x0, 0x1, 0x6, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1253}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x99, 0x4, 0x7}, @mdlm_detail={0xb0, 0x24, 0x13, 0x17, "a6d69b5d37410affd01d61a7fd62f0de2585fae76e21c658e9ad52ff670fc12d7a56934ea95263153ee0109d91f16a7987cfdf6b28bcaae17433abaf5b3c96f972e52a829f621bd1c1ee093a6d16e403e581bfd4a5b5e18cda2a394f9cabea20faaaab64bfb9bff84787adb2ef180b5aec50a58578b0a4b37818e2602ca7608f587d75e95866244f2d32d887ef3a474b7a674442a0b70c8894bc8a04b83d652b2c939262b404cef0a6914b25"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x0, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x52, 0x1, 0x15, 0x8f, 0xff}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4}]}, 0x2, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "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"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "90df4a180abdab4612530fac1bb818b5f952"}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r3, 0x7}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x0, 0x2}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 739.880088][T18872] usb 5-1: Product: syz [ 739.884847][T18872] usb 5-1: Manufacturer: syz [ 739.889646][T18872] usb 5-1: SerialNumber: syz [ 739.903814][T18872] usb 5-1: config 0 descriptor?? [ 739.916376][ T2841] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 739.963908][T18872] hub 5-1:0.0: bad descriptor, ignoring hub [ 739.969850][T18872] hub: probe of 5-1:0.0 failed with error -5 [ 739.977665][ T2841] usb 4-1: USB disconnect, device number 29 [ 739.991570][ T2841] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 740.019607][ T2841] sierra 4-1:0.0: device disconnected [ 740.020257][T18872] sierra 5-1:0.0: Sierra USB modem converter detected 09:50:31 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x40000) 09:50:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000000c0)={0xfffffffd, 0x76af, 0x2, 0x1, 0x6, 0x6}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaaaaaa00080045000014000000000067907800000000e0000001759fdc4364fae6e8025da4d9348514ceb1cb42c2e5879ef470c0147e60d725234f"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:50:31 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x900000000000000) [ 740.209603][T18872] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 740.254083][T18872] usb 5-1: USB disconnect, device number 118 [ 740.269087][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 740.282738][T18872] sierra 5-1:0.0: device disconnected 09:50:31 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="04cba1a7b5ad4c4bb4f936b41421b71c58573734aca2bfa4947d332895e739dec31b57a364deff9e5c3d245676fd89ce9b1829d5c6af9de25a85e58fbc713bc93b08fdd63cc69809bce707f7345add8ed66b43ccd8bf4675c3df6a2041ebb36dac40781a483a259bb7fae0c3462e9594e89c1d47bdda9da69e2b289b3c9320c996d1e54e070ccd820c0042ed32087572dd38cade771c8dca8da17745a505e09287f105e767a3dfc9368c4ff2d4090d94722875762eab53adaa5886c8375db5411241d9661e213f422d5dd1e1d4d3f359de09aa4b59f710d4675333844e0761abb41d1ee7eaff070995e91e3dd227474aa5f4f4bf5cf9c23bb3c65df7ffbc9684d370aa2ca35c9a1bbb80018450f320dc6e83fc764c533abddf73457edc621555f5ab7d5d1f9d44d3035d7fb5787e8aa373e89eaa17f021fbd2a3d699cc58a079e1bdfb16c98445999ba6e4636b8a2bd8004261a056dced4260d1a2676d662ee82d447757caede7913528db8d96f16cbbedc1dbe79e79e47e6b6adc56c9bd9f0ffcfdea979dd15ca55b9b84782f465d574c4918677e0e29d5e368db333bb2a5a62bea97702ec989a4ad475adfa45b0d107d33bb0c01cc7a7bc5832e2e54eaf3f85f145a412419e521b392a56d40f8a8c1ac037dce79dad2718fbc9e202288bd9d115ef77b03bc438f6c25204c20cf3a771708b2e90b2959c5fffc33a090866dc59a0f1f2f0d3da809da35fdb017cd202dafd3e091dd0fd2650aeccc24da017a4909206c2642e9e1a71e48c3a50f38f80df56577692d14b47388faa99e0487a23fb53901aea40c826cd1fcca5f6cfcb9bb8b4e3627ebc0367f9da498932b97ef30a4a2ea174da328a13b9786b7882583873f657923fa89927b0f69517175cfcf30d644643fc59d1741bb90c05353538b3b2726d2b1473ab3b72a402b41ea6a10985f491f552d1718e5bdeb600f8d19417c126eb76f2f743e4d8417679cca58c8b951f54d044726683176a546755de97fdc957c5c181cc2c0834ddb2de20060c13f93925285db465cdf72d2aad12898fa9ad6dc3c6f979086d031e36bc6510061c1691df0198debf38f514fee08a99e1be0ee10854ddb60eb536160fd340ecd0e326f8839ffb21d51ffc2dbcea0f7ce5b5853b46cc61e53be48fa51cc11ac71e4ac2a144c6268351e4a5da7377bc54cd24733a9f95ea8664835322ef3c91b03808c2b367ada8385dcf2009e29e9874c745eb3a018376b876107158015621a9e7a7833bdc298c03e5d95d88e1ec9f0ff73431975ee7c2fe798e9e491298dabf4cd6cf9223c9b358dd34f5e0fa496cb164310dbc1ea76321a5a79b76052cd76bc016fc18ac6815d160674755fa5fe8e3713b57a2cddeb7e2ba5d39b53fc1032fdf97bd97f14f9e978671b1ed2545c285eb80d88acf9d194041c40474e05e583cd3f25856d4c6a39213533188bc30f215f11dff5252af1e60766b812807e43f39d977af54952a967c1829fe507cd3d2db78fbb36ed57b3da858ee1bc61fbf128b56b6cb64a2f6f8261e22a6e1b9eede1e7e8fbb5dcfe578bc1fa1e469147c80233126c5653d9069c5070226a2fdf0b963c3130600cc758e956ebe6dfccc204ea01957e7e20c75b204c2e7f4fd825259a12ab70deab26efad75b2e58f822c2351923e287c1b239389b15369e5aef1968965af58bb2f4a275c6c0c70f4f6a2d02eba47e8b2c6d938195abc96103d17dbf3f94341d43aaec10bef9115dec7d11ace5d68e9f9df6ca388956c60645ba65063be3921a2ab305c339d30915c49133fc739f71857a70126e9adeada2ba75e93fec54951943cdd7bdf786eb94b80288e68ea1862d4422971184e38dd5e59f5db2d72792cf751616e6b2844cf7a12e9ce