00:01:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x48}, 0x0) 00:01:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 00:01:44 executing program 5: syz_clone3(&(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001880), &(0x7f00000018c0), {0x1f}, &(0x7f0000001900)=""/207, 0xcf, 0x0, &(0x7f0000001a40)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) 00:01:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xc75) 00:01:44 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0xbe0, 0xffffffff, 0x0, 0xa48, 0x0, 0xffffffff, 0xffffffff, 0xb48, 0xb48, 0xb48, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@multicast2, @empty, 0x0, 0xff, 'ip_vti0\x00', 'sit0\x00', {0xff}, {}, 0x5c, 0x6, 0x2a}, 0x0, 0x850, 0x978, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x20}, {0xa44, 0x3}, {0x9, 0x1}, {0xfffff800, 0x2}, {0x0, 0x2}, {0x1ff, 0x3}, {0x8001, 0x2}, {0x3f}, {0x0, 0x3}, {0xfcbc, 0x3}, {0x4}], [{0xffffffff, 0x10000}, {0x7fffffff, 0x5}, {0x3ff, 0x10a}, {0x4, 0x5}, {0x0, 0x80}, {0x613a, 0x5}, {0x1, 0x8001}, {0x9, 0x1}, {0x13, 0x3}, {0xffff8001, 0xce2}, {0x4, 0x9}], 0x2, 0x1}, {[{0x6, 0x3}, {0x7}, {0x8, 0x3}, {0x6, 0x2}, {0x6, 0x3}, {0x9ef, 0x2}, {0x4, 0x2}, {0x2000, 0x1}, {0xd08}, {0x2, 0x1}, {0x29cd, 0x3}], [{0x6, 0xfd}, {0x9, 0x80}, {0x6, 0x6}, {0x5, 0x3}, {0x6, 0x8}, {0x401, 0x1}, {0x80000001, 0x9}, {0xf369, 0x8}, {0x7, 0x40}, {}, {0x0, 0x1}], 0x9, 0x6}, {[{0x5, 0x3}, {0x10001, 0x2}, {0x400, 0x3}, {0x8, 0x3}, {0x40, 0x1}, {0x6, 0x1}, {0x88, 0x3}, {0x1ff}, {0x9, 0x1}, {0xffffffff}, {0x62b, 0x3}], [{0x6, 0x3}, {0x1}, {0x2, 0x2}, {0x6}, {0x5, 0xf011}, {0x0, 0xdfa6}, {0x7, 0x364}, {0x92, 0x80000000}, {0xbe9, 0x5}, {0x7, 0x10001}, {0x9, 0xcd7}], 0x1, 0x5}, {[{0xfffffffa, 0x1}, {0x40, 0x3}, {}, {0x9}, {0x7d0, 0x3}, {0x6598, 0x3}, {0x101, 0x1}, {0x400, 0x2}, {0x4, 0x3}, {}, {0x1d, 0x3}], [{0x9, 0x1}, {0x401, 0x8}, {0x2, 0xffb6}, {0x3, 0x36a91206}, {0xfffff4b3, 0x40}, {0xfffffffc, 0x9}, {0x7fff, 0x8}, {0xba, 0x80000000}, {0x80000000, 0x676c}, {0x26b0, 0xfffffbff}, {0x1000, 0x9}], 0x7, 0x1}, {[{0x3ff}, {0x3f}, {0x0, 0x1}, {0x6, 0x1}, {0xd9}, {0x5, 0x1}, {0x4, 0x1}, {0x10000000}, {0x800, 0x3}, {0x0, 0x3}, {0x10001}], [{0x8, 0x3}, {0x1ff, 0x6}, {0xff, 0xfff}, {0x7fff, 0x9}, {0x7, 0xff}, {0x1, 0x7ff}, {0x86f0, 0x20}, {0x9, 0x9}, {0x101, 0x401}, {0xa3b6, 0x43c6}, {0x0, 0x1000}], 0x2, 0x4}, {[{0xf40d, 0x3}, {0x1, 0x3}, {0x7d4c}, {0x5, 0x3}, {0x1f, 0x3}, {0x7, 0x1}, {0x1ff, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x9, 0x3}], [{0x9}, {0x40, 0xf7}, {0x6, 0x40}, {0xc36, 0x7}, {0x8, 0x1}, {0xfff, 0x4}, {0x6, 0x100}, {0x2458, 0xe650}, {0x5, 0x4}, {0x8, 0x3}], 0xa, 0x1}, {[{0x101, 0x3}, {0x5, 0x1}, {0x6, 0x2}, {0x7, 0x3}, {0x4fd, 0x2}, {0x20000000, 0x3}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x100, 0x1}, {0x4, 0x1}], [{0x7, 0x400}, {0x8, 0xffff}, {0xfff, 0x1}, {0xfffffe01, 0xfffffff8}, {0x20, 0x5}, {0x6c45f445, 0x2}, {0x0, 0x1}, {0x194f, 0x101}, {0x9, 0x6}, {0x4, 0x7f}, {0x7, 0xf5}], 0x9, 0x7}, {[{0x1, 0x1}, {0x7fff, 0x3}, {0x80000001, 0x3}, {0xb72, 0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x8, 0x2}, {0xfffffffb, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x4, 0x3}], [{0xfe73, 0x1}, {0x7ff, 0x81}, {0x7, 0x4}, {0x1, 0xfffffffb}, {0xe30, 0x200}, {0x7, 0x1e}, {0x3, 0x9}, {0x0, 0x8}, {0x20, 0x4dfd}, {0x4, 0x9}, {0x9, 0x8f}], 0x0, 0x6}, {[{0x0, 0x3}], [{0x6, 0x1}, {0x1f, 0x9}, {0xffff, 0x5}, {0x200, 0x92a}, {0x923, 0x5}, {0x6, 0x9}, {0x1000, 0x2}, {0x3, 0x3}, {0x8, 0x80000001}, {0x4, 0x10001}, {0x8001, 0xfffffff9}], 0x4, 0x9}, {}, {[{0xe00000}, {0x2, 0x1}, {0x5, 0x1}, {0x1000, 0x6}, {0x6, 0x1}, {0x8, 0x1}, {0x2, 0x1}, {0x1ff, 0x3}, {0x4}, {0x2a7, 0x3}, {0x2, 0x1}]}], 0xa, 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x200, 'system_u:object_r:tmpfs_t:s0\x00'}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0x0, 'bridge_slave_0\x00', 'xfrm0\x00', {0x7f}, {}, 0x8, 0x2, 0x24}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x2, 0x6, [0x16, 0x2a, 0x33, 0x3d, 0x40, 0x25, 0x28, 0x15, 0x7, 0x84, 0x33, 0x25, 0x3e, 0xf, 0x14, 0x2b], 0x1, 0x0, 0x5}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xffff, 0x889, 0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0xf, [0xc, 0x1f, 0x3f, 0x2f, 0x18, 0x34, 0x14, 0x35, 0x2e, 0x38, 0x23, 0x33, 0x2, 0x2b, 0x18, 0x20]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001440), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:01:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x4c}, 0x0) [ 1405.126551][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1405.126597][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:01:44 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, 0x0, 0x0) 00:01:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x68}, 0x0) 00:01:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe000000) 00:01:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xc76) [ 1405.412643][ T3332] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1405.804561][ T3332] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1405.804616][ T3332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.804651][ T3332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.804679][ T3332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1405.804726][ T3332] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1405.804756][ T3332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.814120][ T3332] usb 3-1: config 0 descriptor?? [ 1406.496391][T28814] Error: Driver 'raw-gadget' is already registered, aborting... [ 1406.496405][T28814] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1406.496423][T28814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.497273][T28814] Error: Driver 'raw-gadget' is already registered, aborting... [ 1406.497285][T28814] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1406.497302][T28814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.528430][ T3332] appleir 0003:05AC:8243.00C6: item fetching failed at offset 0/1 [ 1406.528889][ T3332] appleir 0003:05AC:8243.00C6: parse failed [ 1406.528937][ T3332] appleir: probe of 0003:05AC:8243.00C6 failed with error -22 00:01:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xc0, 0x80, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x475b370d07e24f4b, 0x1f, {0x9, 0x21, 0xf000, 0x80, 0x1, {0x22, 0xef0}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x6}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0xf7, 0x2, 0x20, 0x1f}, 0x49, &(0x7f00000000c0)={0x5, 0xf, 0x49, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x9, 0xfa, 0xfff, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x9, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "b60ff205f95fe80c07193d9b2174d033"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0x0, 0x5878}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9156091507c9b5c0d2a982feaf4a3796"}, @ptm_cap={0x3}]}, 0x9, [{0x15, &(0x7f0000000280)=@string={0x15, 0x3, "14d01d490a11180c6ef405eb573db4b1c7900b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x402}}, {0xd9, &(0x7f0000000380)=@string={0xd9, 0x3, "0ccc76eeaf6488083abca98d402763f03a7499480cc9252b53d61785736d83ce04944318e3518e80df12cc366899717233abad2769f58950f78fa65132fe606d09d62d877f59ce4d9b30b5e065a152c659b48757d204eb54933af8c877ce214d82584be44d042a5c68cdc2c9deb2c8994257488691bcd1da9e04710b0462d8eb3aceb84e472cc527d8588fe428ef9513a95b834a4ba1045d011e55e756a3ec535ee4bf8d661af2e15abf355a4b5d265869396d60095cfba17e04d611e53f02b2861cedffbc087a66949efc67cc7ef911a659f0969563ec"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc0a}}, {0xac, &(0x7f00000004c0)=@string={0xac, 0x3, "869f3622d42d14eddfd31335660c9c09a27146393531112bc1cf66915421b2e48d28476a921fd199a69f81a5574ad9041293cb5cb466afaff61844fd4ad01b0557ccd9b9f328c0e2efb7ee7dccf595719d7bc5b85c1f6d47ac1f0419f2a674e95db198b47c959b7975d529b06732d421612d90105c0799ada31e853feef5c3092de33fe94021b15f766134096ce3e1ca626fe5342bfeb0bb2b20b0c3cac0de43964e7d9b9f01e2c1969b"}}, {0x3b, &(0x7f0000000580)=@string={0x3b, 0x3, "c866e8363182a80131807b8482356ce64cc61606a15713eb0615f07da6e09ffd9dc76d7887e12326fd5b00ea586a1dd877dbfb2e213144f2bf"}}, {0xfd, &(0x7f00000005c0)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x414}}]}) (async, rerun: 32) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async, rerun: 32) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x17, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x9ea}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x20, 0xff, 0x5}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x210, 0xee, 0x2, 0x1, 0x10}, 0x19, &(0x7f0000000840)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f54da2a9666f37e76fedec653ab26224"}]}, 0x4, [{0x5c, &(0x7f0000000880)=@string={0x5c, 0x3, "db17a7df6de237460df06d013ca2e7026d3be41d036bf13bc02d3d6e876bf11b453579e4c2c1758a62086afd9e892c25a36d8111796b47c14c4a2bee5cc7a81f9e20d7d6cf936a41ae8cd55ed550be6355e965e8890667513cf2"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x42a}}, {0xf0, &(0x7f0000000940)=@string={0xf0, 0x3, "3fa5eaede26c51ce061081fc221621aaa2b68956ef0f955afaf80071893282d675da2eb7b6cd96f408c15e302e17bb5978d123c232ab27397a3fcbe723e9c6f76e94ed9f8f91e63ef27bde228e53f1a19a351a583c773e51646e3bea7a7dc0e8e44148b93f081627c71d023180759be802807399d7aa2632dcb56ca74bb0a72d11d8a635c0e0faa6bb1b7fd0bb143e38985c477845ea00d2c7cacc39a560d3a3d853bafbe28a5667381c09fe8bab16e3f5eefd1c159eeb0dac6d8bb6ca5ddd92b37bf902b1f787ed951493e311ddbfcf869a8a7b9d184808595965e59a41a34ee0fd50d56d610b33c579ffe38ed7"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xc07}}]}) (rerun: 32) syz_usb_control_io$hid(r2, &(0x7f0000001580)={0x24, &(0x7f0000001440)={0x40, 0x30, 0x51, {0x51, 0xd, "16bf11ae2113a8b3218afad0c5371391f2c9f66b966f4ec2e2db13a83fab63e7458c09532b89bf429c52f1751b80a09b1703a35bb5808767d0c212981f2cd1a8b8dd5392cc194af132e68ef37677a7"}}, &(0x7f00000014c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "c97cd15a8f1301556eeb"}}, &(0x7f0000001500)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "932faa78"}]}}, &(0x7f0000001540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x1, 0x1, {0x22, 0x5df}}}}, &(0x7f00000017c0)={0x2c, &(0x7f00000015c0)={0x40, 0x5, 0x7e, "ff24765c9938fdbf2ea156620f0ef258a80aa140b04c08c38cfbb23fc951e8e5dbb76709c117e7def54849a2678b1195ff2f0dc2be9b57c5317bf177d6457ab5724bedb5bf53b07821d3f665e4f37892d2a12b16305ca0018806d7f4db0b0b9ed01dc0b12ffe868fe21d32ce04cd22a9a021c0d0a6bb88c473fc24f73685"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001700)={0x20, 0x1, 0x69, "726d9b0252086e899b6a25d02b7cb86af97a57d4fd3a7843b0fb0880119de19eaba7ca18164eb05572752622efe227165f05294a25488907aee49c720fce6f76deb21ebd7937d8075a778a377abac6cd8e4c1e32c86363f4c68d141a5dad36b7d514443782a24a40e3"}, &(0x7f0000001780)={0x20, 0x3, 0x1}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000002040)={0x24, &(0x7f0000001ec0)={0x0, 0x22, 0x8, {0x8, 0x5, "74b5572cb026"}}, &(0x7f0000001f00)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "ee6a8299b7370ed88cbb22f7f75986ce512aba6cea8716e9919dd7cf827847a0a4c5ffe243bfc51518141751f5e128a1b0fe8312503783dbb93677d82872f1fd048f068cd2d3c381c7b068674ef5fc092ba57378a9cf252527cbe9f003304406e2e1d5a7b5ce8826d34e41a668085c15042abce018e5186a0c5eb900dd"}}, &(0x7f0000001fc0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xb, "6e319af8"}, @main=@item_4={0x3, 0x0, 0x8, "3aa4f1f1"}, @global=@item_4={0x3, 0x1, 0x5, "af0efc16"}]}}, &(0x7f0000002000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xd83}}}}, &(0x7f0000002200)={0x2c, &(0x7f0000002080)={0x20, 0x31, 0x62, "25403b0ca9d316b43d7e3d94fcedfa208dd93b8308b6d3a1339558579c666d5261bcb66cba81f35eb44a058aa10d8299406f45c8e08e6d82d3bdc584b03e10afc2ff4f9e221570956b2efd95f83291ef5cf833ce37aabf946e2caa9edcc6e8c3aa8f"}, &(0x7f0000002100)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002140)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000002180)={0x20, 0x1, 0x20, "6bb0998333e71f7e439547b664dc3fbf900291d146fa74a91049d7d0bc0cbc41"}, &(0x7f00000021c0)={0x20, 0x3, 0x1, 0x12}}) (async) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) (async, rerun: 32) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000001800)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x314, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x80, 0x26, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x3, 0x43, 0x1, {0x22, 0xe77}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x13, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x7c, 0xab}}]}}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x300, 0x92, 0x3f, 0x1, 0x10, 0x1}, 0x2d, &(0x7f0000001880)=ANY=[@ANYBLOB="050f2d0002141004f2fde945d051e32154500ba82ba4825bdd13ce93d0fbb72b7fe0000000000000"], 0x3, [{0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x480a}}, {0xe4, &(0x7f0000001900)=@string={0xe4, 0x3, "d30ac78a60b8233e614487394d2ba4deaa4a34d92f7050b0dd5e0d342deeece6270f3a04d4244ddfbd6d3975f5df8eb4125b0a38f74d011eb86f2386806e7947c1077a97e5fbe3daf8bc5a9d84b84ad071c6240d2ba2251ca378e40876f58dbd06f6eb2c36566afada8f38d79c75d01b64bf556e6ee2efa3dd7e24cc434089b31a92bf31671b393360ae1ec148d3afdb23f47ede5d5820cf22fd7e9a6d0fa11b592eb5f7209fdaea634b9b1ba6fc2f8491aed49cd3598948adba4823621ff0636ae3bde443fc63350023296dbde386a0224ae6893119c0009f45b5d87f22e1df3b67"}}, {0xad, &(0x7f0000001a00)=@string={0xad, 0x3, "e1e41ad3891d7e68b45bf4fd9cdad6ec64156535f6210e9d5f3475220076f1975570faa48950f3dd86bb9b7ad4dfa1af6979b1d76aa9282f52ba3eaf737eff78fa575ec1fa8044fb5d63c4da2ef87d0cfd543a35f770f0afa55b435e793c015ab1f6e445833ee32da5301dd54bb21a874523bed65405bbfc92d1f2b2d6688c33c7a5d745d9baaa6beab66a165598d19b64c707c0bc9a94f6f818234747b83f0bda9858b849e2af2236fdfd"}}]}) (rerun: 32) syz_usb_control_io$hid(r4, &(0x7f0000001c80)={0x24, &(0x7f0000001b00)={0x20, 0x22, 0x89, {0x89, 0x7, "d9f4d12bc6756470159d0084637a8540950581416d630b46ba89b251fc815812154bc6eaffa9ed02d66d4be79a3dc1937114b4462a75cb23b37a317b6989027831e743a066ba0837d302c53695dfc03d379ec9fb7b0714a78fe81e06ea9dbd2fca4dee3d7e5cff903d1d97fc37538a483c28f799f10a86433a088f32adf8838a2dcffb92266916"}}, &(0x7f0000001bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000001c00)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0xa, "b707fc7e"}, @main=@item_4={0x3, 0x0, 0x9, "258b1818"}, @main=@item_012={0x2, 0x0, 0xb, "2ea4"}, @global=@item_4={0x3, 0x1, 0x7, "3be460ac"}, @global=@item_4={0x3, 0x1, 0x5, "5fda3d1b"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000001c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0xd9}}}}, &(0x7f0000001e80)={0x2c, &(0x7f0000001cc0)={0x20, 0xe, 0x52, "087c3ec9512869f805789fe4a46358133d971cd3efa655edcd5d73af7b19eecf3e596ce60a2bbe8a5a66b177eb6f7c1bfc9be3e23059ceb5bcd7c680f73b6ac87eceb94517f7fe022cfdf3fb8d4de7a6d993"}, &(0x7f0000001d40)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001d80)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001dc0)={0x20, 0x1, 0x78, "e3a4e18fc395b75ed678b45ec6a32f4d8c17a29899725a0324d737ea39a523f35c0efb661b106e8c398b2d991433f4001e8f2f55f7df0cbc4690fb316c1eeedb8a74b121b70c9346b493f5016ea73cd320bb5872ebff7834ff511f3bfc1bac26b676eea271045a456f6f9e9ffd01041aa169bbb9f40fc401"}, &(0x7f0000001e40)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000e40)={0x2c, &(0x7f0000000b00)={0x20, 0x1, 0x85, {0x85, 0x31, "0041fa8c7b597dec819e69cf44b0133e4d506f6a10235e0686b30c994dc374835dd1309ad1031a5802a43803eb1aeecedaa1de451a2647666f5a26fe8bdf8de492b88c5433497d44f2f6d5ab9740a701fd24688a30b2339e250702cb63c69ec00aaf72d8ba958051e364183c270e7ffd959df176df2c1552cf5d72b6736a0cc0f48c5c"}}, &(0x7f0000000bc0)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "8f5a1b48c2c59f45663e98e9550964de9ff3a3138a8a637a40ba2625cf0b80b3fa31b52ee93ae7f3c11bc8e3b764009ce26ac652efd6e9b3b2379379d11ef346a275c9b7ed657dcaf91e9a82a5259f7db26dabac18c95351debbc1d2beede3ef2211760b5da4b06c52075671b79259dc27f21c97bc5862ed409405cfe3e8c15358c835268bb685ed532469d4cfec0ee7a9a14c5f78adc69c3dbd0906e56c70411e8cb34c40f02a0d9eb3627dd0"}}, &(0x7f0000000d00)={0x0, 0xf, 0xe6, {0x5, 0xf, 0xe6, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x3, 