9eeff6224d887233fa376401b46632248922504149f3bac6000832130ed9e2f0ed43a85219a5f68b427e514c6d3599f0671d13017ddba1b56787a3d2826864edd8a56ea0b8990c7a753a56aec2ad6cbad2465ae832ebe6e6aede9529d11cead2967ebfd6842a0d8e24cbbf108dc7fdf17023d972d17579ccf9d1e78597d9780c990af2db8e3609cead385e0c0f1ddf291ca218fb88cbfd45bf7b62d116269f32796d7277fe97d26e0068856aa4fd90c11941a1815ee85c9b8a217f51f28de95245302b3244de4666e907ec8ea101e0df560b49d3d9421e33414326a13a7e75d44f00340adc5bbe3a92e5ece419f07eb6c57ba0938eb22ea79dbd22d3305b6a27d926ee52ab0c4a4be7d34363a1cf6f122c56fc7ecf465a07381677ac4fb94cb6f2c848d5af955df3e8353c4a9fd2e9034fff229d774397dc93a93764cdeb788c8dfe98094acf850876e92688da50a692a46860a58e104ce600041c120fbd9e95703eb21133615b6948910903457009ccb97f7a75b3828299501fea05a1d490ff24829030c5ab7c151c6af352b576e40e48ca3a52e7568ef324981e3ed8d121ca2bb220971b50261e92eefbb2aa3c4b3a4525de502225877fe4b24e15ecd020e15358691e9c827ce54ddd8b6500e32473b7f489e6628e06a3d2f678e08543d10f9a9df3fb9ab37a378efed937df525968ce934109458a1cc92a23fbcaabea0b4c142d659a72fb55b73d091e862fd6accee6124890fddc687ee91765a0acb50f374b246e5426d06d43b422f1a353ad4d4a7b3c1add128c113d6b57ee87cac76051ee6761f7e0a1b5af2acb8796bdc2c7a6fe072a905aac3ef131bab9a19bc41e44819b8aae2e0143471d6405d07942e227b8c07ffb04ee285b717aa518dc2760f70f62d1941baa0ec517a16c573b3ac5f81d38830d0b6760e39dc03d76ba1a64bcb4b76bf3ebf4d0042e7a47e0eb458cf411859b52830236d5fd2718ccce950fe2b904fc627b30b3ac4ba4c3dbdceac290052dca3b94164e75b63463223e78f0bd7ea9cf171c6b5cb3db310287fe656deeb2b3987cc798f93ab3f0d0f05e7f84d3d6410a40a017f91d31af8e9fc73cac258eb5afc383cf96dfd8bd5b11141928f1fe11448c6e44425286d5a606a18d94654295f848974404ae86dbc42b21c9829d4ab047f639d0c7a323583b0778487e26cc8efaf0a90e49526d4d9fb7f228eaa0cded59d69ca5f825c4741e5b700bd74b9a7e1a5af488087b5e9510548ac5f9d4f001962e9162e11090adc445eac62baff6310048d8b286a16f4f053943b4c752f6b542cedd916fd6ccc34817c660ac0924145dfa0338dad0084a8d579e89dbfc32c497ceb4de6b7f66072a5d3cd861c961347ab0e5fdc903cb35a964af6de9e713955d90e6102b6be0a987189922873988b8fbb76dab5f814cf96fdb59202f99a0d34ab4ccedb68b28aea27a2daab9c9f8b4912d652796ddd080c47b70e81e007df7d34c46ffb4e4bc63235bf4388cdfe687f7a61a74e71548feb62b4a739c2e02359192fc117c92ac5f12a47d7a3151308cb98c80569af1c61e23e7f28395925431286debfec5865c8bd3cf8e9ef6d0b3157d57b20424e13d2915ca107f42236f09d3412a62cbbd9e4f386402d71075110adea8bba29f4d677f348f0d4b1719165828e0e98e62b16df6e6c3fc0b5ac65a21469d7b1c82a0918664e4dbe4a42ea4afc38bfb477ff8350e1a079981b193bcb2bf9bbcdc39ddf90c1f07859dcf702c32c9955af4c3e1a5388de59f7465072097a369f746f3c82b1d204133fedf3bf1f4ace7ab3eaf8dfb93da5a21e514411f3c26ceb703c3b4b2417b710f3c8c73cef5170c5d19d3e181935ba1653279232d4832676294756a181f8661d4e5f60a89b59f14127628c3464a86b590b8614fe19ab2582bf54b2f837c507123024e07923bcc5aa37973cba155beeb239ea8234804f5ac3c82dd9e44b79ce7e8b78ff4e1f7a1ec9bf557aab7e330b658a4e585b868516a862e105298637a5a2d84755b25580017798245c3a6a386add78b71e4a81148d1ef32e0cffe0caed8ebe6ac28b3b3f8e24273424615afe1d5efb22f3facbf09b71403c2dd8e4663a5cd9355a19452e051fd9eedca8abe510aceb04cc5a12c7ba148e0953230ab71d09966c75cbc626581fa671dc08c7435e6a2e00704504eefb020860fb8d789ea79e4fce14605b60adaac238229bbdd9fb7497106eda849a5fc0a261d9f162bf70b0f4e198cb88bd918788eff55149f3820845b1e7fc3846d0dbf71f774bcb626dfd5c05102222c4f7f45e18074dd26f77d1bddcc47bb236932823a57434c66d02ed3419e261b1c503babf1669902671291207497757cd99ebc60830a9fa96e0f7a29f5d3e7bb49fb4d7b02c1bdb2ab07f8d45fd5a5e7dfe4816d13740ce2c98b79306d1dc616d17e34cfb5b93c5ad2db3d76e2b75f3e300aabe767547f702b7af25532d59f487f003419dfc0612dc7aa657dde0866ab73fb9cf39dec5549bf4d5e55e5ca621eca0d652faa920229176f6ddcf42d217e03ffe09d7c08ae46f15810ca470eacb313daeaf7a07f44c6f29184fa968f9df8c451c7b6e6007c36dae5245419e1321f71defff1cd07c2d7a4109780745539235bf5d05f6b562a7335e16c1e64970f746f6b194b6ffff308971147c5e901703e48fa0682099533b6589807baa7509a3cd330c64b561bd9d6a80835604c65cc6e4d83b2d0205c7fb989c9e776167f202b1cedb133894651e930239f328b44b4826da12642c732453a021c2afa236668e1b43a88fbe1df1662a0b5af18d99166ca0c7dbbb6ad53fef3f7b9c4f405d79956df1ca6a03e110b63a0e2d2973ab78e089ae986632a3159c4a721d8eaf2392ebfac8b751f396093f8d06c24e9c6ca7374669cfc981079900fd7ef5a54881ce0d576e54253dfc31e5d28c748c3fa86ba6cbdcbeeeeba7e0d8a29975e174f3724f0d9164f66a4b08b3a87e4b3d5a1df835e9b1226e086ff386d4975aafd48d1129c89ddef387c2be39ea81b834c2668e75e631f8c9f5a27d67df210f643a63006264922a62a053251105510e178c094f8e3e2cf3aed68f53205ceb317847ad91d584766fc40cf76711ef1a94e42959642a49929ac232bfd03071010f95f838d66e1d2ece708c33c106b31803708c66a228c4ae6bcc252242c7d32cf89f1b6ffac821a4728ac1c4755660688da388b7b5372f59c7d2aaaddbb79721a0bc86a2272d703e7658924e7e304cc9ff638c098210ea32df9899445435c83499d92078de044f29a6cb1514dd462ea15663c0be75a11df21cca9a85f3349d81a1d7a9999cf3a6df2e5ceae1babd4358f153c20b6e397ec7609ed52f9fa4a87e63a999f03fd4d6c0042d17289284fdcb6519e2a694f169b697a6c402a72d4f7b9e5ca5bd21cfb394d162c1e9feec90e760a8cd24429cb7811d98d2a82692cf67a65fb59f3b46ac2e1c007f52acdd61665348cdab4fc794d18c66797fae9a6005ec8b2daa50ab210b2751b221e069b1957d5e361f4ccafdbd86ff09ef6f26903393adf5961a6f5bc113212dd2bfbd485682fd556836efa06cd1749099b00de2fedfff0b8aca6705fa6cf0671fcc7eb9d124c970d1fa5df79292a2cbc6922e621f79a199e2879d6482b28da69aba7e312336177236e57ecc2ae5119055041cc1caf096c13a43e3a2e86c10bbbb3c3d32babb2573227a16923f4550fff07e052f50e7907764e758f226295434ee5f1cab7acd00163127864e96898534b0398003e370ad9ba0b3fc5fbddbd5a305f889b9b407de051153fdac6273bd0aa2c2a18606d8e5ac4f63503e1c8777d3eb5bcf010a94f07dadd524f7ce9c247072d98174cc0637c5ded5085563d50", @ANYRES64=r1], 