0xfff}, @ss_container_id={0x14, 0x10, 0x4, 0xcc, "1629205add19d1981f4e04eb8bfc92d9"}, @generic={0x86, 0x10, 0x0, "7c847e7a05ac6fe7d27bba6074ccb9c5ceb24738cc3aec8021b82babe2ae43e99516c223dddc7f6bfb2d965a3694dbaf86ed2f355ba28b4d4dd8f263d4112667c8833f20766aefa39878806943057446f478c4529efdd698e513681cb3cc567711ed2cc2cc45edbfd45e17b0a161dce41bafb44726a72f2582bec5b15dfcb9890b8263"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x81, 0x0, 0x7ff, [0x0, 0xc0]}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x9, 0xf11, 0xff}, @ssp_cap={0x20, 0x10, 0xa, 0xdd, 0x5, 0x9, 0xf00, 0xa5, [0x3f0f, 0xf, 0xc0, 0x3fc0, 0x30]}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x0, 0x7f, 0x81, "781025fc", "6c05ced5"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x14, 0x4, 0x4, 0x5, 0x3, 0x4}}}, &(0x7f0000001380)={0x84, &(0x7f0000000e80)={0x20, 0x6, 0xd8, "38067989957916dd0a63b932f963277b2a81ed4d307bb1930422b169c5e8861c034c3c8919fbbe4c1107814236760a785cd9bfe5481b36987cc155facddfc9b67c76be7157df680a7726a13330b5d75e227f932ca78ff83567378d295d35052cbe1f7d01562bed80382f85c1605fdfc77a0aeaf04afb33bc0a3073f478c445cd4cabb2f886216d49b107d82a36ac1ee5235b9d933ad88d78a17bb46bdf7112d18d95dcf1959e807f2a21a540970173ad2ea38db92ce5f9d4960a28935668048dc2fa57e34334809b8302735d983e4806b939a5f35fb4f5b7"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0xe0, 0x1}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001100)={0x40, 0xb, 0x2, "bdef"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001180)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000001240)={0x40, 0x19, 0x2, "9e56"}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0x101}, &(0x7f00000012c0)={0x40, 0x1c, 0x1}, &(0x7f0000001300)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000001340)={0x40, 0x21, 0x1, 0x1}}) 00:01:46 executing program 5: request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000001280), &(0x7f00000012c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 00:01:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x6c}, 0x0) 00:01:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf000000) 00:01:46 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "d14195388b213fe2e13d9ee63fa1559d000fd1889ba69b04c2c44bdc826bc06aba5110d3f09ae4b3909d9c3aef14b23a3ce0d913d99012d6a21fa359714c71a9"}, 0x48, r0) 00:01:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe00) [ 1406.929547][T28814] Error: Driver 'raw-gadget' is already registered, aborting... [ 1406.929558][T28814] UDC core: USB Raw Gadget: driver registration failed: -16 00:01:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 00:01:46 executing program 5: clock_gettime(0x0, &(0x7f0000000300)) 00:01:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x74}, 0x0) [ 1406.929570][T28814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.929946][T28814] Error: Driver 'raw-gadget' is already registered, aborting... [ 1406.929954][T28814] UDC core: USB Raw Gadget: driver registration failed: -16 00:01:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000008c0)="c8af407592cdd5dcdecf", 0xa) 00:01:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x10000000) 00:01:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x7a}, 0x0) [ 1406.929964][T28814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.931068][T28814] Error: Driver 'raw-gadget' is already registered, aborting... [ 1406.931080][T28814] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1406.931097][T28814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.941841][T18399] usb 3-1: USB disconnect, device number 60 [ 1407.472374][T18399] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1407.832429][T18399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1407.832475][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.832493][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.832508][T18399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1407.832534][T18399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1407.832549][T18399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.834222][T18399] usb 3-1: config 0 descriptor?? 00:01:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x81, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/159, 0x9f}], 0x3, 0x200, 0x0) r2 = syz_usb_connect(0x5, 0x3ea, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1000], &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x0, 0x7, 0x40}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x0, 0x81}]}, 0x2, [{0x95, &(0x7f0000000080)=@string={0x95, 0x3, "fc245239ed0bc7d2b6021125b67ef7369ba3bf727645d3885085661b56b022d35abec732753cad7dc108389206855a6ce341931ec6f5b220c694f123b08cf5079c2d9fd1722c2d0bf0bcfe50f513a8996c0e825f01b902d3685a4e1c2ff2eb8561a2b3483fe502d0ae6f6a4f8142cd098c797c3536e8f67e1615328b6ba03ef9af26ff17e75b2f8e6e0fdad7d8557e53bf8038"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x24, &(0x7f0000000780)={0x0, 0xb, 0xe8, {0xe8, 0x21, "b6391abb6f806e403e858fbc274f97be9c10c8e83dadb271aeead81671eb1e9cd18fc81a484f7689c8805f3a764e12df885050ced302bb121706757bfa4aafbb2a96b52d4b9d61f8c830574e9601f9666afccf9e65bc4f4e93e2c8966663283fa1940fa52a624f1af03c7386cca2180c212d7bbeb1819c42a9c160500106a5b9054371ec907fd5aa3c52aa7d1a99d8bad5b903f35e279fc82b59ba45267c949b22a322af30109586a8345d8b0feefa3661b96be1fa8693b4c478e8098eb95321c21e3f2e6387641b3073a59326b8a6129d61289a004d42a1ce854dff44b9a3329a2a35efaaf8"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000880)={0x0, 0x22, 0x1b, {[@local=@item_012={0x0, 0x2, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "a6c522b6"}, @local=@item_4={0x3, 0x2, 0x7, "28241b0a"}, @local=@item_4={0x3, 0x2, 0x3, "6e1a254e"}, @main=@item_4={0x3, 0x0, 0xb, 'r{]D'}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x1, "a37bad86"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xb45}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x0, 0x0, 0x3a, "b60c0dc345f5aa6a318104b88460ee047130cf24190307d470881b3c89ee168e6cf8d81c3ed3b9c0304ad24b2b59cbfca829030838943e00cb37"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x86, "71b6542316f58915941b57ebef8e640b013792abfb6e4b97d6c0b13973df2160f2bd2e5883eb5f4e6142a3a7293996de855abedaf8a51bd0d435681bd5f42e205bb926e362a313f4f6da6ac68b4de57ca0ff365f8f91fbe1fb86d565b2dce689c29729310fefbf06c06aaf21f4e251a8b53fdfa2ddbff34873f8d38a745d08a41f25224ffce3"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x39}}) syz_usb_disconnect(0xffffffffffffffff) 00:01:47 executing program 0: syz_clone3(&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) 00:01:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf00) 00:01:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf0}, 0x0) 00:01:47 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x48000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') 00:01:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x1f000000) 00:01:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x300}, 0x0) 00:01:47 executing program 5: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='][\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='fscrypt:', 0x0) [ 1408.343530][T28867] __nla_validate_parse: 16 callbacks suppressed [ 1408.343550][T28867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1408.343581][T28867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:01:47 executing program 0: r0 = memfd_secret(0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0) [ 1408.373288][T28865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1408.378853][T28868] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2000) 00:01:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x500}, 0x0) 00:01:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x20000000) [ 1408.402488][T18399] usbhid 3-1:0.0: can't add hid device: -71 [ 1408.402575][T18399] usbhid: probe of 3-1:0.0 failed with error -71 [ 1408.404359][T18399] usb 3-1: USB disconnect, device number 61 [ 1408.407449][ T4226] udevd[4226]: setting owner of /dev/bus/usb/003/061 to uid=0, gid=0 failed: No such file or directory [ 1408.441006][T28872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1408.441044][T28872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1408.589953][T28880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1408.592623][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1408.592656][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1408.611811][T28884] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1408.852390][T18399] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1409.232441][T18399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1409.232506][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.232542][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.232571][T18399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1409.232615][T18399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1409.232644][T18399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.235496][T18399] usb 3-1: config 0 descriptor?? [ 1409.704479][T18399] appleir 0003:05AC:8243.00C7: unknown main item tag 0x0 [ 1409.704987][T18399] appleir 0003:05AC:8243.00C7: No inputs registered, leaving [ 1409.709740][T18399] appleir 0003:05AC:8243.00C7: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1409.973669][T28873] Error: Driver 'raw-gadget' is already registered, aborting... [ 1409.973685][T28873] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1409.973705][T28873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.178406][T18399] usb 3-1: USB disconnect, device number 62 00:01:50 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x81, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/159, 0x9f}], 0x3, 0x200, 0x0) (async) r2 = syz_usb_connect(0x5, 0x3ea, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1000], &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x0, 0x7, 0x40}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x0, 0x81}]}, 0x2, [{0x95, &(0x7f0000000080)=@string={0x95, 0x3, "fc245239ed0bc7d2b6021125b67ef7369ba3bf727645d3885085661b56b022d35abec732753cad7dc108389206855a6ce341931ec6f5b220c694f123b08cf5079c2d9fd1722c2d0bf0bcfe50f513a8996c0e825f01b902d3685a4e1c2ff2eb8561a2b3483fe502d0ae6f6a4f8142cd098c797c3536e8f67e1615328b6ba03ef9af26ff17e75b2f8e6e0fdad7d8557e53bf8038"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x24, &(0x7f0000000780)={0x0, 0xb, 0xe8, {0xe8, 0x21, "b6391abb6f806e403e858fbc274f97be9c10c8e83dadb271aeead81671eb1e9cd18fc81a484f7689c8805f3a764e12df885050ced302bb121706757bfa4aafbb2a96b52d4b9d61f8c830574e9601f9666afccf9e65bc4f4e93e2c8966663283fa1940fa52a624f1af03c7386cca2180c212d7bbeb1819c42a9c160500106a5b9054371ec907fd5aa3c52aa7d1a99d8bad5b903f35e279fc82b59ba45267c949b22a322af30109586a8345d8b0feefa3661b96be1fa8693b4c478e8098eb95321c21e3f2e6387641b3073a59326b8a6129d61289a004d42a1ce854dff44b9a3329a2a35efaaf8"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000880)={0x0, 0x22, 0x1b, {[@local=@item_012={0x0, 0x2, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "a6c522b6"}, @local=@item_4={0x3, 0x2, 0x7, "28241b0a"}, @local=@item_4={0x3, 0x2, 0x3, "6e1a254e"}, @main=@item_4={0x3, 0x0, 0xb, 'r{]D'}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x1, "a37bad86"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xb45}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x0, 0x0, 0x3a, "b60c0dc345f5aa6a318104b88460ee047130cf24190307d470881b3c89ee168e6cf8d81c3ed3b9c0304ad24b2b59cbfca829030838943e00cb37"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x86, "71b6542316f58915941b57ebef8e640b013792abfb6e4b97d6c0b13973df2160f2bd2e5883eb5f4e6142a3a7293996de855abedaf8a51bd0d435681bd5f42e205bb926e362a313f4f6da6ac68b4de57ca0ff365f8f91fbe1fb86d565b2dce689c29729310fefbf06c06aaf21f4e251a8b53fdfa2ddbff34873f8d38a745d08a41f25224ffce3"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x39}}) (async) syz_usb_disconnect(0xffffffffffffffff) 00:01:50 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 00:01:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x600}, 0x0) 00:01:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2400) 00:01:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={0x0}}, 0x0) 00:01:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x24000000) 00:01:50 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x280040, 0x0) 00:01:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x700}, 0x0) 00:01:50 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 00:01:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x3f000000) 00:01:50 executing program 0: syz_clone3(&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, {0x1f}, &(0x7f0000001900)=""/207, 0xcf, 0x0, &(0x7f0000001a40)=[0x0], 0x1}, 0x58) 00:01:50 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "d14195388b213fe2e13d9ee63fa1559d000fd1889ba69b04c2c44bdc826bc06aba5110d3f09ae4b3909d9c3aef14b23a3ce0d913d99012d6a21fa359714c71a9"}, 0x48, r0) keyctl$update(0x2, r1, &(0x7f0000000600)="93", 0x1) [ 1411.072486][T18399] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1411.462520][T18399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1411.462571][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.462589][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.462605][T18399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1411.462630][T18399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1411.462645][T18399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.464082][T18399] usb 3-1: config 0 descriptor?? [ 1411.763680][T18399] appleir 0003:05AC:8243.00C8: unknown main item tag 0x0 [ 1411.764141][T18399] appleir 0003:05AC:8243.00C8: No inputs registered, leaving [ 1411.768561][T18399] appleir 0003:05AC:8243.00C8: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1412.035870][T28909] Error: Driver 'raw-gadget' is already registered, aborting... [ 1412.035884][T28909] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1412.035903][T28909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.238876][T24481] usb 3-1: USB disconnect, device number 63 00:01:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x81, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/159, 0x9f}], 0x3, 0x200, 0x0) r2 = syz_usb_connect(0x5, 0x3ea, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1000], &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x0, 0x7, 0x40}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x0, 0x81}]}, 0x2, [{0x95, &(0x7f0000000080)=@string={0x95, 0x3, "fc245239ed0bc7d2b6021125b67ef7369ba3bf727645d3885085661b56b022d35abec732753cad7dc108389206855a6ce341931ec6f5b220c694f123b08cf5079c2d9fd1722c2d0bf0bcfe50f513a8996c0e825f01b902d3685a4e1c2ff2eb8561a2b3483fe502d0ae6f6a4f8142cd098c797c3536e8f67e1615328b6ba03ef9af26ff17e75b2f8e6e0fdad7d8557e53bf8038"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x24, &(0x7f0000000780)={0x0, 0xb, 0xe8, {0xe8, 0x21, "b6391abb6f806e403e858fbc274f97be9c10c8e83dadb271aeead81671eb1e9cd18fc81a484f7689c8805f3a764e12df885050ced302bb121706757bfa4aafbb2a96b52d4b9d61f8c830574e9601f9666afccf9e65bc4f4e93e2c8966663283fa1940fa52a624f1af03c7386cca2180c212d7bbeb1819c42a9c160500106a5b9054371ec907fd5aa3c52aa7d1a99d8bad5b903f35e279fc82b59ba45267c949b22a322af30109586a8345d8b0feefa3661b96be1fa8693b4c478e8098eb95321c21e3f2e6387641b3073a59326b8a6129d61289a004d42a1ce854dff44b9a3329a2a35efaaf8"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000880)={0x0, 0x22, 0x1b, {[@local=@item_012={0x0, 0x2, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "a6c522b6"}, @local=@item_4={0x3, 0x2, 0x7, "28241b0a"}, @local=@item_4={0x3, 0x2, 0x3, "6e1a254e"}, @main=@item_4={0x3, 0x0, 0xb, 'r{]D'}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x1, "a37bad86"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xb45}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x0, 0x0, 0x3a, "b60c0dc345f5aa6a318104b88460ee047130cf24190307d470881b3c89ee168e6cf8d81c3ed3b9c0304ad24b2b59cbfca829030838943e00cb37"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x86, "71b6542316f58915941b57ebef8e640b013792abfb6e4b97d6c0b13973df2160f2bd2e5883eb5f4e6142a3a7293996de855abedaf8a51bd0d435681bd5f42e205bb926e362a313f4f6da6ac68b4de57ca0ff365f8f91fbe1fb86d565b2dce689c29729310fefbf06c06aaf21f4e251a8b53fdfa2ddbff34873f8d38a745d08a41f25224ffce3"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x39}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000180), 0x81, 0x0) (async) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/159, 0x9f}], 0x3, 0x200, 0x0) (async) syz_usb_connect(0x5, 0x3ea, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1000], &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x0, 0x7, 0x40}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x0, 0x81}]}, 0x2, [{0x95, &(0x7f0000000080)=@string={0x95, 0x3, "fc245239ed0bc7d2b6021125b67ef7369ba3bf727645d3885085661b56b022d35abec732753cad7dc108389206855a6ce341931ec6f5b220c694f123b08cf5079c2d9fd1722c2d0bf0bcfe50f513a8996c0e825f01b902d3685a4e1c2ff2eb8561a2b3483fe502d0ae6f6a4f8142cd098c797c3536e8f67e1615328b6ba03ef9af26ff17e75b2f8e6e0fdad7d8557e53bf8038"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x24, &(0x7f0000000780)={0x0, 0xb, 0xe8, {0xe8, 0x21, "b6391abb6f806e403e858fbc274f97be9c10c8e83dadb271aeead81671eb1e9cd18fc81a484f7689c8805f3a764e12df885050ced302bb121706757bfa4aafbb2a96b52d4b9d61f8c830574e9601f9666afccf9e65bc4f4e93e2c8966663283fa1940fa52a624f1af03c7386cca2180c212d7bbeb1819c42a9c160500106a5b9054371ec907fd5aa3c52aa7d1a99d8bad5b903f35e279fc82b59ba45267c949b22a322af30109586a8345d8b0feefa3661b96be1fa8693b4c478e8098eb95321c21e3f2e6387641b3073a59326b8a6129d61289a004d42a1ce854dff44b9a3329a2a35efaaf8"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000880)={0x0, 0x22, 0x1b, {[@local=@item_012={0x0, 0x2, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "a6c522b6"}, @local=@item_4={0x3, 0x2, 0x7, "28241b0a"}, @local=@item_4={0x3, 0x2, 0x3, "6e1a254e"}, @main=@item_4={0x3, 0x0, 0xb, 'r{]D'}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x1, "a37bad86"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xb45}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x0, 0x0, 0x3a, "b60c0dc345f5aa6a318104b88460ee047130cf24190307d470881b3c89ee168e6cf8d81c3ed3b9c0304ad24b2b59cbfca829030838943e00cb37"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x86, "71b6542316f58915941b57ebef8e640b013792abfb6e4b97d6c0b13973df2160f2bd2e5883eb5f4e6142a3a7293996de855abedaf8a51bd0d435681bd5f42e205bb926e362a313f4f6da6ac68b4de57ca0ff365f8f91fbe1fb86d565b2dce689c29729310fefbf06c06aaf21f4e251a8b53fdfa2ddbff34873f8d38a745d08a41f25224ffce3"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x39}}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:01:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x900}, 0x0) 00:01:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2801) 00:01:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) 00:01:52 executing program 0: r0 = memfd_secret(0x0) openat$incfs(r0, &(0x7f0000000540)='.log\x00', 0x0, 0x0) 00:01:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x48000000) 00:01:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001600010000000000000000000a000000", @ANYRES32, @ANYBLOB="140001"], 0x34}}, 0x0) 00:01:52 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000300)) 00:01:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf00}, 0x0) 00:01:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4c000000) 00:01:52 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x4c}, 0x4c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000a80)) 00:01:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x3f00) [ 1413.082424][T18399] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1413.445028][T18399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1413.445076][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.445112][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.445140][T18399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1413.445185][T18399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1413.445214][T18399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.447277][T18399] usb 3-1: config 0 descriptor?? [ 1413.913749][T18399] appleir 0003:05AC:8243.00C9: unknown main item tag 0x0 [ 1413.914039][T18399] appleir 0003:05AC:8243.00C9: No inputs registered, leaving [ 1413.916776][T18399] appleir 0003:05AC:8243.00C9: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1414.182929][T28922] Error: Driver 'raw-gadget' is already registered, aborting... [ 1414.182939][T28922] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1414.182951][T28922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:01:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2247, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x1, 0x0, 0x5a, {0x9, 0x21, 0x20, 0x5, 0x1, {0x22, 0x549}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0xa0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3f, 0xff, 0x2}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0xfa, 0x1, 0x48, 0x40, 0x7f}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x29}}, {0xe0, &(0x7f0000000880)=@string={0xe0, 0x3, "1e8f1105ad8c93e2168edf374a85eb36137eddba49ff34a6eba06d033061c8ec53e84556e625fcb485bfb6b1cf560fccb4b06c6f9647e8b8231da2c29348e2ede2541919a71f644968ad078f219332aa75fd9b4ad73bf8ca1b0d2209afad74e7e2dc56c5990b8080506d8f13e7954bdf864a38709f8af755792e89485d9b5a23f261d7c805370c64fa56c43a695624f0177b0a37cfdde44c3083ccb9744dd68a28b22d5d92bfda6c7b7142d540d39a08c2c6921685c8135de0d3a2ae356288afe2ee491e3cfe99b1570a72c483b6f81d0d7912db60af1516753b65c1cb78"}}, {0xf5, &(0x7f0000000980)=@string={0xf5, 0x3, "1a84496b3d02e562d75112e56683c8f7afc37730f2fb4900e45e4e0e27a6f58be303a008482e15fc26f716c0da5254eea598f2f49df38951b4868be33f6eb5ecb457d7cb921565e4cb2414c105c061dba391c8d56588377915c75ddcea0ddfc5d749372f15182fc5b0738d8926bbd376933d03f58aba1c691e2891e2cdba5d7b2434196ba1c6744dad382ecf4224ec3e76e5b62ca50cdb6035d1179de058541f410cfacb2565769538a890d718cb0117f830b363cc586483098217abebb76d300cb12e92c2fa23a379d3589fc8cae1cdb8fc3e810edb2822438588b2775fa5c1e4992b1f805fdad7d0407edeecfdbd99ecc6e5"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000000)={0x20, 0x23, 0xe1, {0xe1, 0x24, "78b1acf86478c079a6be6e3681001aea229f492fc63f8d96eaafccb3cf2723328984d6d437ac83ee45882c5ea7865fe0016b7ba9eb78733fdbdf8ac7fe32bdccb67b13e9163586cb5d8897018fdd4314e9de1367c12a58134f7eb7549a8b315a65cbb1ee0071de8908cbc154140abe4ded75f389a366ddd855ee5eab8c3b4d1e34eeb2d489a37ef87639dfa9df022ab87aeccca6c1124989081a6ad629d476cd01727a00b013c748b5f620f62a91f10f1719f121743979770a139da043b7fbbb8458f873f9e02667270eb707b860daa42710d9cef4ce98b8967a54965b38dc"}}, &(0x7f0000000280)={0x0, 0x3, 0x67, @string={0x67, 0x3, "1b8c814f099bf2689149d07db0eaa8c751f3be429ce8a7329042fad63624a86c33f9c3a410c786f603f8345d7410ab0c140d967a4b59a95421ce74740661c0baef119324f7157a7e45a65d3cfd984e691405a7efa2a289c39dd44ce46f3a097d56b94f776b"}}, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x6, "70dda841"}, @main=@item_4={0x3, 0x0, 0x8, "f83986af"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x740}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0xd, 0xaf, "937abd00ea7d85dcf3ee652c18c063fdf17472a2a7f9cdefd7f5ddee06ad25b396dd4b43148c126f8541686f838f6f53c6c4e4ced2cb764964bbf670abf1d6996d301a084c8404dc98649b2a26dbb1519dac1cf3a0c13d4d5ce2f092c52d9983bba6977109f1fffc9b3dee1425f44eeafc2036d4f322397e6a672f74158e00590390ea150c7e80e1d48f38206636949b98a76ce18da43975af22c2874e596dc8da77fd89ed599464ba8d4d75e3ca60"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x31}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x1, 0xe8, "4df9d8eeb6038ea42cb2daca8b9e72aa5d1f5640bb1f606909c6a7b9819d6e4e3f4330574eff17e881e32bef18f58627ffc53d9a826d8e9a292cfbc69deec5c539ff9f8d93b504f9a3fdbdf2b5a12418980bedfcdbc9074ddb25ab32e393d44c1427fb3d003091cf7eb538f2d8e4c08c75c1365e93924467091172c3d54f405d5338a26dd69d8dcb5e6e79445d21e45f3dd30ef35e3ae2b068d4b1b95e158e85da402b146adaa1e72c5f0ca80db1fa4044cdf02179245cd52570b3bb16986f4f9a0fe87e89ea422fa9fc583f8b2e7f22ce3d0a6220201c21248c8af3a5be2f089479ced4099b5b40"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x1}}) r2 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:01:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x110a, &(0x7f0000001940)=ANY=[], 0x0) syz_emit_ethernet(0x3f1, 0x0, 0x0) syz_emit_ethernet(0x110a, &(0x7f0000001940)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @private}, @timestamp}}}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000140)={@dev, @link_local, @void, {@x25}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@random="f0f9a840be27", @remote, @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "f1eedb681b0a532c"}}}}, &(0x7f0000000080)={0x1, 0x1, [0x2e9, 0x3b9, 0x4c8, 0x829]}) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbb00810000008100000008004500005800000000002f9078ffffffffac1414002420655800dd080088be88caffff100000000100000000000000080022eb000000002000000002080000000000000000000008006558000038e600"/110], 0x0) 00:01:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) 00:01:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x3f00}, 0x0) 00:01:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x56010000) 00:01:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4000) [ 1414.385689][T28922] Error: Driver 'raw-gadget' is already registered, aborting... [ 1414.385703][T28922] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1414.385721][T28922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:01:54 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f00000009c0), 0xffffffffffffffff) [ 1414.393908][ T3695] usb 3-1: USB disconnect, device number 64 [ 1414.450820][T28944] __nla_validate_parse: 15 callbacks suppressed [ 1414.450840][T28944] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x4800}, 0x0) 00:01:54 executing program 0: request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 00:01:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) 00:01:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x60000000) [ 1414.474907][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:01:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4800) [ 1414.474946][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1414.523193][T28945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1414.598151][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1414.598188][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1414.720997][T28957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1414.738832][T28961] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1414.962495][ T3695] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1415.332503][ T3695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1415.332547][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.332579][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.332604][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1415.332648][ T3695] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1415.332677][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.334799][ T3695] usb 3-1: config 0 descriptor?? [ 1415.823567][ T3695] appleir 0003:05AC:8243.00CA: unknown main item tag 0x0 [ 1415.823966][ T3695] appleir 0003:05AC:8243.00CA: No inputs registered, leaving [ 1415.826919][ T3695] appleir 0003:05AC:8243.00CA: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1416.015496][T28950] Error: Driver 'raw-gadget' is already registered, aborting... [ 1416.015506][T28950] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1416.015519][T28950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.015860][T28950] Error: Driver 'raw-gadget' is already registered, aborting... [ 1416.015866][T28950] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1416.015876][T28950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.262452][ T3332] usb 3-1: reset high-speed USB device number 65 using dummy_hcd 00:01:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2247, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x1, 0x0, 0x5a, {0x9, 0x21, 0x20, 0x5, 0x1, {0x22, 0x549}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0xa0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3f, 0xff, 0x2}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0xfa, 0x1, 0x48, 0x40, 0x7f}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x29}}, {0xe0, &(0x7f0000000880)=@string={0xe0, 0x3, "1e8f1105ad8c93e2168edf374a85eb36137eddba49ff34a6eba06d033061c8ec53e84556e625fcb485bfb6b1cf560fccb4b06c6f9647e8b8231da2c29348e2ede2541919a71f644968ad078f219332aa75fd9b4ad73bf8ca1b0d2209afad74e7e2dc56c5990b8080506d8f13e7954bdf864a38709f8af755792e89485d9b5a23f261d7c805370c64fa56c43a695624f0177b0a37cfdde44c3083ccb9744dd68a28b22d5d92bfda6c7b7142d540d39a08c2c6921685c8135de0d3a2ae356288afe2ee491e3cfe99b1570a72c483b6f81d0d7912db60af1516753b65c1cb78"}}, {0xf5, &(0x7f0000000980)=@string={0xf5, 0x3, "1a84496b3d02e562d75112e56683c8f7afc37730f2fb4900e45e4e0e27a6f58be303a008482e15fc26f716c0da5254eea598f2f49df38951b4868be33f6eb5ecb457d7cb921565e4cb2414c105c061dba391c8d56588377915c75ddcea0ddfc5d749372f15182fc5b0738d8926bbd376933d03f58aba1c691e2891e2cdba5d7b2434196ba1c6744dad382ecf4224ec3e76e5b62ca50cdb6035d1179de058541f410cfacb2565769538a890d718cb0117f830b363cc586483098217abebb76d300cb12e92c2fa23a379d3589fc8cae1cdb8fc3e810edb2822438588b2775fa5c1e4992b1f805fdad7d0407edeecfdbd99ecc6e5"}}]}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000000)={0x20, 0x23, 0xe1, {0xe1, 0x24, "78b1acf86478c079a6be6e3681001aea229f492fc63f8d96eaafccb3cf2723328984d6d437ac83ee45882c5ea7865fe0016b7ba9eb78733fdbdf8ac7fe32bdccb67b13e9163586cb5d8897018fdd4314e9de1367c12a58134f7eb7549a8b315a65cbb1ee0071de8908cbc154140abe4ded75f389a366ddd855ee5eab8c3b4d1e34eeb2d489a37ef87639dfa9df022ab87aeccca6c1124989081a6ad629d476cd01727a00b013c748b5f620f62a91f10f1719f121743979770a139da043b7fbbb8458f873f9e02667270eb707b860daa42710d9cef4ce98b8967a54965b38dc"}}, &(0x7f0000000280)={0x0, 0x3, 0x67, @string={0x67, 0x3, "1b8c814f099bf2689149d07db0eaa8c751f3be429ce8a7329042fad63624a86c33f9c3a410c786f603f8345d7410ab0c140d967a4b59a95421ce74740661c0baef119324f7157a7e45a65d3cfd984e691405a7efa2a289c39dd44ce46f3a097d56b94f776b"}}, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x6, "70dda841"}, @main=@item_4={0x3, 0x0, 0x8, "f83986af"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x740}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0xd, 0xaf, "937abd00ea7d85dcf3ee652c18c063fdf17472a2a7f9cdefd7f5ddee06ad25b396dd4b43148c126f8541686f838f6f53c6c4e4ced2cb764964bbf670abf1d6996d301a084c8404dc98649b2a26dbb1519dac1cf3a0c13d4d5ce2f092c52d9983bba6977109f1fffc9b3dee1425f44eeafc2036d4f322397e6a672f74158e00590390ea150c7e80e1d48f38206636949b98a76ce18da43975af22c2874e596dc8da77fd89ed599464ba8d4d75e3ca60"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x31}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x1, 0xe8, "4df9d8eeb6038ea42cb2daca8b9e72aa5d1f5640bb1f606909c6a7b9819d6e4e3f4330574eff17e881e32bef18f58627ffc53d9a826d8e9a292cfbc69deec5c539ff9f8d93b504f9a3fdbdf2b5a12418980bedfcdbc9074ddb25ab32e393d44c1427fb3d003091cf7eb538f2d8e4c08c75c1365e93924467091172c3d54f405d5338a26dd69d8dcb5e6e79445d21e45f3dd30ef35e3ae2b068d4b1b95e158e85da402b146adaa1e72c5f0ca80db1fa4044cdf02179245cd52570b3bb16986f4f9a0fe87e89ea422fa9fc583f8b2e7f22ce3d0a6220201c21248c8af3a5be2f089479ced4099b5b40"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x1}}) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:01:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x4c00}, 0x0) 00:01:57 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0xc, 0x3f}, 0x48) unshare(0x4020480) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 00:01:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x65580000) 00:01:57 executing program 5: socket$l2tp(0x2, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) 00:01:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4c00) 00:01:57 executing program 5: syz_clone3(&(0x7f0000001a80)={0x40008000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:01:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x6800}, 0x0) 00:01:57 executing program 0: syz_clone3(&(0x7f0000001a80)={0x40008000, 0x0, 0x0, 0x0, {}, &(0x7f0000001900)=""/207, 0xcf, &(0x7f0000001a00)=""/6, &(0x7f0000001a40)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) [ 1417.545207][T28969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1417.545243][T28969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:01:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x68000000) 00:01:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x6c00}, 0x0) 00:01:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x5865) [ 1417.882553][ T3332] usb 3-1: device descriptor read/64, error -71 [ 1418.162377][ T3332] usb 3-1: reset high-speed USB device number 65 using dummy_hcd [ 1418.985508][T28974] Error: Driver 'raw-gadget' is already registered, aborting... [ 1418.985523][T28974] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1418.985541][T28974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.986549][T28974] Error: Driver 'raw-gadget' is already registered, aborting... 