0x0) [ 740.336661][ T2845] usb 3-1: new full-speed USB device number 115 using dummy_hcd 09:50:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2004c004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", '\x00', "7ee51430da3f51b3"}, 0x28) [ 740.683111][T18872] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 740.753770][ T2845] usb 3-1: not running at top speed; connect to a high speed hub [ 740.783038][ T2844] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 740.833203][ T2845] usb 3-1: config 1 interface 0 has no altsetting 0 [ 740.873122][ T2845] usb 3-1: language id specifier not provided by device, defaulting to English [ 740.972931][T18872] usb 5-1: Using ep0 maxpacket: 8 [ 741.003045][ T2845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.016457][ T2845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.024717][ T2845] usb 3-1: Product: syz [ 741.028940][ T2845] usb 3-1: Manufacturer: ᡊ봊䚫匒갏렛딘勹 [ 741.040055][ T2845] usb 3-1: SerialNumber: syz 09:50:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xa00000000000000) [ 741.064685][ T2844] usb 4-1: device descriptor read/64, error 18 [ 741.253037][T18872] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 741.267193][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.277007][T18872] usb 5-1: Product: syz [ 741.281220][T18872] usb 5-1: Manufacturer: syz [ 741.287260][T18872] usb 5-1: SerialNumber: syz 09:50:32 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'macsec0\x00', 0x4000}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96d7000000aaaaaaaaaa20fe00450000fb610000000067907800000010e0000001"], 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 741.304503][T18872] usb 5-1: config 0 descriptor?? [ 741.353709][T18872] hub 5-1:0.0: bad descriptor, ignoring hub [ 741.359795][T18872] hub: probe of 5-1:0.0 failed with error -5 [ 741.384925][T18872] sierra 5-1:0.0: Sierra USB modem converter detected 09:50:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) [ 741.443148][ T2845] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 741.453178][ T2844] usb 4-1: device descriptor read/64, error 18 [ 741.459731][ T2845] usb 3-1: USB disconnect, device number 115 09:50:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000440), 0x100000000000005f) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) [ 741.580411][T18872] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 741.623939][T18872] usb 5-1: USB disconnect, device number 119 [ 741.639018][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 741.650350][T18872] sierra 5-1:0.0: device disconnected [ 741.732900][ T2844] usb 4-1: new high-speed USB device number 31 using dummy_hcd 09:50:33 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@private}}, 0xe8) 09:50:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 09:50:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0xe00000000000000) [ 742.002997][ T2844] usb 4-1: device descriptor read/64, error 18 09:50:33 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3fff}, 0xc) 09:50:33 executing program 4: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000000)={0x2c35, 0x7, 0x3, 0xb0b0b0b0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x103400, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r10, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x48000) 09:50:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000340)={0x3, 0x3}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @private, @multicast1}}}}}}, 0x26) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000300)=ANY=[@ANYRES16=r8], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) clone(0x2000, &(0x7f0000000180)="91f6fa5b54336adcf670cde7595fe36374e227a8f15773a01d8834886e66b50337003f487f8efe8f6dd85878491c6cc42641ed9fdc9cdea030eff3fecba3e3135de6a477d511e1", &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)="82591fa1587e2607e9db3082c321c909f71c850a4ad7792e4439d5c4b7ffd07c500ad45985159926fa1e9905cdd215ad80dd90324b69b21789e055d3841d34dd1bc3f41f0790f9970a856d3f22b034962f2350dceefb5dd6df2c327894d6fc3384823b148f41b55a387fa0893996f1cc7ffe309a2bd2bf47374687dbdece932deaf927ec999e2cc84ee3d243f5c4059b58b28468172b0ef96d4c63e9be2386e81efa22a6abc51dd04ed0057d7d57954fe9fb4b1fa16dc6") [ 742.392797][ T2844] usb 4-1: device descriptor read/64, error 18 [ 742.533073][ T2844] usb usb4-port1: attempt power cycle [ 742.702755][ T23] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 742.972705][ T23] usb 5-1: device descriptor read/64, error 18 [ 743.251565][ T2844] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 743.362657][ T23] usb 5-1: device descriptor read/64, error 18 09:50:34 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x280003, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000140)=""/87, &(0x7f00000001c0)=0x57) 09:50:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r5, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r4, 0x0) 09:50:34 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) 