00:01:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2247, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x1, 0x0, 0x5a, {0x9, 0x21, 0x20, 0x5, 0x1, {0x22, 0x549}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0xa0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3f, 0xff, 0x2}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0xfa, 0x1, 0x48, 0x40, 0x7f}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x29}}, {0xe0, &(0x7f0000000880)=@string={0xe0, 0x3, "1e8f1105ad8c93e2168edf374a85eb36137eddba49ff34a6eba06d033061c8ec53e84556e625fcb485bfb6b1cf560fccb4b06c6f9647e8b8231da2c29348e2ede2541919a71f644968ad078f219332aa75fd9b4ad73bf8ca1b0d2209afad74e7e2dc56c5990b8080506d8f13e7954bdf864a38709f8af755792e89485d9b5a23f261d7c805370c64fa56c43a695624f0177b0a37cfdde44c3083ccb9744dd68a28b22d5d92bfda6c7b7142d540d39a08c2c6921685c8135de0d3a2ae356288afe2ee491e3cfe99b1570a72c483b6f81d0d7912db60af1516753b65c1cb78"}}, {0xf5, &(0x7f0000000980)=@string={0xf5, 0x3, "1a84496b3d02e562d75112e56683c8f7afc37730f2fb4900e45e4e0e27a6f58be303a008482e15fc26f716c0da5254eea598f2f49df38951b4868be33f6eb5ecb457d7cb921565e4cb2414c105c061dba391c8d56588377915c75ddcea0ddfc5d749372f15182fc5b0738d8926bbd376933d03f58aba1c691e2891e2cdba5d7b2434196ba1c6744dad382ecf4224ec3e76e5b62ca50cdb6035d1179de058541f410cfacb2565769538a890d718cb0117f830b363cc586483098217abebb76d300cb12e92c2fa23a379d3589fc8cae1cdb8fc3e810edb2822438588b2775fa5c1e4992b1f805fdad7d0407edeecfdbd99ecc6e5"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000000)={0x20, 0x23, 0xe1, {0xe1, 0x24, "78b1acf86478c079a6be6e3681001aea229f492fc63f8d96eaafccb3cf2723328984d6d437ac83ee45882c5ea7865fe0016b7ba9eb78733fdbdf8ac7fe32bdccb67b13e9163586cb5d8897018fdd4314e9de1367c12a58134f7eb7549a8b315a65cbb1ee0071de8908cbc154140abe4ded75f389a366ddd855ee5eab8c3b4d1e34eeb2d489a37ef87639dfa9df022ab87aeccca6c1124989081a6ad629d476cd01727a00b013c748b5f620f62a91f10f1719f121743979770a139da043b7fbbb8458f873f9e02667270eb707b860daa42710d9cef4ce98b8967a54965b38dc"}}, &(0x7f0000000280)={0x0, 0x3, 0x67, @string={0x67, 0x3, "1b8c814f099bf2689149d07db0eaa8c751f3be429ce8a7329042fad63624a86c33f9c3a410c786f603f8345d7410ab0c140d967a4b59a95421ce74740661c0baef119324f7157a7e45a65d3cfd984e691405a7efa2a289c39dd44ce46f3a097d56b94f776b"}}, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x6, "70dda841"}, @main=@item_4={0x3, 0x0, 0x8, "f83986af"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x740}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0xd, 0xaf, "937abd00ea7d85dcf3ee652c18c063fdf17472a2a7f9cdefd7f5ddee06ad25b396dd4b43148c126f8541686f838f6f53c6c4e4ced2cb764964bbf670abf1d6996d301a084c8404dc98649b2a26dbb1519dac1cf3a0c13d4d5ce2f092c52d9983bba6977109f1fffc9b3dee1425f44eeafc2036d4f322397e6a672f74158e00590390ea150c7e80e1d48f38206636949b98a76ce18da43975af22c2874e596dc8da77fd89ed599464ba8d4d75e3ca60"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x31}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x1, 0xe8, "4df9d8eeb6038ea42cb2daca8b9e72aa5d1f5640bb1f606909c6a7b9819d6e4e3f4330574eff17e881e32bef18f58627ffc53d9a826d8e9a292cfbc69deec5c539ff9f8d93b504f9a3fdbdf2b5a12418980bedfcdbc9074ddb25ab32e393d44c1427fb3d003091cf7eb538f2d8e4c08c75c1365e93924467091172c3d54f405d5338a26dd69d8dcb5e6e79445d21e45f3dd30ef35e3ae2b068d4b1b95e158e85da402b146adaa1e72c5f0ca80db1fa4044cdf02179245cd52570b3bb16986f4f9a0fe87e89ea422fa9fc583f8b2e7f22ce3d0a6220201c21248c8af3a5be2f089479ced4099b5b40"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x1}}) r2 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2247, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x1, 0x0, 0x5a, {0x9, 0x21, 0x20, 0x5, 0x1, {0x22, 0x549}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0xa0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3f, 0xff, 0x2}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0xfa, 0x1, 0x48, 0x40, 0x7f}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x29}}, {0xe0, &(0x7f0000000880)=@string={0xe0, 0x3, "1e8f1105ad8c93e2168edf374a85eb36137eddba49ff34a6eba06d033061c8ec53e84556e625fcb485bfb6b1cf560fccb4b06c6f9647e8b8231da2c29348e2ede2541919a71f644968ad078f219332aa75fd9b4ad73bf8ca1b0d2209afad74e7e2dc56c5990b8080506d8f13e7954bdf864a38709f8af755792e89485d9b5a23f261d7c805370c64fa56c43a695624f0177b0a37cfdde44c3083ccb9744dd68a28b22d5d92bfda6c7b7142d540d39a08c2c6921685c8135de0d3a2ae356288afe2ee491e3cfe99b1570a72c483b6f81d0d7912db60af1516753b65c1cb78"}}, {0xf5, &(0x7f0000000980)=@string={0xf5, 0x3, "1a84496b3d02e562d75112e56683c8f7afc37730f2fb4900e45e4e0e27a6f58be303a008482e15fc26f716c0da5254eea598f2f49df38951b4868be33f6eb5ecb457d7cb921565e4cb2414c105c061dba391c8d56588377915c75ddcea0ddfc5d749372f15182fc5b0738d8926bbd376933d03f58aba1c691e2891e2cdba5d7b2434196ba1c6744dad382ecf4224ec3e76e5b62ca50cdb6035d1179de058541f410cfacb2565769538a890d718cb0117f830b363cc586483098217abebb76d300cb12e92c2fa23a379d3589fc8cae1cdb8fc3e810edb2822438588b2775fa5c1e4992b1f805fdad7d0407edeecfdbd99ecc6e5"}}]}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000000)={0x20, 0x23, 0xe1, {0xe1, 0x24, "78b1acf86478c079a6be6e3681001aea229f492fc63f8d96eaafccb3cf2723328984d6d437ac83ee45882c5ea7865fe0016b7ba9eb78733fdbdf8ac7fe32bdccb67b13e9163586cb5d8897018fdd4314e9de1367c12a58134f7eb7549a8b315a65cbb1ee0071de8908cbc154140abe4ded75f389a366ddd855ee5eab8c3b4d1e34eeb2d489a37ef87639dfa9df022ab87aeccca6c1124989081a6ad629d476cd01727a00b013c748b5f620f62a91f10f1719f121743979770a139da043b7fbbb8458f873f9e02667270eb707b860daa42710d9cef4ce98b8967a54965b38dc"}}, &(0x7f0000000280)={0x0, 0x3, 0x67, @string={0x67, 0x3, "1b8c814f099bf2689149d07db0eaa8c751f3be429ce8a7329042fad63624a86c33f9c3a410c786f603f8345d7410ab0c140d967a4b59a95421ce74740661c0baef119324f7157a7e45a65d3cfd984e691405a7efa2a289c39dd44ce46f3a097d56b94f776b"}}, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x6, "70dda841"}, @main=@item_4={0x3, 0x0, 0x8, "f83986af"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x740}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0xd, 0xaf, "937abd00ea7d85dcf3ee652c18c063fdf17472a2a7f9cdefd7f5ddee06ad25b396dd4b43148c126f8541686f838f6f53c6c4e4ced2cb764964bbf670abf1d6996d301a084c8404dc98649b2a26dbb1519dac1cf3a0c13d4d5ce2f092c52d9983bba6977109f1fffc9b3dee1425f44eeafc2036d4f322397e6a672f74158e00590390ea150c7e80e1d48f38206636949b98a76ce18da43975af22c2874e596dc8da77fd89ed599464ba8d4d75e3ca60"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x31}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x1, 0xe8, "4df9d8eeb6038ea42cb2daca8b9e72aa5d1f5640bb1f606909c6a7b9819d6e4e3f4330574eff17e881e32bef18f58627ffc53d9a826d8e9a292cfbc69deec5c539ff9f8d93b504f9a3fdbdf2b5a12418980bedfcdbc9074ddb25ab32e393d44c1427fb3d003091cf7eb538f2d8e4c08c75c1365e93924467091172c3d54f405d5338a26dd69d8dcb5e6e79445d21e45f3dd30ef35e3ae2b068d4b1b95e158e85da402b146adaa1e72c5f0ca80db1fa4044cdf02179245cd52570b3bb16986f4f9a0fe87e89ea422fa9fc583f8b2e7f22ce3d0a6220201c21248c8af3a5be2f089479ced4099b5b40"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x1}}) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:01:58 executing program 5: prctl$PR_SET_PDEATHSIG(0x2a, 0x8000000000001c) 00:01:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x7400}, 0x0) 00:01:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6c000000) 00:01:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6000) 00:01:58 executing program 0: syslog(0x3, &(0x7f0000000000)=""/157, 0x9d) [ 1418.986561][T28974] UDC core: USB Raw Gadget: driver registration failed: -16 00:01:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000200)="b1", 0x1}], 0x3}, 0x0) 00:01:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x7a00}, 0x0) [ 1418.986578][T28974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.020765][ T3695] usb 3-1: USB disconnect, device number 65 00:01:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 00:01:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x74000000) 00:01:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf000}, 0x0) 00:01:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6558) [ 1419.512470][ T3695] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1419.872442][ T3695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1419.872509][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.872543][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.872570][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1419.872612][ T3695] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1419.872640][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.875137][ T3695] usb 3-1: config 0 descriptor?? [ 1420.354134][ T3695] appleir 0003:05AC:8243.00CB: unknown main item tag 0x0 [ 1420.354420][ T3695] appleir 0003:05AC:8243.00CB: No inputs registered, leaving [ 1420.357245][ T3695] appleir 0003:05AC:8243.00CB: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1420.555317][T29001] Error: Driver 'raw-gadget' is already registered, aborting... [ 1420.555331][T29001] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1420.555343][T29001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.555590][T29001] Error: Driver 'raw-gadget' is already registered, aborting... [ 1420.555596][T29001] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1420.555606][T29001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:02:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000001240)={{0x1, 0x3, 0x358, 0x2, 0x1, 0x2}, 0x1f1, [0x80000000, 0x401, 0x5, 0x1, 0x9, 0x1f, 0x1f, 0x10000, 0x10000, 0x80000000, 0x5, 0x81, 0xff, 0xfffffff0, 0x7, 0x80000001, 0x9, 0x3f, 0x6, 0x3ff, 0x8b5, 0x6, 0x7fff, 0x10001, 0x0, 0x1, 0x2800000, 0xe2c7f3b, 0x2, 0x7fffffff, 0x70f, 0x1, 0x0, 0x2, 0xfffffffa, 0x8, 0x10001, 0x1, 0x1cd0, 0x6, 0x821, 0xb8, 0x40000, 0x2, 0x4, 0x2, 0xfffff801, 0x4, 0x8000, 0x0, 0x0, 0x1ff, 0x3, 0x1, 0x4, 0x2, 0xab, 0x300000, 0x5, 0x7fff, 0x4, 0x80000, 0x8, 0x800, 0x3, 0x80, 0x7, 0x3, 0x7, 0x708, 0x3f, 0x2, 0xfffffffc, 0x3448, 0x6, 0x6508, 0x8, 0x2d, 0x1, 0xfffffbff, 0xff, 0x20, 0x40, 0x7ff, 0xfff, 0x0, 0x9, 0x777f, 0x2, 0x2, 0x3, 0x5, 0x0, 0x1, 0x80000001, 0x0, 0x1, 0x4, 0x20, 0x1f, 0x0, 0x2, 0x1, 0x2, 0x4, 0xcf3d, 0x0, 0x1, 0x5, 0x2, 0x3, 0x641, 0x9, 0xffff, 0x2, 0x19700, 0x9477, 0x10001, 0x9, 0x3, 0x800, 0x7, 0x13, 0xfffffff9, 0xffffff7f, 0xffff7fff, 0xfffffe00, 0xfff, 0x8, 0x6, 0x3f, 0x7, 0xffff, 0x10001, 0x200, 0x7, 0x8, 0xefaf, 0x7, 0xd6a0, 0xffffffe1, 0x6, 0x5fd, 0x8, 0x0, 0xa17, 0x2, 0x79c, 0x5, 0x8, 0x3, 0x4, 0x4, 0xffff, 0x800, 0x3, 0x3ff, 0xff, 0x7, 0x9, 0x3ff, 0x101, 0x7, 0x6, 0x3, 0x4, 0x0, 0x3, 0xfffffffb, 0x208d, 0xab, 0x8, 0x4, 0x200, 0xc19, 0x2, 0x80, 0x40, 0x3ff, 0x3499, 0x0, 0x6, 0x8ef, 0x3, 0x2, 0x81, 0x9, 0x7, 0x7fff, 0x400, 0x5, 0x0, 0xfffffffd, 0x5, 0x3, 0x8, 0x6, 0x7ff, 0x7, 0x0, 0xfffeffff, 0x4, 0x4, 0x10001, 0x0, 0xcf6b, 0x1, 0x9, 0xd60, 0xfffffff9, 0x8000, 0x1ff, 0x7a, 0x7ff, 0x0, 0x62ac, 0x8, 0x2, 0x4, 0x8, 0x6, 0x0, 0x4, 0x7, 0x0, 0x1, 0x8, 0x58, 0x3, 0x4, 0x5, 0xffffff29, 0x0, 0x5, 0x76bb, 0x6, 0xc77, 0x7, 0x3, 0x51cde374, 0x7, 0x100, 0x27, 0x1, 0xb828, 0x7, 0xfffeffff, 0x1, 0x1, 0xba, 0x4, 0x7ff, 0x7, 0x1, 0x377a48f6, 0x202, 0x8, 0x9, 0x2, 0x0, 0x8000, 0x359, 0xffffffff, 0x5, 0x4, 0x9445, 0xffffffff, 0x3, 0x9e6, 0xad4, 0x1, 0x9, 0x9, 0x2, 0x1ff, 0x3, 0xd77, 0xbe1, 0x6, 0x7, 0x7fff, 0x3, 0x0, 0x7, 0xffffd97c, 0x1, 0x5, 0xa86, 0x2, 0x4, 0x3f, 0x2, 0xdaf, 0x80000001, 0x8001, 0x10000, 0x9, 0x101, 0x1, 0x602, 0x7, 0xa84, 0x6, 0xf21, 0x100, 0x800, 0x292a, 0x3f, 0x8, 0x4, 0x401, 0x1f, 0x5, 0x3, 0x4, 0xbf3, 0x7, 0x4800, 0xa8, 0x7f, 0x4, 0x8, 0x3f, 0x81, 0x0, 0xe9a, 0x5, 0xcfbc, 0x9, 0xfffffbff, 0x2, 0x1, 0x8d0, 0xd1, 0xffffffff, 0xfffffffb, 0xfffffff8, 0x7, 0x6, 0x101, 0xff, 0x1, 0x85e4, 0xa2, 0x7fffffff, 0x7f, 0x0, 0xd8f, 0x2, 0x14bb, 0x7, 0x400, 0x6, 0x8, 0xcf, 0x2, 0x1ff, 0x5, 0x7, 0x7fff, 0x1, 0xd042, 0xffff7fb2, 0xfffffffb, 0x10000, 0x40, 0x4760, 0x3, 0x8e07, 0x3, 0x6, 0x1, 0x2, 0x3ff, 0x7f, 0x40, 0x1, 0x4, 0xfff, 0x1ff, 0xffff0000, 0x4, 0x401, 0x96f, 0x9, 0xfffffeff, 0x8, 0x0, 0x1, 0x8, 0xfffffffe, 0x3, 0xfffffff9, 0x1, 0x6, 0x401, 0x100, 0xff, 0x6, 0x101, 0x0, 0x3, 0x7e, 0x4, 0x7f, 0x1, 0x20, 0x1ff, 0x43471269, 0x4, 0x9, 0x2e1, 0x9, 0x9, 0x200, 0x6, 0x2, 0xff1f, 0x20, 0x6, 0x17, 0x2, 0x1, 0x6b, 0x8, 0x6, 0x6, 0x80000001, 0x10000, 0x9, 0x5, 0x23b1, 0x3ff, 0x8, 0x5a6, 0xfe, 0x6d, 0x957c, 0x8, 0x1, 0x8001, 0x800, 0x8, 0x56d4, 0x1, 0x2, 0x2, 0x3, 0x100, 0xc3d, 0x5, 0x1, 0x2, 0x5, 0x0, 0x7fffffff, 0x800, 0x8, 0x3ff, 0x81, 0x638, 0x3, 0x4, 0x401, 0xba6, 0xfffffffe, 0x3ff, 0xaa, 0x3f, 0x1de, 0xfffff13f, 0x9, 0x2, 0x3ff, 0x3, 0x2, 0x80, 0x40, 0x5, 0x8, 0x1a1, 0x8b, 0x80, 0x2, 0x8, 0x80, 0x8, 0x8, 0x7, 0xd3, 0x9f, 0x9, 0x7, 0x6, 0x40, 0x3, 0x3, 0xffffffff, 0xc2, 0x200, 0x8, 0x6, 0x4, 0x2, 0x6, 0xa99, 0x1706, 0x9, 0x40000000, 0x3, 0x1, 0x9, 0xffffffff, 0x8, 0xc40, 0x1, 0x3f, 0x401, 0x3, 0x10000, 0xa6a, 0x7fffffff, 0x4, 0x7, 0x516, 0xfffffc01, 0x1, 0x0, 0x7, 0x9c9, 0x1, 0x1ff, 0x0, 0x3, 0x4, 0x9, 0x6, 0x6, 0x0, 0x9, 0x6, 0x6, 0x800, 0x5, 0x3ff, 0x6, 0xd4a, 0xffff8000, 0x1, 0x0, 0x8001, 0x844f, 0x10001, 0xffff, 0xffffff80, 0x1a, 0x63, 0x5, 0x7, 0x2, 0x1, 0xed9, 0x2, 0x7, 0x6, 0x3f, 0x0, 0xff, 0x7fff800, 0x0, 0x996a, 0x7, 0x9, 0xadd, 0xa77, 0x1, 0x3, 0x6, 0x9, 0x1000, 0x2, 0x2, 0xe3e, 0x0, 0x0, 0x7f, 0x1, 0x81, 0xfffffff9, 0x7, 0x0, 0x8000, 0xffffffff, 0x101, 0x400, 0xfffff000, 0x1f, 0x2, 0x7, 0x6, 0x5, 0x400, 0x400, 0x81, 0x4, 0x9, 0x2, 0xd27b, 0x5, 0x8, 0xffffffff, 0x5, 0x1, 0x1f, 0xf11, 0x80000001, 0x1, 0x7, 0x2, 0x8, 0x80, 0x8, 0x1, 0x9, 0x10000, 0x4, 0xfffffffc, 0x6, 0xffff0000, 0x3, 0x8000, 0x100, 0x9, 0x3f, 0x6, 0x2, 0x6, 0x7, 0x0, 0x9, 0x6, 0x782cd564, 0xffffffff, 0x5, 0xfffffbff, 0x6fbd, 0xffff0663, 0x10000, 0x2, 0x1f, 0x9, 0x9, 0x3, 0x401, 0x7f, 0x5ae, 0x7, 0x6, 0x9, 0x2, 0x6, 0x7, 0x9d, 0x9, 0x8, 0x100, 0x1, 0x40, 0x4, 0x20000000, 0x0, 0x0, 0x6, 0x4216, 0x10001, 0x44, 0xec9, 0x5, 0x3, 0x3, 0x800, 0x10000, 0x8, 0x716, 0x29955127, 0x7fff, 0x8e40, 0x2, 0x8, 0x1, 0x0, 0xffff, 0x4, 0xb31, 0x3, 0x18c3, 0xffffffff, 0x1, 0x27, 0x200, 0x4, 0x1, 0x2, 0x1, 0x0, 0x4, 0x1f, 0x1ff, 0xaaa, 0x0, 0x0, 0x3, 0x80000000, 0x33, 0x7, 0x8, 0x7fffffff, 0x70, 0x2, 0xcc, 0xe1a, 0x93, 0x8, 0x6, 0xffff0f5e, 0x9, 0xfff, 0x76, 0x400, 0xb10, 0x8, 0x9, 0x3, 0x4, 0x4, 0x80000000, 0x100, 0x3, 0xc6f71b, 0x0, 0x18, 0x0, 0x8000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2e, 0x0, 0xfffffffa, 0x101, 0x80000000, 0x25, 0x2, 0x5, 0x88a, 0x3, 0x7, 0x10001, 0x3ff, 0x200, 0x81, 0x1, 0x6, 0x8a, 0xfffffffb, 0x1, 0x6, 0xffff082b, 0x40, 0x5, 0x2, 0x2, 0x1c6, 0x0, 0x9, 0x66, 0x7fff, 0x4, 0x1, 0x7, 0x5, 0x7558, 0x7, 0x7, 0x0, 0xfffff001, 0x9, 0x9, 0x2f29265e, 0x2, 0x7, 0x4, 0xffffffe0, 0x8, 0xc9, 0x1, 0x5, 0x7, 0x747, 0x5, 0x0, 0xba80, 0x1, 0x7ff, 0x0, 0x1, 0x42, 0x1f, 0x1, 0x0, 0xfffff800, 0xffffc0d1, 0x0, 0x2, 0x6, 0x78, 0x800, 0xff, 0xfffffff8, 0x3, 0x0, 0x7, 0x7, 0x4, 0xffffffff, 0x1, 0x1, 0x7e2c, 0x400, 0x400, 0x1, 0x61d7, 0x5, 0x93b22836, 0x3, 0x7f, 0x1, 0xa7d8, 0x3, 0xfff, 0x75f6, 0x3, 0x1, 0x8, 0x3, 0xfffffffe, 0x8001, 0x80000001, 0x400, 0xfffffffb, 0x8, 0x9, 0x1000, 0xfffffffc, 