09:50:34 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x1000000000000000) 09:50:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000000009f96d3000000aaaa921dc24e4e9832855f6bc25ef89320aaaaaa00080045000014000000e4ff66907800000000e0000001"], 0x26) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r6, 0x3, &(0x7f00000000c0)={&(0x7f0000000180)="443a49b66a15b5aa9b862a44f85d7b30626fb5c185ac77f4458305720614fd4587bf626202aac89746b6a68969195056e8f468d8735eeff4f88b88f1dd649120c9e493ff8b6aa7b88db34379af186c362940a6d806aa11be30b8ed3bc286d4ba8dfe6c9c2f91960b6b7a94d836fe070dbdf97226ab6bedb5bb93193b646888458ca0f5d37addad414eed138f2e529be6", 0x90}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 743.433218][ T2844] usb 4-1: device descriptor read/8, error -61 [ 743.632584][ T23] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 743.643840][ T2844] usb 4-1: device descriptor read/8, error -71 09:50:35 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) 09:50:35 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) 09:50:35 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) [ 743.902649][ T23] usb 5-1: device descriptor read/64, error 18 09:50:35 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:35 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 744.132594][ T2844] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 744.222762][ T2844] usb 4-1: Using ep0 maxpacket: 8 [ 744.292587][ T23] usb 5-1: device descriptor read/64, error 18 [ 744.423599][ T23] usb usb5-port1: attempt power cycle [ 744.503342][ T2844] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 744.552789][ T2844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.560810][ T2844] usb 4-1: Product: syz [ 744.602982][ T2844] usb 4-1: Manufacturer: syz [ 744.607602][ T2844] usb 4-1: SerialNumber: syz [ 744.614563][ T2844] usb 4-1: config 0 descriptor?? [ 744.653715][ T2844] hub 4-1:0.0: bad descriptor, ignoring hub [ 744.659832][ T2844] hub: probe of 4-1:0.0 failed with error -5 [ 744.676010][ T2844] sierra 4-1:0.0: Sierra USB modem converter detected [ 744.864092][ T2844] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 744.903298][ T2844] usb 4-1: USB disconnect, device number 33 [ 744.912033][ T2844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 744.927601][ T2844] sierra 4-1:0.0: device disconnected [ 745.132516][ T23] usb 5-1: new full-speed USB device number 122 using dummy_hcd 09:50:36 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xa00, 0x20}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x7, 0x3, 0x5, 0x9}, 0x10) 09:50:36 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 745.282483][ T23] usb 5-1: device descriptor read/8, error -71 09:50:36 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:50:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000340)=""/212, 0xd4}, {0x0}], 0x2) recvfrom$inet(r3, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 09:50:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000140)={@local, @private=0xa010102}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @generic={{0x1b, 0x4, 0x0, 0x0, 0x8b, 0x68, 0x0, 0x0, 0x67, 0x0, @private, @multicast1, {[@noop, @noop, @timestamp={0x44, 0xc, 0xe0, 0x0, 0x1, [0x7, 0xdaec]}, @rr={0x7, 0x7, 0x98, [@broadcast]}, @lsrr={0x83, 0x7, 0x8f, [@private=0xa010101]}, @timestamp={0x44, 0xc, 0xc, 0x0, 0xb, [0xf6, 0x7]}, @timestamp_addr={0x44, 0x1c, 0xf2, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20}]}, @lsrr={0x83, 0x13, 0x2f, [@dev={0xac, 0x14, 0x14, 0x21}, @loopback, @broadcast, @multicast1]}]}}, "11d8e2eb93432452481765e65848d6be6e7e499459a3170f1dc8187bd88e12"}}}}}, 0x9d) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) splice(r6, 0x0, r9, 0x0, 0x5, 0xe) 09:50:36 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:36 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x1410000000000000) 09:50:37 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 745.502556][ T23] usb 5-1: device descriptor read/8, error -71 09:50:37 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:37 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:37 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009ed7f6bf279d8575dd2ff7f05fb92100c5ae6c14a8467816e96d0af288a433a3b7cb079fefed747"], 0x0) 09:50:37 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 746.006367][ T23] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 746.107552][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 746.283645][T18872] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 746.392764][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 746.408564][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.450681][ T23] usb 5-1: Product: syz [ 746.475420][ T23] usb 5-1: Manufacturer: syz [ 746.484131][ T23] usb 5-1: SerialNumber: syz [ 746.490418][ T23] usb 5-1: config 0 descriptor?? [ 746.538831][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 746.552439][T18872] usb 4-1: Using ep0 maxpacket: 8 [ 746.557663][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 746.572978][ T23] sierra 5-1:0.0: Sierra USB modem converter detected [ 746.745156][T27380] device bridge10 entered promiscuous mode [ 746.755728][T27380] bridge10: port 1(bridge_slave_0) entered blocking state [ 746.763029][T27380] bridge10: port 1(bridge_slave_0) entered disabled state [ 746.770712][T27380] device bridge_slave_0 entered promiscuous mode [ 746.779397][T27380] bridge10: port 1(bridge_slave_0) entered blocking state [ 746.786653][T27380] bridge10: port 1(bridge_slave_0) entered forwarding state [ 746.816624][ T23] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 746.857109][ T23] usb 5-1: USB disconnect, device number 123 [ 746.865689][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 746.873833][T18872] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 746.880343][ T23] sierra 5-1:0.0: device disconnected [ 746.901442][T18872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.915377][T18872] usb 4-1: Product: syz [ 746.921107][T18872] usb 4-1: Manufacturer: syz [ 746.930169][T18872] usb 4-1: SerialNumber: syz [ 746.940886][T18872] usb 4-1: config 0 descriptor?? [ 747.222807][T18872] hub 4-1:0.0: bad descriptor, ignoring hub [ 747.228898][T18872] hub: probe of 4-1:0.0 failed with error -5 [ 747.240871][T18872] sierra 4-1:0.0: Sierra USB modem converter detected [ 747.276442][T18872] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 747.314094][T18872] usb 4-1: USB disconnect, device number 34 [ 747.332294][T18872] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 747.343470][T18872] sierra 4-1:0.0: device disconnected [ 747.572212][ T23] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 747.822216][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 748.102223][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 748.111353][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.120185][ T23] usb 5-1: Product: syz [ 748.124886][ T23] usb 5-1: Manufacturer: syz [ 748.129467][ T23] usb 5-1: SerialNumber: syz [ 748.139489][ T23] usb 5-1: config 0 descriptor?? [ 748.183319][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 748.189311][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 748.201513][ T23] sierra 5-1:0.0: Sierra USB modem converter detected 09:50:39 executing program 2: socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x3}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc}]}, 0x34}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) 09:50:39 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:39 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x2000000000000000) 09:50:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000340)=""/212, 0xd4}], 0x1) recvfrom$inet(r6, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r6, 0x0) shutdown(r4, 0x0) 09:50:39 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="520100ed51b609021200010010000009040000000900"/33], 0x0) 09:50:39 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="5201000052b6850899548aa91122689d090102030109021200010000000009040038bef769aeb873a3acc72063ab9d6a8590aabd6c412dc7d8ac683657d388801146b598f5d80b3d75fbd1fa0ee0b09c8ed75d10474d49332b901f8a82e8359cde4c058bfac3ad68a4b5d09af2997b1dcaf646afa499b57df2975049e833252c8c1c2d30bce3783223de51599572771109f310bad52eb659"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r7, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b146588c1b6a238e3c4ad8aa"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@mcast1, 0x80, r7}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x800, 0x0) syncfs(r0) [ 748.325782][ T23] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 09:50:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) [ 748.396002][ T23] usb 5-1: USB disconnect, device number 124 [ 748.428662][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 09:50:40 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 748.472611][ T23] sierra 5-1:0.0: device disconnected 09:50:40 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 748.697293][ T2841] usb 4-1: new high-speed USB device number 35 using dummy_hcd 09:50:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 748.852031][ T23] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 748.919068][ T29] audit: type=1800 audit(1593769840.424:46): pid=27506 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16001 res=0 09:50:40 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 748.992099][ T2841] usb 4-1: device descriptor read/64, error 18 09:50:40 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) keyctl$invalidate(0x15, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) [ 749.108664][ T23] usb 5-1: Using ep0 maxpacket: 8 09:50:40 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x380a000000000000) 09:50:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) [ 749.272191][ T23] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 749.280337][ T23] usb 5-1: can't read configurations, error -61 [ 749.382070][ T2841] usb 4-1: device descriptor read/64, error 18 [ 749.432002][ T23] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 749.651903][ T2841] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 749.672588][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 749.832149][ T23] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 749.839898][ T23] usb 5-1: can't read configurations, error -61 [ 749.847482][ T23] usb usb5-port1: attempt power cycle [ 749.921875][ T2841] usb 4-1: device descriptor read/64, error 