0x8001, 0x7, 0x4, 0x1, 0x4, 0x0, 0x953, 0x4, 0x0, 0x5, 0x3, 0x5, 0x1f, 0xba19, 0x80000001, 0x3, 0x1, 0x38, 0x7, 0x1, 0x8001, 0x1, 0x7ff, 0x8, 0x4, 0x9, 0xd92, 0x9, 0x1, 0x5, 0x10001, 0x3, 0x2, 0x3, 0x7ff, 0x4f6e, 0x3, 0x4, 0x4, 0x1f, 0x5, 0xffffffff, 0x7, 0x725e, 0xffffffff, 0xf48, 0x5, 0x3ff, 0x5, 0x7, 0x101, 0x7d8, 0x5, 0x0, 0x7fff, 0x1f, 0x6, 0xff, 0x6, 0x6, 0x2, 0x401, 0x5f, 0x7, 0xfff, 0x9, 0x5, 0xca, 0x1, 0xb1d2, 0x40, 0x7, 0x9, 0x7, 0x68, 0x3, 0x6, 0x3, 0x1, 0x7fff, 0x7fffffff, 0xfffffffe, 0x0, 0x5, 0x68f1, 0x8, 0xfffffffd, 0x200, 0xff, 0x1, 0x457, 0x5, 0x2, 0xfff, 0x101, 0xff, 0x1, 0x10000, 0x400, 0xfffffff9, 0x4000000, 0x86, 0x496d, 0x200, 0x8, 0x7, 0xb9, 0xf6, 0x8, 0x47b, 0x2, 0xffffff69, 0x80000001, 0xffff, 0x1427, 0x0, 0xb2, 0x6, 0x1ff, 0x1000, 0x5, 0x0, 0x0, 0x3, 0x10000, 0xab5e, 0x8, 0xffff0001, 0x382ee10f, 0x6, 0x9cd7, 0x357, 0x2, 0x4, 0x8000, 0x3, 0x10000, 0x4, 0x3f, 0x1f, 0x8, 0x8001, 0x0, 0x6, 0x910b, 0x6, 0x9, 0x10000, 0x7fff, 0x0, 0x0, 0xb371, 0x3, 0x0, 0x7, 0xaf, 0x8, 0x9, 0x0, 0xfffffff8, 0xffffb98d, 0x800, 0xffffff27, 0x1ff, 0x9, 0x2, 0xfd2, 0xb9]}) syz_usb_disconnect(0xffffffffffffffff) 00:02:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x2}, 0x0) 00:02:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x750c0000) 00:02:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x30000}, 0x0) 00:02:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6800) 00:02:00 executing program 0: prctl$PR_SET_PDEATHSIG(0xf, 0x7fa35a7ad000) [ 1420.887702][ T3695] usb 3-1: USB disconnect, device number 66 00:02:00 executing program 0: prctl$PR_SET_PDEATHSIG(0x25, 0x8000000000001c) 00:02:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x34000}, 0x0) 00:02:00 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001340)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 1420.943783][T29026] __nla_validate_parse: 17 callbacks suppressed [ 1420.943804][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:00 executing program 0: prctl$PR_SET_PDEATHSIG(0x4, 0x8000000000001c) 00:02:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1100000000000000000000000100000001000000000000001c000000000000000000000008000000b8d310022408db345f277754d323440594"], 0x85}, 0x0) [ 1420.943837][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x400300}, 0x0) [ 1421.024198][ T28] audit: type=1400 audit(1655510520.558:452): avc: denied { nlmsg_write } for pid=29036 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1421.059301][T29025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1421.059570][T29028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1421.093616][T29041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1421.093653][T29041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1421.238708][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1421.253461][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1421.348681][ T3695] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1421.702500][ T3695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1421.702545][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.702564][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.702579][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1421.702603][ T3695] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1421.702619][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.704250][ T3695] usb 3-1: config 0 descriptor?? [ 1422.184338][ T3695] appleir 0003:05AC:8243.00CC: unknown main item tag 0x0 [ 1422.184851][ T3695] appleir 0003:05AC:8243.00CC: No inputs registered, leaving [ 1422.190195][ T3695] appleir 0003:05AC:8243.00CC: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1422.763721][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.763770][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.542513][T18395] usb 3-1: reset high-speed USB device number 67 using dummy_hcd 00:02:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f514c14c3a745a4aef2e91c88d4a53188e20fbae678acbde22f378c8ded181fa7d35913fb6bc88536bd4428c97158947e42fd379f2b96580d5787c9d0cdd82"}, 0x80, 0x0}, 0x0) 00:02:03 executing program 5: prctl$PR_SET_PDEATHSIG(0x19, 0x0) 00:02:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf0ffff}, 0x0) 00:02:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6c00) 00:02:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x760c0000) 00:02:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (rerun: 32) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000001240)={{0x1, 0x3, 0x358, 0x2, 0x1, 0x2}, 0x1f1, [0x80000000, 0x401, 0x5, 0x1, 0x9, 0x1f, 0x1f, 0x10000, 0x10000, 0x80000000, 0x5, 0x81, 0xff, 0xfffffff0, 0x7, 0x80000001, 0x9, 0x3f, 0x6, 0x3ff, 0x8b5, 0x6, 0x7fff, 0x10001, 0x0, 0x1, 0x2800000, 0xe2c7f3b, 0x2, 0x7fffffff, 0x70f, 0x1, 0x0, 0x2, 0xfffffffa, 0x8, 0x10001, 0x1, 0x1cd0, 0x6, 0x821, 0xb8, 0x40000, 0x2, 0x4, 0x2, 0xfffff801, 0x4, 0x8000, 0x0, 0x0, 0x1ff, 0x3, 0x1, 0x4, 0x2, 0xab, 0x300000, 0x5, 0x7fff, 0x4, 0x80000, 0x8, 0x800, 0x3, 0x80, 0x7, 0x3, 0x7, 0x708, 0x3f, 0x2, 0xfffffffc, 0x3448, 0x6, 0x6508, 0x8, 0x2d, 0x1, 0xfffffbff, 0xff, 0x20, 0x40, 0x7ff, 0xfff, 0x0, 0x9, 0x777f, 0x2, 0x2, 0x3, 0x5, 0x0, 0x1, 0x80000001, 0x0, 0x1, 0x4, 0x20, 0x1f, 0x0, 0x2, 0x1, 0x2, 0x4, 0xcf3d, 0x0, 0x1, 0x5, 0x2, 0x3, 0x641, 0x9, 0xffff, 0x2, 0x19700, 0x9477, 0x10001, 0x9, 0x3, 0x800, 0x7, 0x13, 0xfffffff9, 0xffffff7f, 0xffff7fff, 0xfffffe00, 0xfff, 0x8, 0x6, 0x3f, 0x7, 0xffff, 0x10001, 0x200, 0x7, 0x8, 0xefaf, 0x7, 0xd6a0, 0xffffffe1, 0x6, 0x5fd, 0x8, 0x0, 0xa17, 0x2, 0x79c, 0x5, 0x8, 0x3, 0x4, 0x4, 0xffff, 0x800, 0x3, 0x3ff, 0xff, 0x7, 0x9, 0x3ff, 0x101, 0x7, 0x6, 0x3, 0x4, 0x0, 0x3, 0xfffffffb, 0x208d, 0xab, 0x8, 0x4, 0x200, 0xc19, 0x2, 0x80, 0x40, 0x3ff, 0x3499, 0x0, 0x6, 0x8ef, 0x3, 0x2, 0x81, 0x9, 0x7, 0x7fff, 0x400, 0x5, 0x0, 0xfffffffd, 0x5, 0x3, 0x8, 0x6, 0x7ff, 0x7, 0x0, 0xfffeffff, 0x4, 0x4, 0x10001, 0x0, 0xcf6b, 0x1, 0x9, 0xd60, 0xfffffff9, 0x8000, 0x1ff, 0x7a, 0x7ff, 0x0, 0x62ac, 0x8, 0x2, 0x4, 0x8, 0x6, 0x0, 0x4, 0x7, 0x0, 0x1, 0x8, 0x58, 0x3, 0x4, 0x5, 0xffffff29, 0x0, 0x5, 0x76bb, 0x6, 0xc77, 0x7, 0x3, 0x51cde374, 0x7, 0x100, 0x27, 0x1, 0xb828, 0x7, 0xfffeffff, 0x1, 0x1, 0xba, 0x4, 0x7ff, 0x7, 0x1, 0x377a48f6, 0x202, 0x8, 0x9, 0x2, 0x0, 0x8000, 0x359, 0xffffffff, 0x5, 0x4, 0x9445, 0xffffffff, 0x3, 0x9e6, 0xad4, 0x1, 0x9, 0x9, 0x2, 0x1ff, 0x3, 0xd77, 0xbe1, 0x6, 0x7, 0x7fff, 0x3, 0x0, 0x7, 0xffffd97c, 0x1, 0x5, 0xa86, 0x2, 0x4, 0x3f, 0x2, 0xdaf, 0x80000001, 0x8001, 0x10000, 0x9, 0x101, 0x1, 0x602, 0x7, 0xa84, 0x6, 0xf21, 0x100, 0x800, 0x292a, 0x3f, 0x8, 0x4, 0x401, 0x1f, 0x5, 0x3, 0x4, 0xbf3, 0x7, 0x4800, 0xa8, 0x7f, 0x4, 0x8, 0x3f, 0x81, 0x0, 0xe9a, 0x5, 0xcfbc, 0x9, 0xfffffbff, 0x2, 0x1, 0x8d0, 0xd1, 0xffffffff, 0xfffffffb, 0xfffffff8, 0x7, 0x6, 0x101, 0xff, 0x1, 0x85e4, 0xa2, 0x7fffffff, 0x7f, 0x0, 0xd8f, 0x2, 0x14bb, 0x7, 0x400, 0x6, 0x8, 0xcf, 0x2, 0x1ff, 0x5, 0x7, 0x7fff, 0x1, 0xd042, 0xffff7fb2, 0xfffffffb, 0x10000, 0x40, 0x4760, 0x3, 0x8e07, 0x3, 0x6, 0x1, 0x2, 0x3ff, 0x7f, 0x40, 0x1, 0x4, 0xfff, 0x1ff, 0xffff0000, 0x4, 0x401, 0x96f, 0x9, 0xfffffeff, 0x8, 0x0, 0x1, 0x8, 0xfffffffe, 0x3, 0xfffffff9, 0x1, 0x6, 0x401, 0x100, 0xff, 0x6, 0x101, 0x0, 0x3, 0x7e, 0x4, 0x7f, 0x1, 0x20, 0x1ff, 0x43471269, 0x4, 0x9, 0x2e1, 0x9, 0x9, 0x200, 0x6, 0x2, 0xff1f, 0x20, 0x6, 0x17, 0x2, 0x1, 0x6b, 0x8, 0x6, 0x6, 0x80000001, 0x10000, 0x9, 0x5, 0x23b1, 0x3ff, 0x8, 0x5a6, 0xfe, 0x6d, 0x957c, 0x8, 0x1, 0x8001, 0x800, 0x8, 0x56d4, 0x1, 0x2, 0x2, 0x3, 0x100, 0xc3d, 0x5, 0x1, 0x2, 0x5, 0x0, 0x7fffffff, 0x800, 0x8, 0x3ff, 0x81, 0x638, 0x3, 0x4, 0x401, 0xba6, 0xfffffffe, 0x3ff, 0xaa, 0x3f, 0x1de, 0xfffff13f, 0x9, 0x2, 0x3ff, 0x3, 0x2, 0x80, 0x40, 0x5, 0x8, 0x1a1, 0x8b, 0x80, 0x2, 0x8, 0x80, 0x8, 0x8, 0x7, 0xd3, 0x9f, 0x9, 0x7, 0x6, 0x40, 0x3, 0x3, 0xffffffff, 0xc2, 0x200, 0x8, 0x6, 0x4, 0x2, 0x6, 0xa99, 0x1706, 0x9, 0x40000000, 0x3, 0x1, 0x9, 0xffffffff, 0x8, 0xc40, 0x1, 0x3f, 0x401, 0x3, 0x10000, 0xa6a, 0x7fffffff, 0x4, 0x7, 0x516, 0xfffffc01, 0x1, 0x0, 0x7, 0x9c9, 0x1, 0x1ff, 0x0, 0x3, 0x4, 0x9, 0x6, 0x6, 0x0, 0x9, 0x6, 0x6, 0x800, 0x5, 0x3ff, 0x6, 0xd4a, 0xffff8000, 0x1, 0x0, 0x8001, 0x844f, 0x10001, 0xffff, 0xffffff80, 0x1a, 0x63, 0x5, 0x7, 0x2, 0x1, 0xed9, 0x2, 0x7, 0x6, 0x3f, 0x0, 0xff, 0x7fff800, 0x0, 0x996a, 0x7, 0x9, 0xadd, 0xa77, 0x1, 0x3, 0x6, 0x9, 0x1000, 0x2, 0x2, 0xe3e, 0x0, 0x0, 0x7f, 0x1, 0x81, 0xfffffff9, 0x7, 0x0, 0x8000, 0xffffffff, 0x101, 0x400, 0xfffff000, 0x1f, 0x2, 0x7, 0x6, 0x5, 0x400, 0x400, 0x81, 0x4, 0x9, 0x2, 0xd27b, 0x5, 0x8, 0xffffffff, 0x5, 0x1, 0x1f, 0xf11, 0x80000001, 0x1, 0x7, 0x2, 0x8, 0x80, 0x8, 0x1, 0x9, 0x10000, 0x4, 0xfffffffc, 0x6, 0xffff0000, 0x3, 0x8000, 0x100, 0x9, 0x3f, 0x6, 0x2, 0x6, 0x7, 0x0, 0x9, 0x6, 0x782cd564, 0xffffffff, 0x5, 0xfffffbff, 0x6fbd, 0xffff0663, 0x10000, 0x2, 0x1f, 0x9, 0x9, 0x3, 0x401, 0x7f, 0x5ae, 0x7, 0x6, 0x9, 0x2, 0x6, 0x7, 0x9d, 0x9, 0x8, 0x100, 0x1, 0x40, 0x4, 0x20000000, 0x0, 0x0, 0x6, 0x4216, 0x10001, 0x44, 0xec9, 0x5, 0x3, 0x3, 0x800, 0x10000, 0x8, 0x716, 0x29955127, 0x7fff, 0x8e40, 0x2, 0x8, 0x1, 0x0, 0xffff, 0x4, 0xb31, 0x3, 0x18c3, 0xffffffff, 0x1, 0x27, 0x200, 0x4, 0x1, 0x2, 0x1, 0x0, 0x4, 0x1f, 0x1ff, 0xaaa, 0x0, 0x0, 0x3, 0x80000000, 0x33, 0x7, 0x8, 0x7fffffff, 0x70, 0x2, 0xcc, 0xe1a, 0x93, 0x8, 0x6, 0xffff0f5e, 0x9, 0xfff, 0x76, 0x400, 0xb10, 0x8, 0x9, 0x3, 0x4, 0x4, 0x80000000, 0x100, 0x3, 0xc6f71b, 0x0, 0x18, 0x0, 0x8000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2e, 0x0, 0xfffffffa, 0x101, 0x80000000, 0x25, 0x2, 0x5, 0x88a, 0x3, 0x7, 0x10001, 0x3ff, 0x200, 0x81, 0x1, 0x6, 0x8a, 0xfffffffb, 0x1, 0x6, 0xffff082b, 0x40, 0x5, 0x2, 0x2, 0x1c6, 0x0, 0x9, 0x66, 0x7fff, 0x4, 0x1, 0x7, 0x5, 0x7558, 0x7, 0x7, 0x0, 0xfffff001, 0x9, 0x9, 0x2f29265e, 0x2, 0x7, 0x4, 0xffffffe0, 0x8, 0xc9, 0x1, 0x5, 0x7, 0x747, 0x5, 0x0, 0xba80, 0x1, 0x7ff, 0x0, 0x1, 0x42, 0x1f, 0x1, 0x0, 0xfffff800, 0xffffc0d1, 0x0, 0x2, 0x6, 0x78, 0x800, 0xff, 0xfffffff8, 0x3, 0x0, 0x7, 0x7, 0x4, 0xffffffff, 0x1, 0x1, 0x7e2c, 0x400, 0x400, 0x1, 0x61d7, 0x5, 0x93b22836, 0x3, 0x7f, 0x1, 0xa7d8, 0x3, 0xfff, 0x75f6, 0x3, 0x1, 0x8, 0x3, 0xfffffffe, 0x8001, 0x80000001, 0x400, 0xfffffffb, 0x8, 0x9, 0x1000, 0xfffffffc, 0x8001, 0x7, 0x4, 0x1, 0x4, 0x0, 0x953, 0x4, 0x0, 0x5, 0x3, 0x5, 0x1f, 0xba19, 0x80000001, 0x3, 0x1, 0x38, 0x7, 0x1, 0x8001, 0x1, 0x7ff, 0x8, 0x4, 0x9, 0xd92, 0x9, 0x1, 0x5, 0x10001, 0x3, 0x2, 0x3, 0x7ff, 0x4f6e, 0x3, 0x4, 0x4, 0x1f, 0x5, 0xffffffff, 0x7, 0x725e, 0xffffffff, 0xf48, 0x5, 0x3ff, 0x5, 0x7, 0x101, 0x7d8, 0x5, 0x0, 0x7fff, 0x1f, 0x6, 0xff, 0x6, 0x6, 0x2, 0x401, 0x5f, 0x7, 0xfff, 0x9, 0x5, 0xca, 0x1, 0xb1d2, 0x40, 0x7, 0x9, 0x7, 0x68, 0x3, 0x6, 0x3, 0x1, 0x7fff, 0x7fffffff, 0xfffffffe, 0x0, 0x5, 0x68f1, 0x8, 0xfffffffd, 0x200, 0xff, 0x1, 0x457, 0x5, 0x2, 0xfff, 0x101, 0xff, 0x1, 0x10000, 0x400, 0xfffffff9, 0x4000000, 0x86, 0x496d, 0x200, 0x8, 0x7, 0xb9, 0xf6, 0x8, 0x47b, 0x2, 0xffffff69, 0x80000001, 0xffff, 0x1427, 0x0, 0xb2, 0x6, 0x1ff, 0x1000, 0x5, 0x0, 0x0, 0x3, 0x10000, 0xab5e, 0x8, 0xffff0001, 0x382ee10f, 0x6, 0x9cd7, 0x357, 0x2, 0x4, 0x8000, 0x3, 0x10000, 0x4, 0x3f, 0x1f, 0x8, 0x8001, 0x0, 0x6, 0x910b, 0x6, 0x9, 0x10000, 0x7fff, 0x0, 0x0, 0xb371, 0x3, 0x0, 0x7, 0xaf, 0x8, 0x9, 0x0, 0xfffffff8, 0xffffb98d, 0x800, 0xffffff27, 0x1ff, 0x9, 0x2, 0xfd2, 0xb9]}) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (rerun: 32) 00:02:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x1000000}, 0x0) 00:02:03 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001340)={0x14, 0x15, 0x1}, 0x14}}, 0x0) 00:02:03 executing program 5: prctl$PR_SET_PDEATHSIG(0x7, 0x0) [ 1424.010825][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1424.010862][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7a000000) 00:02:03 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 00:02:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x1, 0x0) 00:02:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x2000000}, 0x0) 00:02:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7400) 00:02:03 executing program 0: prctl$PR_SET_PDEATHSIG(0xf, 0x20000000) 00:02:03 executing program 5: prctl$PR_SET_PDEATHSIG(0x3a, 0x8000000000001c) 00:02:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x3000000}, 0x0) [ 1424.442510][T18395] usb 3-1: device descriptor read/64, error -71 [ 1424.712415][T18395] usb 3-1: reset high-speed USB device number 67 using dummy_hcd 00:02:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000001240)={{0x1, 0x3, 0x358, 0x2, 0x1, 0x2}, 0x1f1, [0x80000000, 0x401, 0x5, 0x1, 0x9, 0x1f, 0x1f, 0x10000, 0x10000, 0x80000000, 0x5, 0x81, 0xff, 0xfffffff0, 0x7, 0x80000001, 0x9, 0x3f, 0x6, 0x3ff, 0x8b5, 0x6, 0x7fff, 0x10001, 0x0, 0x1, 0x2800000, 0xe2c7f3b, 0x2, 0x7fffffff, 0x70f, 0x1, 0x0, 0x2, 0xfffffffa, 0x8, 0x10001, 0x1, 0x1cd0, 0x6, 0x821, 0xb8, 0x40000, 0x2, 0x4, 0x2, 0xfffff801, 0x4, 0x8000, 0x0, 0x0, 0x1ff, 0x3, 0x1, 0x4, 0x2, 0xab, 0x300000, 0x5, 0x7fff, 0x4, 0x80000, 0x8, 0x800, 0x3, 0x80, 0x7, 0x3, 0x7, 0x708, 0x3f, 0x2, 0xfffffffc, 0x3448, 0x6, 0x6508, 0x8, 0x2d, 0x1, 0xfffffbff, 0xff, 0x20, 0x40, 0x7ff, 0xfff, 0x0, 0x9, 0x777f, 0x2, 0x2, 0x3, 0x5, 0x0, 0x1, 0x80000001, 0x0, 0x1, 0x4, 0x20, 0x1f, 0x0, 0x2, 0x1, 0x2, 0x4, 0xcf3d, 0x0, 0x1, 0x5, 0x2, 0x3, 0x641, 0x9, 0xffff, 0x2, 0x19700, 0x9477, 0x10001, 0x9, 0x3, 0x800, 0x7, 0x13, 0xfffffff9, 0xffffff7f, 0xffff7fff, 0xfffffe00, 0xfff, 0x8, 0x6, 0x3f, 0x7, 0xffff, 0x10001, 0x200, 0x7, 0x8, 0xefaf, 0x7, 0xd6a0, 0xffffffe1, 0x6, 0x5fd, 0x8, 0x0, 0xa17, 0x2, 0x79c, 0x5, 0x8, 0x3, 0x4, 0x4, 0xffff, 0x800, 0x3, 0x3ff, 0xff, 0x7, 0x9, 0x3ff, 0x101, 0x7, 0x6, 0x3, 0x4, 0x0, 0x3, 0xfffffffb, 0x208d, 0xab, 0x8, 0x4, 0x200, 0xc19, 0x2, 0x80, 0x40, 0x3ff, 0x3499, 0x0, 0x6, 0x8ef, 0x3, 0x2, 0x81, 0x9, 0x7, 0x7fff, 0x400, 0x5, 0x0, 0xfffffffd, 0x5, 0x3, 0x8, 0x6, 0x7ff, 0x7, 0x0, 0xfffeffff, 0x4, 0x4, 0x10001, 0x0, 0xcf6b, 0x1, 0x9, 0xd60, 0xfffffff9, 0x8000, 0x1ff, 0x7a, 0x7ff, 0x0, 0x62ac, 0x8, 0x2, 0x4, 0x8, 0x6, 0x0, 0x4, 0x7, 0x0, 0x1, 0x8, 0x58, 0x3, 0x4, 0x5, 0xffffff29, 0x0, 0x5, 0x76bb, 0x6, 0xc77, 0x7, 0x3, 0x51cde374, 0x7, 0x100, 0x27, 0x1, 0xb828, 0x7, 0xfffeffff, 0x1, 0x1, 0xba, 0x4, 0x7ff, 0x7, 0x1, 0x377a48f6, 0x202, 0x8, 0x9, 0x2, 0x0, 0x8000, 0x359, 0xffffffff, 0x5, 0x4, 0x9445, 0xffffffff, 0x3, 0x9e6, 0xad4, 0x1, 0x9, 0x9, 0x2, 0x1ff, 0x3, 0xd77, 0xbe1, 0x6, 0x7, 0x7fff, 0x3, 0x0, 0x7, 0xffffd97c, 0x1, 0x5, 0xa86, 0x2, 0x4, 0x3f, 0x2, 0xdaf, 0x80000001, 0x8001, 0x10000, 0x9, 0x101, 0x1, 0x602, 0x7, 0xa84, 0x6, 0xf21, 0x100, 0x800, 0x292a, 0x3f, 0x8, 0x4, 0x401, 0x1f, 0x5, 0x3, 0x4, 0xbf3, 0x7, 0x4800, 0xa8, 0x7f, 0x4, 0x8, 0x3f, 0x81, 0x0, 0xe9a, 0x5, 0xcfbc, 0x9, 0xfffffbff, 0x2, 0x1, 0x8d0, 0xd1, 0xffffffff, 0xfffffffb, 0xfffffff8, 0x7, 0x6, 0x101, 0xff, 0x1, 0x85e4, 0xa2, 0x7fffffff, 0x7f, 0x0, 0xd8f, 0x2, 0x14bb, 0x7, 0x400, 0x6, 0x8, 0xcf, 0x2, 0x1ff, 0x5, 0x7, 0x7fff, 0x1, 0xd042, 0xffff7fb2, 0xfffffffb, 0x10000, 0x40, 0x4760, 0x3, 0x8e07, 0x3, 0x6, 0x1, 0x2, 0x3ff, 0x7f, 0x40, 0x1, 0x4, 0xfff, 0x1ff, 0xffff0000, 0x4, 0x401, 0x96f, 0x9, 0xfffffeff, 0x8, 0x0, 0x1, 0x8, 0xfffffffe, 0x3, 0xfffffff9, 0x1, 0x6, 0x401, 0x100, 0xff, 0x6, 0x101, 0x0, 0x3, 0x7e, 0x4, 0x7f, 0x1, 0x20, 0x1ff, 0x43471269, 0x4, 0x9, 0x2e1, 0x9, 0x9, 0x200, 0x6, 0x2, 0xff1f, 0x20, 0x6, 0x17, 0x2, 0x1, 0x6b, 0x8, 0x6, 0x6, 0x80000001, 0x10000, 0x9, 0x5, 0x23b1, 0x3ff, 0x8, 0x5a6, 0xfe, 0x6d, 0x957c, 0x8, 0x1, 0x8001, 0x800, 0x8, 0x56d4, 0x1, 0x2, 0x2, 0x3, 0x100, 0xc3d, 0x5, 0x1, 0x2, 0x5, 0x0, 0x7fffffff, 0x800, 0x8, 0x3ff, 0x81, 0x638, 0x3, 0x4, 0x401, 0xba6, 0xfffffffe, 0x3ff, 0xaa, 0x3f, 0x1de, 0xfffff13f, 0x9, 0x2, 0x3ff, 0x3, 0x2, 0x80, 0x40, 0x5, 0x8, 0x1a1, 0x8b, 0x80, 0x2, 0x8, 0x80, 0x8, 0x8, 0x7, 0xd3, 0x9f, 0x9, 0x7, 0x6, 0x40, 0x3, 0x3, 0xffffffff, 0xc2, 0x200, 0x8, 0x6, 0x4, 0x2, 0x6, 0xa99, 0x1706, 0x9, 0x40000000, 0x3, 0x1, 0x9, 0xffffffff, 0x8, 0xc40, 0x1, 0x3f, 0x401, 0x3, 0x10000, 0xa6a, 0x7fffffff, 0x4, 0x7, 0x516, 0xfffffc01, 0x1, 0x0, 0x7, 0x9c9, 0x1, 0x1ff, 0x0, 0x3, 0x4, 0x9, 0x6, 0x6, 0x0, 0x9, 0x6, 0x6, 0x800, 0x5, 0x3ff, 0x6, 0xd4a, 0xffff8000, 0x1, 0x0, 0x8001, 0x844f, 0x10001, 0xffff, 0xffffff80, 0x1a, 0x63, 0x5, 0x7, 0x2, 0x1, 0xed9, 0x2, 0x7, 0x6, 0x3f, 0x0, 0xff, 0x7fff800, 0x0, 0x996a, 0x7, 0x9, 0xadd, 0xa77, 0x1, 0x3, 0x6, 0x9, 0x1000, 0x2, 0x2, 0xe3e, 0x0, 0x0, 0x7f, 0x1, 0x81, 0xfffffff9, 0x7, 0x0, 0x8000, 0xffffffff, 0x101, 0x400, 0xfffff000, 0x1f, 0x2, 0x7, 0x6, 0x5, 0x400, 0x400, 0x81, 0x4, 0x9, 0x2, 0xd27b, 0x5, 0x8, 0xffffffff, 0x5, 0x1, 0x1f, 0xf11, 0x80000001, 0x1, 0x7, 0x2, 0x8, 0x80, 0x8, 0x1, 0x9, 0x10000, 0x4, 0xfffffffc, 0x6, 0xffff0000, 0x3, 0x8000, 0x100, 0x9, 0x3f, 0x6, 0x2, 0x6, 0x7, 0x0, 0x9, 0x6, 0x782cd564, 0xffffffff, 0x5, 0xfffffbff, 0x6fbd, 0xffff0663, 0x10000, 0x2, 0x1f, 0x9, 0x9, 0x3, 0x401, 0x7f, 0x5ae, 0x7, 0x6, 0x9, 0x2, 0x6, 0x7, 0x9d, 0x9, 0x8, 0x100, 0x1, 0x40, 0x4, 0x20000000, 0x0, 0x0, 0x6, 0x4216, 0x10001, 0x44, 0xec9, 0x5, 0x3, 0x3, 0x800, 0x10000, 0x8, 0x716, 0x29955127, 0x7fff, 0x8e40, 0x2, 0x8, 0x1, 0x0, 0xffff, 0x4, 0xb31, 0x3, 0x18c3, 0xffffffff, 0x1, 0x27, 0x200, 0x4, 0x1, 0x2, 0x1, 0x0, 0x4, 0x1f, 0x1ff, 0xaaa, 0x0, 0x0, 0x3, 0x80000000, 0x33, 0x7, 0x8, 0x7fffffff, 0x70, 0x2, 0xcc, 0xe1a, 0x93, 0x8, 0x6, 0xffff0f5e, 0x9, 0xfff, 0x76, 0x400, 0xb10, 0x8, 0x9, 0x3, 0x4, 0x4, 0x80000000, 0x100, 0x3, 0xc6f71b, 0x0, 0x18, 0x0, 0x8000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2e, 0x0, 0xfffffffa, 0x101, 0x80000000, 0x25, 0x2, 0x5, 0x88a, 0x3, 0x7, 0x10001, 0x3ff, 0x200, 0x81, 0x1, 0x6, 0x8a, 0xfffffffb, 0x1, 0x6, 0xffff082b, 0x40, 0x5, 0x2, 0x2, 0x1c6, 0x0, 0x9, 0x66, 0x7fff, 0x4, 0x1, 0x7, 0x5, 0x7558, 0x7, 0x7, 0x0, 0xfffff001, 0x9, 0x9, 0x2f29265e, 0x2, 0x7, 0x4, 0xffffffe0, 0x8, 0xc9, 0x1, 0x5, 0x7, 0x747, 0x5, 0x0, 0xba80, 0x1, 0x7ff, 0x0, 0x1, 0x42, 0x1f, 0x1, 0x0, 0xfffff800, 0xffffc0d1, 0x0, 0x2, 0x6, 0x78, 0x800, 0xff, 0xfffffff8, 0x3, 0x0, 0x7, 0x7, 0x4, 0xffffffff, 0x1, 0x1, 0x7e2c, 0x400, 0x400, 0x1, 0x61d7, 0x5, 0x93b22836, 0x3, 0x7f, 0x1, 0xa7d8, 0x3, 0xfff, 0x75f6, 0x3, 0x1, 0x8, 0x3, 0xfffffffe, 0x8001, 0x80000001, 0x400, 0xfffffffb, 0x8, 0x9, 0x1000, 0xfffffffc, 0x8001, 0x7, 0x4, 0x1, 0x4, 0x0, 0x953, 0x4, 0x0, 0x5, 0x3, 0x5, 0x1f, 0xba19, 0x80000001, 0x3, 0x1, 0x38, 0x7, 0x1, 0x8001, 0x1, 0x7ff, 0x8, 0x4, 0x9, 0xd92, 0x9, 0x1, 0x5, 0x10001, 0x3, 0x2, 0x3, 0x7ff, 0x4f6e, 0x3, 0x4, 0x4, 0x1f, 0x5, 0xffffffff, 0x7, 0x725e, 0xffffffff, 0xf48, 0x5, 0x3ff, 0x5, 0x7, 0x101, 0x7d8, 0x5, 0x0, 0x7fff, 0x1f, 0x6, 0xff, 0x6, 0x6, 0x2, 0x401, 0x5f, 0x7, 0xfff, 0x9, 0x5, 0xca, 0x1, 0xb1d2, 0x40, 0x7, 0x9, 0x7, 0x68, 0x3, 0x6, 0x3, 0x1, 0x7fff, 0x7fffffff, 0xfffffffe, 0x0, 0x5, 0x68f1, 0x8, 0xfffffffd, 0x200, 0xff, 0x1, 0x457, 0x5, 0x2, 0xfff, 0x101, 0xff, 0x1, 0x10000, 0x400, 0xfffffff9, 0x4000000, 0x86, 0x496d, 0x200, 0x8, 0x7, 0xb9, 0xf6, 0x8, 0x47b, 0x2, 0xffffff69, 0x80000001, 0xffff, 0x1427, 0x0, 0xb2, 0x6, 0x1ff, 0x1000, 0x5, 0x0, 0x0, 0x3, 0x10000, 0xab5e, 0x8, 0xffff0001, 0x382ee10f, 0x6, 0x9cd7, 0x357, 0x2, 0x4, 0x8000, 0x3, 0x10000, 0x4, 0x3f, 0x1f, 0x8, 0x8001, 0x0, 0x6, 0x910b, 0x6, 0x9, 0x10000, 0x7fff, 0x0, 0x0, 0xb371, 0x3, 0x0, 0x7, 0xaf, 0x8, 0x9, 0x0, 0xfffffff8, 0xffffb98d, 0x800, 0xffffff27, 0x1ff, 0x9, 0x2, 0xfd2, 0xb9]}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000001240)={{0x1, 0x3, 0x358, 0x2, 0x1, 0x2}, 0x1f1, [0x80000000, 0x401, 0x5, 0x1, 0x9, 0x1f, 0x1f, 0x10000, 0x10000, 0x80000000, 0x5, 0x81, 0xff, 0xfffffff0, 0x7, 0x80000001, 0x9, 0x3f, 0x6, 0x3ff, 0x8b5, 0x6, 0x7fff, 0x10001, 0x0, 0x1, 0x2800000, 0xe2c7f3b, 0x2, 0x7fffffff, 0x70f, 0x1, 0x0, 0x2, 0xfffffffa, 0x8, 0x10001, 0x1, 0x1cd0, 0x6, 0x821, 0xb8, 0x40000, 0x2, 0x4, 0x2, 0xfffff801, 0x4, 0x8000, 0x0, 0x0, 0x1ff, 0x3, 0x1, 0x4, 0x2, 0xab, 0x300000, 0x5, 0x7fff, 0x4, 0x80000, 0x8, 0x800, 0x3, 0x80, 0x7, 0x3, 0x7, 0x708, 0x3f, 0x2, 0xfffffffc, 0x3448, 0x6, 0x6508, 0x8, 0x2d, 0x1, 0xfffffbff, 0xff, 0x20, 0x40, 0x7ff, 0xfff, 0x0, 0x9, 0x777f, 0x2, 0x2, 0x3, 0x5, 0x0, 0x1, 0x80000001, 0x0, 0x1, 0x4, 0x20, 0x1f, 0x0, 0x2, 0x1, 0x2, 0x4, 0xcf3d, 0x0, 0x1, 0x5, 0x2, 0x3, 0x641, 0x9, 0xffff, 0x2, 0x19700, 0x9477, 0x10001, 0x9, 0x3, 0x800, 0x7, 0x13, 0xfffffff9, 0xffffff7f, 0xffff7fff, 0xfffffe00, 0xfff, 0x8, 0x6, 0x3f, 0x7, 0xffff, 0x10001, 0x200, 0x7, 0x8, 0xefaf, 0x7, 0xd6a0, 0xffffffe1, 0x6, 0x5fd, 0x8, 0x0, 0xa17, 0x2, 0x79c, 0x5, 0x8, 0x3, 0x4, 0x4, 0xffff, 0x800, 0x3, 0x3ff, 0xff, 0x7, 0x9, 0x3ff, 0x101, 0x7, 0x6, 0x3, 0x4, 0x0, 0x3, 0xfffffffb, 0x208d, 0xab, 0x8, 0x4, 0x200, 0xc19, 0x2, 0x80, 0x40, 0x3ff, 0x3499, 0x0, 0x6, 0x8ef, 0x3, 0x2, 0x81, 0x9, 0x7, 0x7fff, 0x400, 0x5, 0x0, 0xfffffffd, 0x5, 0x3, 0x8, 0x6, 0x7ff, 0x7, 0x0, 0xfffeffff, 0x4, 0x4, 0x10001, 0x0, 0xcf6b, 0x1, 0x9, 0xd60, 0xfffffff9, 0x8000, 0x1ff, 0x7a, 0x7ff, 0x0, 0x62ac, 0x8, 0x2, 0x4, 0x8, 0x6, 0x0, 0x4, 0x7, 0x0, 0x1, 0x8, 0x58, 0x3, 0x4, 0x5, 0xffffff29, 0x0, 0x5, 0x76bb, 0x6, 0xc77, 0x7, 0x3, 0x51cde374, 0x7, 0x100, 0x27, 0x1, 0xb828, 0x7, 0xfffeffff, 0x1, 0x1, 0xba, 0x4, 0x7ff, 0x7, 0x1, 0x377a48f6, 0x202, 0x8, 0x9, 0x2, 0x0, 0x8000, 0x359, 0xffffffff, 0x5, 0x4, 0x9445, 0xffffffff, 0x3, 0x9e6, 0xad4, 0x1, 0x9, 0x9, 0x2, 0x1ff, 0x3, 0xd77, 0xbe1, 0x6, 0x7, 0x7fff, 0x3, 0x0, 0x7, 0xffffd97c, 0x1, 0x5, 0xa86, 0x2, 0x4, 0x3f, 0x2, 0xdaf, 0x80000001, 0x8001, 0x10000, 0x9, 0x101, 0x1, 0x602, 0x7, 0xa84, 0x6, 0xf21, 0x100, 0x800, 0x292a, 0x3f, 0x8, 0x4, 0x401, 0x1f, 0x5, 0x3, 0x4, 0xbf3, 0x7, 0x4800, 0xa8, 0x7f, 0x4, 0x8, 0x3f, 0x81, 0x0, 0xe9a, 0x5, 0xcfbc, 0x9, 0xfffffbff, 0x2, 0x1, 0x8d0, 0xd1, 0xffffffff, 0xfffffffb, 0xfffffff8, 0x7, 0x6, 0x101, 0xff, 0x1, 0x85e4, 0xa2, 0x7fffffff, 0x7f, 0x0, 0xd8f, 0x2, 0x14bb, 0x7, 0x400, 0x6, 0x8, 0xcf, 0x2, 0x1ff, 0x5, 0x7, 0x7fff, 0x1, 0xd042, 0xffff7fb2, 0xfffffffb, 0x10000, 0x40, 0x4760, 0x3, 0x8e07, 0x3, 0x6, 0x1, 0x2, 0x3ff, 0x7f, 0x40, 0x1, 0x4, 0xfff, 0x1ff, 0xffff0000, 0x4, 0x401, 0x96f, 0x9, 0xfffffeff, 0x8, 0x0, 0x1, 0x8, 0xfffffffe, 0x3, 0xfffffff9, 0x1, 0x6, 0x401, 0x100, 0xff, 0x6, 0x101, 0x0, 0x3, 0x7e, 0x4, 0x7f, 0x1, 0x20, 0x1ff, 0x43471269, 0x4, 0x9, 0x2e1, 0x9, 0x9, 0x200, 0x6, 0x2, 0xff1f, 0x20, 0x6, 0x17, 0x2, 0x1, 0x6b, 0x8, 0x6, 0x6, 0x80000001, 0x10000, 0x9, 0x5, 0x23b1, 0x3ff, 0x8, 0x5a6, 0xfe, 0x6d, 0x957c, 0x8, 0x1, 0x8001, 0x800, 0x8, 0x56d4, 0x1, 0x2, 0x2, 0x3, 0x100, 0xc3d, 0x5, 0x1, 0x2, 0x5, 0x0, 0x7fffffff, 0x800, 0x8, 0x3ff, 0x81, 0x638, 0x3, 0x4, 0x401, 0xba6, 0xfffffffe, 0x3ff, 0xaa, 0x3f, 0x1de, 0xfffff13f, 0x9, 0x2, 0x3ff, 0x3, 0x2, 0x80, 0x40, 0x5, 0x8, 0x1a1, 0x8b, 0x80, 0x2, 0x8, 0x80, 0x8, 0x8, 0x7, 0xd3, 0x9f, 0x9, 0x7, 0x6, 0x40, 0x3, 0x3, 0xffffffff, 0xc2, 0x200, 0x8, 0x6, 0x4, 0x2, 0x6, 0xa99, 0x1706, 0x9, 0x40000000, 0x3, 0x1, 0x9, 0xffffffff, 0x8, 0xc40, 0x1, 0x3f, 0x401, 0x3, 0x10000, 0xa6a, 0x7fffffff, 0x4, 0x7, 0x516, 0xfffffc01, 0x1, 0x0, 0x7, 0x9c9, 0x1, 0x1ff, 0x0, 0x3, 0x4, 0x9, 0x6, 0x6, 0x0, 0x9, 0x6, 0x6, 0x800, 0x5, 0x3ff, 0x6, 0xd4a, 0xffff8000, 0x1, 0x0, 0x8001, 0x844f, 0x10001, 0xffff, 0xffffff80, 0x1a, 0x63, 0x5, 0x7, 0x2, 0x1, 0xed9, 0x2, 0x7, 0x6, 0x3f, 0x0, 0xff, 0x7fff800, 0x0, 0x996a, 0x7, 0x9, 0xadd, 0xa77, 0x1, 0x3, 0x6, 0x9, 0x1000, 0x2, 0x2, 0xe3e, 0x0, 0x0, 0x7f, 0x1, 0x81, 0xfffffff9, 0x7, 0x0, 0x8000, 0xffffffff, 0x101, 0x400, 0xfffff000, 0x1f, 0x2, 0x7, 0x6, 0x5, 0x400, 0x400, 0x81, 0x4, 0x9, 0x2, 0xd27b, 0x5, 0x8, 0xffffffff, 0x5, 0x1, 0x1f, 0xf11, 0x80000001, 0x1, 0x7, 0x2, 0x8, 0x80, 0x8, 0x1, 0x9, 0x10000, 0x4, 0xfffffffc, 0x6, 0xffff0000, 0x3, 0x8000, 0x100, 0x9, 0x3f, 0x6, 0x2, 0x6, 0x7, 0x0, 0x9, 0x6, 0x782cd564, 0xffffffff, 0x5, 0xfffffbff, 0x6fbd, 0xffff0663, 0x10000, 0x2, 0x1f, 0x9, 0x9, 0x3, 0x401, 0x7f, 0x5ae, 0x7, 0x6, 0x9, 0x2, 0x6, 0x7, 0x9d, 0x9, 0x8, 0x100, 0x1, 0x40, 0x4, 0x20000000, 0x0, 0x0, 0x6, 0x4216, 0x10001, 0x44, 0xec9, 0x5, 0x3, 0x3, 0x800, 0x10000, 0x8, 0x716, 0x29955127, 0x7fff, 0x8e40, 0x2, 0x8, 0x1, 0x0, 0xffff, 0x4, 0xb31, 0x3, 0x18c3, 0xffffffff, 0x1, 0x27, 0x200, 0x4, 0x1, 0x2, 0x1, 0x0, 0x4, 0x1f, 0x1ff, 0xaaa, 0x0, 0x0, 0x3, 0x80000000, 0x33, 0x7, 0x8, 0x7fffffff, 0x70, 0x2, 0xcc, 0xe1a, 0x93, 0x8, 0x6, 0xffff0f5e, 0x9, 0xfff, 0x76, 0x400, 0xb10, 0x8, 0x9, 0x3, 0x4, 0x4, 0x80000000, 0x100, 0x3, 0xc6f71b, 0x0, 0x18, 0x0, 0x8000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2e, 0x0, 0xfffffffa, 0x101, 0x80000000, 0x25, 0x2, 0x5, 0x88a, 0x3, 0x7, 0x10001, 0x3ff, 0x200, 0x81, 0x1, 0x6, 0x8a, 0xfffffffb, 0x1, 0x6, 0xffff082b, 0x40, 0x5, 0x2, 0x2, 0x1c6, 0x0, 0x9, 0x66, 0x7fff, 0x4, 0x1, 0x7, 0x5, 0x7558, 0x7, 0x7, 0x0, 0xfffff001, 0x9, 0x9, 0x2f29265e, 0x2, 0x7, 0x4, 0xffffffe0, 0x8, 0xc9, 0x1, 0x5, 0x7, 0x747, 0x5, 0x0, 0xba80, 0x1, 0x7ff, 0x0, 0x1, 0x42, 0x1f, 0x1, 0x0, 0xfffff800, 0xffffc0d1, 0x0, 0x2, 0x6, 0x78, 0x800, 0xff, 0xfffffff8, 0x3, 0x0, 0x7, 0x7, 0x4, 0xffffffff, 0x1, 0x1, 0x7e2c, 0x400, 0x400, 0x1, 0x61d7, 0x5, 0x93b22836, 0x3, 0x7f, 0x1, 0xa7d8, 0x3, 0xfff, 0x75f6, 0x3, 0x1, 0x8, 0x3, 0xfffffffe, 0x8001, 0x80000001, 0x400, 0xfffffffb, 0x8, 0x9, 0x1000, 0xfffffffc, 0x8001, 0x7, 0x4, 0x1, 0x4, 0x0, 0x953, 0x4, 0x0, 0x5, 0x3, 0x5, 0x1f, 0xba19, 0x80000001, 0x3, 0x1, 0x38, 0x7, 0x1, 0x8001, 0x1, 0x7ff, 0x8, 0x4, 0x9, 0xd92, 0x9, 0x1, 0x5, 0x10001, 0x3, 0x2, 0x3, 0x7ff, 0x4f6e, 0x3, 0x4, 0x4, 0x1f, 0x5, 0xffffffff, 0x7, 0x725e, 0xffffffff, 0xf48, 0x5, 0x3ff, 0x5, 0x7, 0x101, 0x7d8, 0x5, 0x0, 0x7fff, 0x1f, 0x6, 0xff, 0x6, 0x6, 0x2, 0x401, 0x5f, 0x7, 0xfff, 0x9, 0x5, 0xca, 0x1, 0xb1d2, 0x40, 0x7, 0x9, 0x7, 0x68, 0x3, 0x6, 0x3, 0x1, 0x7fff, 0x7fffffff, 0xfffffffe, 0x0, 0x5, 0x68f1, 0x8, 0xfffffffd, 0x200, 0xff, 0x1, 0x457, 0x5, 0x2, 0xfff, 0x101, 0xff, 0x1, 0x10000, 0x400, 0xfffffff9, 0x4000000, 0x86, 0x496d, 0x200, 0x8, 0x7, 0xb9, 0xf6, 0x8, 0x47b, 0x2, 0xffffff69, 0x80000001, 0xffff, 0x1427, 0x0, 0xb2, 0x6, 0x1ff, 0x1000, 0x5, 0x0, 0x0, 0x3, 0x10000, 0xab5e, 0x8, 0xffff0001, 0x382ee10f, 0x6, 0x9cd7, 0x357, 0x2, 0x4, 0x8000, 0x3, 0x10000, 0x4, 0x3f, 0x1f, 0x8, 0x8001, 0x0, 0x6, 0x910b, 0x6, 0x9, 0x10000, 0x7fff, 0x0, 0x0, 0xb371, 0x3, 0x0, 0x7, 0xaf, 0x8, 0x9, 0x0, 0xfffffff8, 0xffffb98d, 0x800, 0xffffff27, 0x1ff, 0x9, 0x2, 0xfd2, 0xb9]}) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:02:05 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000015000100000000000000000002008b0001007f5c9e8f4a7cc59e83cf771246e5b653dc8ff8f4e11e5ccdc6d4bf2904ba9b3412d0f2161163d86c0c52ea7b96bb8c33fcf71725"], 0x15c}}, 0x0) 00:02:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x81000000) 00:02:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/4\x00') 00:02:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x4000000}, 0x0) 00:02:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x750c) [ 1425.642203][ T3695] usb 3-1: USB disconnect, device number 67 00:02:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x5000000}, 0x0) 00:02:05 executing program 0: openat$vfio(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 00:02:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x88a8ffff) 00:02:05 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000015000100000000000000000002008b0001007f5c9e8f4a7cc59e83cf771246e5b653dc8ff8f4e11e5ccdc6d4bf2904ba9b3412d0f2161163d86c0c52ea7b96bb8c33fcf71725"], 0x15c}}, 0x0) 00:02:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x760c) 00:02:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x6000000}, 0x0) [ 1426.172353][ T3695] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1426.552429][ T3695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1426.552472][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.552491][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.552506][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1426.552531][ T3695] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1426.552547][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.554024][ T3695] usb 3-1: config 0 descriptor?? [ 1427.026333][ T3695] appleir 0003:05AC:8243.00CD: unknown main item tag 0x0 [ 1427.026711][ T3695] appleir 0003:05AC:8243.00CD: No inputs registered, leaving [ 1427.029145][ T3695] appleir 0003:05AC:8243.00CD: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 00:02:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{0x0, 0x2}, {0x0, 0x5354}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:02:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x90f8fcff) 00:02:07 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001340)={0x14}, 0x33fe0}}, 0x0) 00:02:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x7000000}, 0x0) 00:02:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7a00) 00:02:07 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x300}, 0x0) [ 1427.549794][T29117] Error: Driver 'raw-gadget' is already registered, aborting... [ 1427.549809][T29117] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1427.549828][T29117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.560562][ T3695] usb 3-1: USB disconnect, device number 68 00:02:07 executing program 5: prctl$PR_SET_PDEATHSIG(0xd, 0x0) [ 1427.621393][T29128] __nla_validate_parse: 18 callbacks suppressed 00:02:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x9000000}, 0x0) 00:02:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="f2dac951", 0x4}, {0x0}, {&(0x7f0000000300)='-', 0x1}], 0x3}, 0x0) 00:02:07 executing program 5: prctl$PR_SET_PDEATHSIG(0x17, 0x8000000000001c) [ 1427.621414][T29128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1427.621447][T29128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x8100) [ 1427.650390][T29130] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1427.771793][T29140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1427.771831][T29140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1427.858613][T29145] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1428.042310][ T3695] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1428.402542][ T3695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1428.402570][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.402589][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.402604][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1428.402629][ T3695] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1428.402645][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.404520][ T3695] usb 3-1: config 0 descriptor?? [ 1428.884288][ T3695] appleir 0003:05AC:8243.00CE: unknown main item tag 0x0 [ 1428.884769][ T3695] appleir 0003:05AC:8243.00CE: No inputs registered, leaving [ 1428.890123][ T3695] appleir 0003:05AC:8243.00CE: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1429.359335][T18396] usb 3-1: USB disconnect, device number 69 00:02:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf000000}, 0x0) 00:02:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x91000000) 00:02:09 executing program 5: prctl$PR_SET_PDEATHSIG(0x1c, 0x8000000000001c) 00:02:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002200)={&(0x7f0000000980)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001f40)=[{&(0x7f00000009c0)="16ae4baf4fcd4b62c5355fafa3f5d38aac1805f89a4a2e069596de09bb0d9260aff1be0ccea1dc9582499bdd02d1c8a7dcc35844a08f69c717c4d2f070f10aa54ca4a566d2598bfd86e261d678ff65f9a8b3267740e0acfe04fdf1ce267158bafc1f66a8d8ff760e499e371a765cd1684b44a05068893ca7458ac3c62b1c0c42c081716447a64d77e435d8d3863487c0522ace9b88aa163a78641d18fe5f7e661c7fda", 0xa3}, {&(0x7f0000000a80)="24e19eec596d9fdc2e12d378c2562f", 0xf}, {&(0x7f0000002040)="47898b3fe4080f848e192f9693d19e1eefbfc3704c5ddf5fbb92a3fb16171a123bc5466f10fb6455431809797d8ec4569b13d9b00f4b80c40859cc57c017b5b4eded7f317ada9788d12b8ca85d16671c97a9370cb0ec6c617ee19695a9bb24737e07000000e327e0ff422f580813b4216c908cea61000002a5a7431d8b0dd40b1d98eece54b8fef76c9aca80f1aa1e820541823d4fd7cd055e92495b1eae4374", 0xa0}, {&(0x7f0000000b80)="cac8cf6e91e345cedfb5cdc9d6581164bca75eac1e651b1675c2100a0f3323439af5147f8582fc4d6b7bfc152a4871785e7b736f3fc57ebbefad184f906ba64dfe5accf6d21266d9176d92297fe36b926dc0588eb881b597a52cbce9253c1e5ee6c5800c21ee35d453c5a3746b33", 0x6e}, {&(0x7f0000000c00)="74f561ae89f84e8b108f4af497e741f41323f89c264c5b914420d0a098ac754c954c0eba3da95c142854e1adb97ea82cf3ec8797fc30fc0c49fce57b4943122836d3b0108641dde0347be0b0f6758178457d702754ec1577e2a40e5ed58cb34277990e4430af5292d60f5e4cd1accb9b8f3d8be479", 