18 [ 750.311853][ T2841] usb 4-1: device descriptor read/64, error 18 [ 750.434247][ T2841] usb usb4-port1: attempt power cycle [ 750.561812][ T23] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 750.652351][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 750.812113][ T23] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 750.819819][ T23] usb 5-1: can't read configurations, error -61 [ 750.972202][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 751.061857][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 751.141802][ T2841] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 751.221795][ T23] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 751.229371][ T23] usb 5-1: can't read configurations, error -61 [ 751.239983][ T2841] usb 4-1: Invalid ep0 maxpacket: 2 [ 751.245617][ T23] usb usb5-port1: unable to enumerate USB device 09:50:42 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 09:50:42 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d090102030109021200010000090400000009"], 0x0) 09:50:42 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:42 executing program 0: 09:50:42 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) keyctl$invalidate(0x15, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) 09:50:42 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x3f00000000000000) [ 751.391786][ T2841] usb 4-1: new high-speed USB device number 38 using dummy_hcd 09:50:43 executing program 0: 09:50:43 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:43 executing program 0: 09:50:43 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) keyctl$invalidate(0x15, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) 09:50:43 executing program 0: 09:50:43 executing program 0: [ 751.901702][ T2841] usb 4-1: device not accepting address 38, error -71 [ 751.901714][T18872] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 751.916151][ T2841] usb usb4-port1: unable to enumerate USB device [ 752.171659][T18872] usb 5-1: Using ep0 maxpacket: 8 [ 752.271733][ T2841] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 752.301686][T18872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.311923][T18872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 752.502438][T18872] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 752.511593][ T2841] usb 4-1: Using ep0 maxpacket: 8 [ 752.516647][T18872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.524890][T18872] usb 5-1: Product: syz [ 752.529059][T18872] usb 5-1: Manufacturer: syz [ 752.533715][T18872] usb 5-1: SerialNumber: syz [ 752.542105][T18872] usb 5-1: config 0 descriptor?? [ 752.791640][ T2841] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 752.801365][ T2841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.804888][ T3842] usb 5-1: USB disconnect, device number 3 [ 752.825900][ T2841] usb 4-1: Product: syz [ 752.830090][ T2841] usb 4-1: Manufacturer: syz [ 752.840576][ T2841] usb 4-1: SerialNumber: syz [ 752.854085][ T2841] usb 4-1: config 0 descriptor?? [ 752.892319][ T2841] hub 4-1:0.0: bad descriptor, ignoring hub [ 752.898309][ T2841] hub: probe of 4-1:0.0 failed with error -5 [ 752.909817][ T2841] sierra 4-1:0.0: Sierra USB modem converter detected [ 753.107876][ T2841] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 753.142220][ T2841] usb 4-1: USB disconnect, device number 39 [ 753.150280][ T2841] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 753.165836][ T2841] sierra 4-1:0.0: device disconnected 09:50:45 executing program 0: [ 753.581465][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 753.841517][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 753.961690][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.971816][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 754.131654][ T23] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 754.140746][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.148973][ T23] usb 5-1: Product: syz [ 754.153276][ T23] usb 5-1: Manufacturer: syz [ 754.157910][ T23] usb 5-1: SerialNumber: syz [ 754.168585][ T23] usb 5-1: config 0 descriptor?? 09:50:45 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="5201000052b68508991122689d090102030109021200010000000009040000000980733268f638bd75f46bf9ab98b35161c1d7451357a9f5e898d9e26b3672651472aa008c94eb1d391e38a4716cb4cc8e4d1b39000fcac3ac40a0948008cb14dcf05891afdbf95c51e1db"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'netpci0\x00', @remote}) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000100)={0x0, 0x2, 0x0, [{0x51, 0x100000001, 0x10001, 0x17, 0xb3, 0x2, 0x9}, {0x3, 0x5, 0x10001, 0x1, 0x6, 0xff, 0xe8}]}) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x17c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49fd1457}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x104, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba5ba04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eb1ff23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd471672}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24ba8bab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c477a84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c2e016c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ea67f9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43cc0787}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b9fc032}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14d217b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1caaaf2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cb064eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65d25937}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x17c}}, 