0x75}, {&(0x7f0000000c80)="c79a49114efa6563c6613796c5da7164ceb4b7225bbe927cdfc11e55b5c77ae3b3a94199289ca23300287f1186b7cf7af7bac564208618f9538567682cf77bc567801dd8b110b8c5e391f281574ba42a2ed441b6bab13890234d64e031cf240893527e22eaf7a3d4e1bca26fd2775f82ca93096a5f8f69966bb126b52ada7094c59265c124b32ca885fc9b827dbf9d209866f4ddf46f7b1fff38bc8dca953a0f0c82f4919be55f262aebf77ed1ad0caebc12bb584bafe7edb0b3640c19bb0f799402124fbcde5f46184d5927742b43d0840b52145a1cdf5ab1c113951896c56bfa631273829593703808eebd84344bd00986a02576ef9fee07bd091f3f950495aae088dbdb960266af69ee9a2ff9063efe93f2092903ae53504692b1715d6343905b5d1538c3db292516cdcf422229f9c54a3fea544d0f21f324ce35f5ae98cebc2612ce77d5a8848adf70c8f989fa206daa9da9e5851bd65ed25f4639564210c5f9543260d8343dd1a58ab4b7fed5829addadcf6258c26ca44f4d86b4a157144f946a627bc44c11f418d08cd0404f32a4cfa298e5684d22bd04821d7ecb2b191cae903c4e6dcdf6936f78810b8685e8275c136037e9e4baf220be09e5abc47a40e6919ec4dd1da7453f6ce6c2b1613b357d274f6e1bc525c7246e475d497f0874f97685e834925450136f9c8e6621d5fb4458a95bc489a79430a51409e0c68ff1d92638d1eb3c343a167846c89ca92dea8c8d425a84c2f5523600ebcb2c064f3ae30e3b4d3b2be426015618f24e3e97be700b548aba3b20a7963d22bb57990b9dd3a81477088f87bb0268ffe448406fde1b73e47a427038c216c4e90a2e2dc1bbb6bceba34be9e23795692520abbb11c57c1bb0f1f25514fef0fb407b32e2882cdc76d66c058cc2942461d43e831c4ecf15f98be994be9f975b80fd844c06b7b3c2a853a89e2e31b3af85d96822f559ed5d644aee86fdf144f850a951308e193aa67efd57dbbec57695909181442e8f0e4a50f12e2e7488596cf596c0324526ce9b3e4c029ac44a2162a6ec07fb69176e68d66bf46353928d0ca03a32c8762e58efd6f38fbaeab3928baf76c2168e82a2ac3272e7b8d9ede89f229102d7153d2ffddc4a21bacbdb43ab5e75160efc8a5b8cf868582c96dda639966faeb7ba39fad1e38ee91e2b74289554c2560728a2913ef81f0416f69744c521a794e9ddea4f67f74e7b7da820a1b0b0f4e3106c2b55adc0e5ef519f3a28c946db8383ef4b6c22915473cc1c7b2accc03d62a42ba7d36bc7cb237c277fe763595683d652d975e1e471609218487f072479867e6d7462516b8ed9c3748c0413f5bf2faa33bb524190c52322c4cf96cfac08a826b328f6e775e0551a486214c41c4432d8597d2478adccb57a3f68a029f8c6d71065eaf5713324b550bc814ea48025b8321486c6ffa424d9c25ae702058dacc0b8b19d8a6b500edd7374ddd4519594228791ce69344bf64f055f1e2d5586e54263134bbb574c4a66e6df9200b1f3bbbe95177183d112e19ceb81e6f016d624d6d08db57d537a3e5272c5bfa5cea95ea31d97197cb876ca0b404b31aebc0cea433e16c877ddaa51d23e73fb57a29c7b20e95fa60f64e90d211a36c53b7fe23929c21aadbb78761c0fafecc31268ee7c95fcb0c97b7c803ed3b303e2824f623d9ec44530f4e8c65fb3d1cbda5e43f12ea7b440282a1e3d0ed9c3a5ab226d39166beabbf9386ef281b87936c3c0920f273b8aafe0056dbee2e6e2dddc8775985ac84e2728921d0397607319d6c420277c12dec719ac9ec4dbc2e3817031d47de848ae8b01e32a4992abd7b39edf52aededc4fd1eb430968a7e99b38eb7264e216d950179f19b9257924c38db98b22eb46188889e2e6faa44fe42a3101f5a79efbb628ad85d95a3d0744f07d0ef2905109ed4cfee5a5544609f93c25574b54456c75319f3ac5af2b5e82e42d34d1d14e0ec2587c45c55328cb0c9e19b6a6b518b28a1d73ba3308cd423ab7f8ddffd2ee91f1e4fb157e9f065f3a3a231559662b4583bd9f4107739b8455ca4b48a7a4f7f7267caf9597eb3741dc5cf16d8b0f38d43f14df95d6eb042c6078fdce756848bc995a36281ccac2654dd5f4618f80d072cc6631824ccc38e25e0d62c440e0cc1c311a289c0a778f632979bc99dde89aadfb8052296b182c9e9f367085842693ad937c69de4374f06db56fa74a6e8b5a56059078c8d3b9e9bec232fe4daf8ea815ee32ce3b17c686dbf3632c2de383e9c3567d727f53191e599fa1ac7fa575cc562dcaae74857e7e17c99fd78013803d12c19eea8951f562247d6e19faa8e0e967f30600096e10a57a63e2035b8957b69171d6a3379d129d8fb2ec3019689a70d748a18ef78c46e96a2dbb9ee8f4d6f7c5617e997868f9de58d200fac8e303c4ce621bd71bfa7e3ea6c5a0fcfa05b38e3a353d442673413d0a7f4f584910288b58bd9ebbeffac0f82547973e384d57a2727fb408f1a093e6d2143a9907c97efd656f7c30acfecc0a0c9561efe414a31e6ae0774b1c85d1d64334f5541bddce1741623ba87c48a826056145e292f3bd3cff984f75a14c35f5a8e6ec3267dd7eb395e0b4707d35919bd0a09f0e85c348e87064155b60591b5de74f0d3af04e0a00fba11e971f1d18f5e03d2112dd54235e1505b9cb929fce102aee7d3db7d2c25f1961928a2e92b99d4cbfb65a8c5e8bf6c3b80ba51ac2948aca3ef09b8e7d749ece19fbb88931416182b9e3ed25c1069527fff6276851ca4d2e5aabca917945dfe41160643fcdaf03d795f857451d286f390002559dcb25dcc08bf3d4cdcb53c25193b2820a799c0d49a89906fefe28db15763159eff7c70233dd40753e0b3ce893567ac98791a6f3210c384ff26df5c481230ebe38209a515fd6e1a997880b9a45e78f0ce207bc13b2a02663e02a15a3565642d17f684cd5877e5e1357fb3c7ad659ce77916b0f9a437ddb4dc2e8adf180fc1236bd496e73fadd02634f668f641a8b8cb266d8e87f87600ba617d9e8b8fb7bf348023749b69417ada79603e8d0f1916e980f068f3cc69995c8ac432d1865aad95a5de77c78607ebe03091a07a0e5f58647bde0496f7d2e6b1e7e126638f54c8c7b0ca34f9a01236663939b8d5dc3f1ae6aace6d0e117cd322bde11b657a183fceab5352fd38046aff2002607906340010bc3ad71a040a38e4e5d2581e5332737e91f1d162bc036d8b36e996fff23b60529e635e1322fef7b29691502024a11f0f331806fffc521060133f532c4269cfa2ab9b75e401600d3dbae4b1746d0822cb6802445c69202f86f7308b66e60f51131cc3f61711d1fbd9761ae9daff98a61c0182452e1af7d16e21740e51360fc2dbf3589547b095bcde777f285fa4591d6a83737ae2bb47db42784e6f02a1a37247090aa5e4f18d9f9409a5440e769410710e544fc3722b2ccfda52af6c2f9191b5690ee834c19ff8c44c752037704fb51e7a0d83e30bf8a685b6d891262d913e4ab98249830d8223643b7b6f9a3627cbd40097bf7fbd0940be9fda071d0b8340d2a7c6fd37b9336a03b508c1dca486ee51bce58383bdf313f1cccd2c450ff2fe0c11a617e99e5a423fe74752e96ff1add6d7ab0830f8ddbb90ca2aff5e713ab7630c0e1844794bd794c1e5c656cc529f297f5df931fcc0ad5a1a7020d68d98205362f1d328f6f2c08f66e9ce3cbe4924e01299341944e5d94fca29e9730067353e851be1873eee8cd09500d0467366ebb66e0cfdbb351eb056470838ccae1d59eb9b0f44a61cbdae09451998946805c09a4d8dc80e6ce77ec503bd7cf164037b9987bf5df3fb5fe008ee5521b76bf0c50d8a0ff627e291c63dcaa56b71d0391adb7bf8957c690cb31803555410edecd5ce6e3e2db2c4786c9cc479f87eb34d114cc4799b7bd94655cb72d2bb9d67b928e6b12f9e833f9513aaa56572c03c0ceb5a3fc17c8b56a4a4fbd2e320bb99d8baaec646afc80bc4b07b79902d3f188ad848a534b929adcc006971e5906966a10952c66efb5048d43b07a7225ecc8acc735b545667fd4c25a5833c628e7418f116c25534648f2c548df778fdd9c0782eabb34360ac67183c986fe11a4a0e242f6668569c1bddd95f4e901fe82d12b033198741d3f10f2b424c7b4b087c95c4c0d8b1edef5bbdd63c44a549d0807ea3c928dd5e3394e9d058b0f4effd987c9a0a1f8d1bdcdd78ebdcce017cfcb657b73edcb8562f47a6bdaf703dace2f50fcafd939e5ef6db50b4345f2b56725805b46033dec914132f40640c664218886f02c3be1fa1043d0da70616201e223edb3f096e91f5996450133869501fc5acf31fe11b6567b3b488740d3a6bc474195e4cd81374311fc9ad4a2f28ebf6d92a5366e45ee8e054a46622fe8aa0438902abfca783a119c396b483a2e7e010690ef353792e3030e7da25f05017724068b79e6716fd28786d2df2d97e94654edbe749c21605736e5b919534c3dd629ad068cb48db9272767ed08519b0e40075d63ef9655f5c88d53b15edcfc8ac66eb6beefa3df5244bb3b10842a096cbab8f180d3ec7d8a93b76825cd9dfa9a87b1ec970a8d3cf489498fd541c5778bd53124d3329cea2f53ab543da8cb56df5c735e5af932d24d92ead939ce81e623da444ff16c00b74fa715c91127006bf290023bf09ec628e6d45deff08386d870ef4854fd9aadbf406f891ebb146f1d96624057b478d2c3abc975e0d301d8527253db12885073b22a681a25ec29e15a6cbfd55ff57ed90783123527bc08dbc88b9fd72ff166a55259e34c0b846d659a74d8d5593393af04ec35df1bd6330ca954bfa557114517721b5c36f182529c789ea0e056c0b0fc49a6eaab827854f61353d5f482b49cf6c423e58d171cf196954c88b32d4a2c9b5e8aab0ef4d385213654bd8c979e007fb44b77980184034972e9e44a968d8756d739bfcac12f975166809999568c794c83a37af30a4db3d6b9608cd4b4f6ff36cd82a470ea64305cf01d930cfb27b7463f5d6c70df951732453078774c57dca89344248b4f17af2d8c7a408fdcc2b93f6820b7922ac67e4153b888be13ba790e9a8bc5d17e9827ee672171316fa8b027acfc91b8e396df441e4528bb0192e39677ef16fa5c57e02f2221d0e15de5e5ab15e97d2279f896783c2a8d81fa1da4573c3b783de35186a0eb3076d52f296591c1ba43b11a635e73df4f1106e7ecf61398aa5e6d338c56f58f075e0e73fbf61e423834eff6c9da83debd570d84ac74676ffe3482c782642cc4144d8e431d7f632d418eba8b96328a22ad79c418108471ef86d2fd6ae1b19a32b93dd1090a29a8b62e6fa584db82e38f3da9469fe2400706abcbe1e0139f4fe4fa68e937a38d552c9610f72149402ce6b68b4acbeacb97998418a88163c0219e00e969f72043593327fc8db11db4a9c7142c2d27e650f634f26a47686c8bf5cc28eaad924656633dee36190f26647dcec395cf8c69da82743fe66bf2b117c668f88977ac6e939ae61e05df0c83584c22b2230cd2fcac0e91e9466c13fd7f6ee92c72e27f95ca6497abc596f8f7c1a4364e70cd89a8fb283d8b2f23851b3cb1e5332b238f3860a83d01c5845a5d6eb1614fddbd03f1d5fea1546e5cacfea4a20f7e9486ffeb52c6c0524b400734e7ffa19de9a6c2d7cd83506320aa90bea3dcdee253d0d55d27f78d4bbdc480bd7d2a39d3999491b907734ea1daf21dd8d1963765312cfb3cd9042aeb38e2fdd2a9349b6dae9533643febdfd8a404cb", 0x1000}, {&(0x7f0000001c80)="81a44323e8cb6a7fe3101c1a2c85ad320b824b7ff77f771a92f3f1bdbc486f1b2a60ad83b9a033d39aaee574941c42455659fd9ea3927c24e5e15e217e3f83559b61cf90f743b01ae0e0b0c6000ae45df7e06fd6ce881727df0aaa54f7bbb0e4c76342ffcf8c3c152e487c7132913fd22771eb869cf8a4", 0x77}, {&(0x7f0000001d00)="7c432f1fe628c5a77fe0763acfa825cf4313b964605af60eef2cb672ced79853fb21dc3b8d90d232303ba3e89ceae71e77e7554277e1cd9c008fa3a4428e0139902f918dd5d32f177319cf27688e3e93143b0dee32832bf0e93bbdcc", 0x5c}, {&(0x7f0000001d80)="ebb8f150d6b20c3297e10c8f88d749ab8391d0bbf75bb0538e73b6d96fa349035f6eff6462fe6e48e8fbf2b2b3c76d2c6e922f9bfe308d25fa685c336c3d5906b50e87fbde1fe0ec4953548921282d49029876993f2cfe58d3a74c65faa8397e6590c688336b2740be42354130e7a9baf6d9806bbe6c690b27ab9b7ac2db499ff989312ac02b835ee04a67f612e24b4edc985b72ab6478f8f39069e51f83700898", 0xa1}, {&(0x7f0000002240)="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", 0x172}], 0xa, &(0x7f0000001e40)=[@ip_retopts={{0x0, 0x0, 0x7, {[@cipso={0x86, 0x0, 0x0, [{0x0, 0x0, "12ba937c3b0063ada1"}, {0x0, 0x0, "f9f42230055bca2a36"}, {0x0, 0x0, "9ab189dd27166eda66a2"}]}, @end]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@end, @rr={0x7, 0xb, 0x0, [@multicast1, @rand_addr]}, @rr={0x7, 0x0, 0x0, [@multicast2, @remote, @broadcast, @broadcast, @private, @broadcast, @dev]}, @noop]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x0, 0xa, "14f8f7ecab35c42d"}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x0, 0xd, "206280f1dc44b2527283af"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private}}}, @ip_ttl={{0x14}}], 0xd0}, 0x4000001) 00:02:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xa20b) 00:02:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) 00:02:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x3f000000}, 0x0) 00:02:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0xffffff7f}, 0x0) [ 1429.930903][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1429.933316][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x40030000000000}, {0x0}, {&(0x7f0000000200)="b1", 0x1}], 0x3}, 0x0) 00:02:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xad00) 00:02:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) [ 1430.062841][T29166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1430.062879][T29166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1430.222763][T18396] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1430.602863][T18396] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1430.602906][T18396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.602925][T18396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.602940][T18396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1430.602965][T18396] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1430.602981][T18396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.604402][T18396] usb 3-1: config 0 descriptor?? [ 1430.913875][T18396] appleir 0003:05AC:8243.00CF: unknown main item tag 0x0 [ 1430.914150][T18396] appleir 0003:05AC:8243.00CF: No inputs registered, leaving [ 1430.916640][T18396] appleir 0003:05AC:8243.00CF: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1431.117304][T18396] usb 3-1: USB disconnect, device number 70 00:02:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (rerun: 32) 00:02:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x48000000}, 0x0) 00:02:11 executing program 5: prctl$PR_SET_PDEATHSIG(0xf, 0x8000000000001c) 00:02:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="f2dac9", 0x3}], 0x1}, 0x0) 00:02:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe002) 00:02:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x9effffff) 00:02:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x4c000000}, 0x0) 00:02:11 executing program 5: prctl$PR_SET_PDEATHSIG(0x4, 0x0) 00:02:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x85}, 0x0) 00:02:11 executing program 5: prctl$PR_SET_PDEATHSIG(0x10, 0x0) 00:02:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf000) 00:02:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xa20b0000) [ 1431.962502][T18395] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1432.332467][T18395] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1432.332536][T18395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.332571][T18395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.332599][T18395] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1432.332644][T18395] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1432.332673][T18395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.334943][T18395] usb 3-1: config 0 descriptor?? [ 1432.804418][T18395] appleir 0003:05AC:8243.00D0: unknown main item tag 0x0 [ 1432.804937][T18395] appleir 0003:05AC:8243.00D0: No inputs registered, leaving [ 1432.809785][T18395] appleir 0003:05AC:8243.00D0: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1434.252383][ T3695] usb 3-1: reset high-speed USB device number 71 using dummy_hcd 00:02:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382e6c08162000109022400010000000009210e00000122010009058103000000000000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{0x0, 0xffffff7f00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:02:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x68000000}, 0x0) 00:02:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0) 00:02:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf401) 00:02:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe0020000) 00:02:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x6c000000}, 0x0) 00:02:14 executing program 0: prctl$PR_SET_PDEATHSIG(0x2a, 0x0) 00:02:14 executing program 5: prctl$PR_SET_PDEATHSIG(0x22, 0x0) [ 1434.724870][T29205] __nla_validate_parse: 7 callbacks suppressed [ 1434.724890][T29205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x34000) [ 1434.724922][T29205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1434.816631][T29214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x74000000}, 0x0) 00:02:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf0ffffff) [ 1434.816669][T29214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1434.911954][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1434.911994][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1435.009502][T29224] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1435.102562][ T3695] usb 3-1: device descriptor read/64, error -71 [ 1435.372343][ T3695] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 1435.652550][ T3695] usb 3-1: device firmware changed [ 1435.652968][ T5632] usb 3-1: USB disconnect, device number 71 [ 1435.822453][ T5632] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1436.192533][ T5632] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.192551][ T5632] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1436.322557][ T5632] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=c0.e6 [ 1436.322591][ T5632] usb 3-1: New USB device strings: Mfr=129, Product=98, SerialNumber=0 [ 1436.322616][ T5632] usb 3-1: Product: syz [ 1436.322634][ T5632] usb 3-1: Manufacturer: syz [ 1436.324962][ T5632] usb 3-1: config 0 descriptor?? 