0x4040000) 09:50:45 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) 09:50:45 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x4000000000000000) 09:50:45 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) keyctl$invalidate(0x15, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) 09:50:45 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0xa0001, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x100}) preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x6}, 0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun\x00', 0x401) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052b68508991122689d0901020301090212000100000000090400000009"], 0x0) 09:50:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0xc, 0x5, [{}]}}, @TCA_BPF_CLASSID={0x8}]}}]}, 0x4c}}, 0x0) [ 754.421827][ T2845] usb 5-1: USB disconnect, device number 4 09:50:46 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 754.522571][T27625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.577647][T27635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:50:46 executing program 2: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_mount_image$afs(&(0x7f0000000140)='afs\x00', &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0xc, 0x5, [{}]}}, @TCA_BPF_CLASSID={0x8}]}}]}, 0x4c}}, 0x0) 09:50:46 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 754.824903][T27642] kAFS: unparsable volume name [ 754.841589][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd 09:50:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x81ff, 0x0) [ 754.886774][T27645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.912334][ T2845] usb 5-1: new high-speed USB device number 5 using dummy_hcd 09:50:46 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3ffff}, 0xc) [ 755.091469][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 755.161304][ T2845] usb 5-1: Using ep0 maxpacket: 8 [ 755.371378][ T23] usb 4-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 755.380517][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.389070][ T23] usb 4-1: Product: syz [ 755.393406][ T23] usb 4-1: Manufacturer: syz [ 755.397990][ T23] usb 4-1: SerialNumber: syz [ 755.408376][ T23] usb 4-1: config 0 descriptor?? [ 755.441507][ T2845] usb 5-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice= 9.9d [ 755.450540][ T2845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.459464][ T23] hub 4-1:0.0: bad descriptor, ignoring hub [ 755.468440][ T2845] usb 5-1: Product: syz [ 755.473479][ T23] hub: probe of 4-1:0.0 failed with error -5 [ 755.479896][ T23] sierra 4-1:0.0: Sierra USB modem converter detected [ 755.487333][ T2845] usb 5-1: Manufacturer: syz [ 755.493005][ T2845] usb 5-1: SerialNumber: syz [ 755.506679][ T2845] usb 5-1: config 0 descriptor?? [ 755.661514][T27618] ================================================================== [ 755.669973][T27618] BUG: KASAN: use-after-free in sock_def_write_space+0x609/0x630 [ 755.677669][T27618] Read of size 8 at addr ffff88804c88d080 by task syz-executor.3/27618 [ 755.685879][T27618] [ 755.688192][T27618] CPU: 1 PID: 27618 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 755.696836][T27618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.706871][T27618] Call Trace: [ 755.710145][T27618] dump_stack+0x18f/0x20d [ 755.714459][T27618] ? sock_def_write_space+0x609/0x630 [ 755.719810][T27618] ? sock_def_write_space+0x609/0x630 [ 755.725161][T27618] print_address_description.constprop.0.cold+0xae/0x436 [ 755.732273][T27618] ? lockdep_hardirqs_off+0x66/0xa0 [ 755.737499][T27618] ? vprintk_func+0x97/0x1a6 [ 755.742068][T27618] ? sock_def_write_space+0x609/0x630 [ 755.747418][T27618] kasan_report.cold+0x1f/0x37 [ 755.752177][T27618] ? sock_def_write_space+0x609/0x630 [ 755.757534][T27618] sock_def_write_space+0x609/0x630 [ 755.762708][T27618] ? kfree_skb+0x7d/0x100 [ 755.767047][T27618] ? qrtr_tun_poll+0xf0/0xf0 [ 755.771612][T27618] sock_wfree+0x1cc/0x240 [ 755.775918][T27618] ? __sk_receive_skb+0x830/0x830 [ 755.780920][T27618] skb_release_head_state+0x9f/0x250 [ 755.786182][T27618] kfree_skb.part.0+0x89/0x350 [ 755.791020][T27618] kfree_skb+0x7d/0x100 [ 755.795162][T27618] skb_queue_purge+0x14/0x30 [ 755.799729][T27618] qrtr_tun_release+0x40/0x60 [ 755.804483][T27618] __fput+0x33c/0x880 [ 755.808446][T27618] task_work_run+0xdd/0x190 [ 755.813061][T27618] __prepare_exit_to_usermode+0x1e9/0x1f0 [ 755.818769][T27618] do_syscall_64+0x6c/0xe0 [ 755.823190][T27618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 755.829070][T27618] RIP: 0033:0x416721 [ 755.832935][T27618] Code: Bad RIP value. [ 755.836976][T27618] RSP: 002b:00007ffeca307820 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 755.845365][T27618] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416721 [ 755.853324][T27618] RDX: 0000000000000000 RSI: 00000000000005f1 RDI: 0000000000000006 [ 755.861272][T27618] RBP: 0000000000000001 R08: 0000000078d1c5f1 R09: 0000000078d1c5f5 [ 755.869217][T27618] R10: 00007ffeca307910 R11: 0000000000000293 R12: 0000000000790e98 [ 755.877168][T27618] R13: 00000000000b8fa5 R14: ffffffffffffffff R15: 000000000078bf0c [ 755.885122][T27618] [ 755.887428][T27618] Allocated by task 27639: [ 755.891823][T27618] save_stack+0x1b/0x40 [ 755.895964][T27618] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 755.901569][T27618] kmem_cache_alloc+0x12c/0x3b0 [ 755.906393][T27618] sock_alloc_inode+0x18/0x1c0 [ 755.911145][T27618] alloc_inode+0x61/0x230 [ 755.915456][T27618] new_inode_pseudo+0x14/0xe0 [ 755.920107][T27618] sock_alloc+0x3c/0x260 [ 755.924324][T27618] __sock_create+0xb9/0x740 [ 755.928802][T27618] __sys_socket+0xef/0x200 [ 755.933192][T27618] __x64_sys_socket+0x6f/0xb0 [ 755.937851][T27618] do_syscall_64+0x60/0xe0 [ 755.942258][T27618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 755.948128][T27618] [ 755.950519][T27618] Freed by task 27639: [ 755.954573][T27618] save_stack+0x1b/0x40 [ 755.958703][T27618] __kasan_slab_free+0xf5/0x140 [ 755.963528][T27618] kmem_cache_free+0x7f/0x310 [ 755.968177][T27618] i_callback+0x3f/0x70 [ 755.972309][T27618] rcu_core+0x5c7/0x1160 [ 755.976525][T27618] __do_softirq+0x34c/0xa60 [ 755.980999][T27618] [ 755.983355][T27618] The buggy address belongs to the object at ffff88804c88d000 [ 755.983355][T27618] which belongs to the cache sock_inode_cache of size 1216 [ 755.997914][T27618] The buggy address is located 128 bytes inside of [ 755.997914][T27618] 1216-byte region [ffff88804c88d000, ffff88804c88d4c0) [ 756.011239][T27618] The buggy address belongs to the page: [ 756.016846][T27618] page:ffffea0001322340 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804c88dffd [ 756.027223][T27618] flags: 0xfffe0000000200(slab) [ 756.032050][T27618] raw: 00fffe0000000200 ffffea0000e5a748 ffffea0000e59308 ffff88821b77e8c0 [ 756.040619][T27618] raw: ffff88804c88dffd ffff88804c88d000 0000000100000003 0000000000000000 [ 756.049174][T27618] page dumped because: kasan: bad access detected [ 756.055562][T27618] [ 756.057875][T27618] Memory state around the buggy address: [ 756.063480][T27618] ffff88804c88cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 756.071513][T27618] ffff88804c88d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 756.079548][T27618] >ffff88804c88d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 756.087678][T27618] ^ [ 756.091734][T27618] ffff88804c88d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 756.099865][T27618] ffff88804c88d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 756.107899][T27618] ================================================================== [ 756.115935][T27618] Disabling lock debugging due to kernel taint [ 756.133396][T27618] Kernel panic - not syncing: panic_on_warn set ... [ 756.140107][T27618] CPU: 1 PID: 27618 Comm: syz-executor.3 Tainted: G B 5.8.0-rc3-syzkaller #0 [ 756.150153][T27618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.160194][T27618] Call Trace: [ 756.163477][T27618] dump_stack+0x18f/0x20d [ 756.167809][T27618] ? sock_def_write_space+0x5b0/0x630 [ 756.173213][T27618] panic+0x2e3/0x75c [ 756.177086][T27618] ? __warn_printk+0xf3/0xf3 [ 756.181650][T27618] ? preempt_schedule_common+0x59/0xc0 [ 756.187083][T27618] ? sock_def_write_space+0x609/0x630 [ 756.192517][T27618] ? preempt_schedule_thunk+0x16/0x18 [ 756.197864][T27618] ? trace_hardirqs_on+0x55/0x220 [ 756.202859][T27618] ? sock_def_write_space+0x609/0x630 [ 756.208202][T27618] ? sock_def_write_space+0x609/0x630 [ 756.213545][T27618] end_report+0x4d/0x53 [ 756.217673][T27618] kasan_report.cold+0xd/0x37 [ 756.222322][T27618] ? sock_def_write_space+0x609/0x630 [ 756.227664][T27618] sock_def_write_space+0x609/0x630 [ 756.232832][T27618] ? kfree_skb+0x7d/0x100 [ 756.237143][T27618] ? qrtr_tun_poll+0xf0/0xf0 [ 756.241712][T27618] sock_wfree+0x1cc/0x240 [ 756.246014][T27618] ? __sk_receive_skb+0x830/0x830 [ 756.251016][T27618] skb_release_head_state+0x9f/0x250 [ 756.256274][T27618] kfree_skb.part.0+0x89/0x350 [ 756.261009][T27618] kfree_skb+0x7d/0x100 [ 756.265137][T27618] skb_queue_purge+0x14/0x30 [ 756.269700][T27618] qrtr_tun_release+0x40/0x60 [ 756.274353][T27618] __fput+0x33c/0x880 [ 756.278308][T27618] task_work_run+0xdd/0x190 [ 756.282784][T27618] __prepare_exit_to_usermode+0x1e9/0x1f0 [ 756.288485][T27618] do_syscall_64+0x6c/0xe0 [ 756.292968][T27618] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 756.298832][T27618] RIP: 0033:0x416721 [ 756.302694][T27618] Code: Bad RIP value. [ 756.306734][T27618] RSP: 002b:00007ffeca307820 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 756.315114][T27618] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416721 [ 756.323057][T27618] RDX: 0000000000000000 RSI: 00000000000005f1 RDI: 0000000000000006 [ 756.331001][T27618] RBP: 0000000000000001 R08: 0000000078d1c5f1 R09: 0000000078d1c5f5 [ 756.338955][T27618] R10: 00007ffeca307910 R11: 0000000000000293 R12: 0000000000790e98 [ 756.346905][T27618] R13: 00000000000b8fa5 R14: ffffffffffffffff R15: 000000000078bf0c [ 756.356072][T27618] Kernel Offset: disabled [ 756.360390][T27618] Rebooting in 86400 seconds..