00:02:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 00:02:18 executing program 0: prctl$PR_SET_PDEATHSIG(0x2, 0x20000000) 00:02:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x7a000000}, 0x0) 00:02:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf5ffffff) 00:02:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382e6c08162000109022400010000000009210e00000122010009058103000000000000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:02:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x40000) 00:02:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x9effffff}, 0x0) [ 1438.486338][T18399] usb 3-1: USB disconnect, device number 72 [ 1438.515322][T29229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000200)="b1", 0x33fe0}], 0x3}, 0x0) 00:02:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x30}}], 0x1, 0x0) [ 1438.515359][T29229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1438.572313][T29234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xa71fe5d2}, 0x0) 00:02:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x400300) 00:02:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 00:02:18 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001500010000000068126777c6e1"], 0x14}}, 0x0) 00:02:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfcffffff) 00:02:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xd2e51fa7}, 0x0) 00:02:18 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)) [ 1438.883067][ T28] audit: type=1400 audit(1655510538.418:453): avc: denied { ioctl } for pid=29257 comm="syz-executor.0" path="socket:[115290]" dev="sockfs" ino=115290 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1438.952427][T18399] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1439.332532][T18399] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.332562][T18399] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1439.462507][T18399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=c0.e6 [ 1439.462529][T18399] usb 3-1: New USB device strings: Mfr=129, Product=98, SerialNumber=0 [ 1439.462543][T18399] usb 3-1: Product: syz [ 1439.462553][T18399] usb 3-1: Manufacturer: syz [ 1439.465792][T18399] usb 3-1: config 0 descriptor?? 00:02:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382e6c08162000109022400010000000009210e00000122010009058103000000000000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:02:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x3, 0x0, 0x0, 0xdca0}]}, 0x10) 00:02:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf0ffffff}, 0x0) 00:02:19 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) 00:02:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf0ffff) 00:02:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfeffffff) [ 1440.417720][ T5632] usb 3-1: USB disconnect, device number 73 00:02:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 00:02:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) [ 1440.464291][ T28] audit: type=1400 audit(1655510539.998:454): avc: denied { create } for pid=29265 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 00:02:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xfffff000}, 0x0) [ 1440.467110][ T28] audit: type=1400 audit(1655510539.998:455): avc: denied { ioctl } for pid=29265 comm="syz-executor.0" path="socket:[115976]" dev="sockfs" ino=115976 ioctlcmd=0x4540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 00:02:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x1000000) [ 1440.495009][T29269] __nla_validate_parse: 7 callbacks suppressed [ 1440.495027][T29269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1440.495060][T29269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xffffff7f}, 0x0) 00:02:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x401c5820, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 1440.602642][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1440.602680][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1440.686772][T29282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1440.714359][T29284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1440.714396][T29284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1440.932692][ T5632] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1441.302418][ T5632] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.302437][ T5632] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1441.422490][ T5632] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=c0.e6 [ 1441.422513][ T5632] usb 3-1: New USB device strings: Mfr=129, Product=98, SerialNumber=0 [ 1441.422527][ T5632] usb 3-1: Product: syz [ 1441.422537][ T5632] usb 3-1: Manufacturer: syz [ 1441.424636][ T5632] usb 3-1: config 0 descriptor?? 00:02:21 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x2f, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r2) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103", @ANYRES64=r1, @ANYRES64=r0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2000000) 00:02:21 executing program 0: msgget(0x2, 0x70f) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) 00:02:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffcf808) 00:02:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 00:02:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xffffff9e}, 0x0) 00:02:21 executing program 5: socket(0x0, 0x8000f, 0x0) [ 1442.026058][T18397] usb 3-1: USB disconnect, device number 74 00:02:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 00:02:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xfffffff0}, 0x0) 00:02:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffcf890) [ 1442.087497][T29298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1442.087536][T29298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x3000000) 00:02:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5450, 0x0) [ 1442.102349][T29293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1442.552431][T18397] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1442.922696][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1442.922752][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1442.922786][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1442.922847][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1442.922877][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.924978][T18397] usb 3-1: config 0 descriptor?? [ 1443.403830][T18397] appleir 0003:05AC:8243.00D1: unknown main item tag 0x0 [ 1443.404135][T18397] appleir 0003:05AC:8243.00D1: No inputs registered, leaving [ 1443.406579][T18397] appleir 0003:05AC:8243.00D1: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 00:02:24 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x2f, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r2) (async) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103", @ANYRES64=r1, @ANYRES64=r0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (rerun: 32) 00:02:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891e, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:02:24 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 00:02:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x3000000000000}, 0x0) 00:02:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffa888) 00:02:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4000000) [ 1445.112915][T18397] usb 3-1: USB disconnect, device number 75 00:02:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x40030000000000}, 0x0) 00:02:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @private0, @local}}) 00:02:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x36}, 0x48) 00:02:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffff000) 00:02:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf0ffffffffffff}, 0x0) 00:02:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8930, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 1445.662329][T18397] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1446.032474][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1446.032521][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1446.032553][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1446.032595][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1446.032624][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.039655][T18397] usb 3-1: config 0 descriptor?? 00:02:25 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x2f, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r2) (async) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103", @ANYRES64=r1, @ANYRES64=r0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:25 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_dccp(0x2, 0x6, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 00:02:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x5000000) 00:02:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x100000000000000}, 0x0) 00:02:25 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 00:02:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffff7f) 00:02:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x401}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x71, 0x7, 0x1, 0x0, "8b98f4be3ac34f2b9f5ac7fb2efac263d442fec516479754069e177cdb539f31af7e47440969954d92d27e2498038a8f3fc36c2f28380fc2127cfe2bc7bc38dcbb060620d671ef522c15610a062162668fc698711c4b6819887a1f193d39789fa9d1fa9cfbbb3622374b8d5e1d"}]}, @NFT_MSG_NEWRULE={0xdac, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xd7c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0xd58, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xd48, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_FROM_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x55, 0x1, "6198c520b3b57c1910ebf56e9a6c5e6e1db8f9e0ea75628768a44a995e6db31a9b1ca8204b1e07f6cf09365ce7a25c9efdd1ac2e5bbc37a96001eb6d883c1fa8017cc62cdd3d8cc898e10c15812ea5b6eb"}]}, @NFTA_RANGE_TO_DATA={0x140, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "0fce3775056b733c9d85e25630ca9bfdd9e473bd1fd819011c8895ca2112204a4827c0df74e298f03e04e562f4af50337629fdfee0e7bbd9e4e965da875cbb3831b3de9039d765fa68f560142c661807dbb6eb5cad5b83f7017f2101793d8995d12f9d889a875844ee9e38d3afcc3bf71258266095a4795880230612e973419ce6b8c112c828ec790c33ae9b2e08e5be049dbcf1b3631324c8814fb6758ef374817aef54053674707966025f8631f968f2c2fe01a059cdd6af"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0xb6c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "34486d7bb08781cf580f2c878e1fab28080d21759d99d8b964f970166cf4de6b1b3e674f66587c7a11e1d74ec23d221c681dca891a01b7a9af0e681628435853e1ea596ef5e718c855300053190573a04f160b60c83605ed9eed82f4b71f75c85f6a487dc433ae62f05d149a7c5a4f00be4cb15f8aa3c86bfb7eb2aa6c7de429fb7fa17e7732878f84cdc3e500031cdefbe1fad26ed58c2bf2909c53fb8e12a3c6e568574f19331765fabb155a678dc99062558cf9ebc453cc11f6124e3a9197be87ad1962729f0d186213ab74a89b3f69bebbc5665894dee000b099ab"}, @NFTA_DATA_VALUE={0x71, 0x1, "325cf1f1b7d5c1942dae0b5dcae07e8e68728101f6d98c647caf53c02735bb9aa765cfe0c8a1418bef61eda7cc29799031b5268543e9a6388664f356fd0d9f3d6455e8889b6e7582df317bf0fd94971a0156555e849ef627db3e3fa4fde7eb9b3a4c00d06feeddf8c0339757c7"}, @NFTA_DATA_VALUE={0xa0d, 0x1, "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"}]}]}}}]}, @NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xec4}}, 0x0) 00:02:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x18, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x240, 0xffffffff, 0x120, 0x0, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'veth0_macvtap\x00', 'wg1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4, @gre_key, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, [], [], 'veth1_to_team\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@local, @icmp_id, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'gretap0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@private2, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 00:02:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x200000000000000}, 0x0) [ 1446.356264][T29349] __nla_validate_parse: 10 callbacks suppressed [ 1446.356284][T29349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:25 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, 0x0) 00:02:26 executing program 5: r0 = open(&(0x7f0000000200)='./bus\x00', 0x167a42, 0x0) r1 = syz_io_uring_setup(0x1751, &(0x7f0000000240), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd=r0, 0x0, &(0x7f0000001600)=""/102400, 0x19000}, 0x0) io_uring_enter(r1, 0x222ff, 0x0, 0x0, 0x0, 0x0) [ 1446.356317][T29349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1446.382867][T29350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6000000) [ 1446.394223][T18397] usbhid 3-1:0.0: can't add hid device: -71 [ 1446.394308][T18397] usbhid: probe of 3-1:0.0 failed with error -71 [ 1446.406575][T18397] usb 3-1: USB disconnect, device number 76 [ 1446.471173][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1446.471212][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1446.538536][ T28] audit: type=1800 audit(1655510546.068:456): pid=29364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1169 res=0 errno=0 [ 1446.587062][T29366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1446.792416][T18397] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1447.182603][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1447.182648][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1447.182682][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1447.182717][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1447.182732][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.184270][T18397] usb 3-1: config 0 descriptor?? [ 1447.484375][T18397] appleir 0003:05AC:8243.00D2: unknown main item tag 0x0 [ 1447.484892][T18397] appleir 0003:05AC:8243.00D2: No inputs registered, leaving [ 1447.489408][T18397] appleir 0003:05AC:8243.00D2: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 00:02:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x300000000000000}, 0x0) 00:02:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffff9e) 00:02:28 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000440), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 00:02:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x10000050}, 0x0) 00:02:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x3, 0x688f80) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000380)={0x0, 0x6, 0xf2, {0xf2, 0x8, "5ee038545cdb3b98ae86df2005e976bcfd9b27f29828d514782f4351279ef6b00b3b076a31c3daf84f96e7917e68e2b9e9f4af1b0a971e16aa780545224f3323410cfe916acae79af78462da0a14c53c32305963f685ba7f6fad85168f68a708097da2c959f272efaef6990f24bb139b08f44899ecf9e87ece5db8dc1abd473b38dfdd1e5703c1c56e18458f2f9e3bb9771b1dd7dd3191138e8a0fd6a8b0ad8b766098c439a1940bf88377bce11d1fe4fd13778f615c06f1151d0b37cfb573098904b6f18ce4a4ca94f88a82d3601e23baa760e3a0c26ace5cbb9b0e7c26d3dd07c9d84e8e9c2d736c9e449dd05be329"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0x31, 0xb5, "311923b4e65ff920c8df7426fe6dcce2fc7fc94cdd90a27865e786119487b3eb68d1f69424d1b2c6ef5cc1d2cc9458c8c37a903638246180c73adce4d9c25f05b735433f950f70ea733e1a16fb814c9169a9fbbc89047fa65ccf3255eee79131e2e9e60b4dcd1082131682929ea3c91583c303bf9ef02053490c177725f32bf4a59f99b8ee35d2a60b305c2f7f8648fa348e3e36bf7dbbecac4293f98c78e31f5805bcb67aa3732f7fbd8cd29539bd76daa80b3768"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x8, 0x147, 0x40000003, 0xfd, 0xcaa8, 0xff, 0x8, 0x10001, 0x5, 0x6, 0x3f}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0xfffd}}) 00:02:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7000000) [ 1449.398297][ T3332] usb 3-1: USB disconnect, device number 77 00:02:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0xd0, &(0x7f0000000280)=""/208, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:02:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x400000000000000}, 0x0) 00:02:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 1449.455897][T29373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1449.455935][T29373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffff0) [ 1449.502798][T29374] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x8000000) 00:02:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x42, 0x0, 0x0) 00:02:29 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) 00:02:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x500000000000000}, 0x0) [ 1449.585857][T29383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffff5) 00:02:29 executing program 0: r0 = memfd_secret(0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 1449.882326][ T3332] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1450.272544][ T3332] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1450.272629][ T3332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.272669][ T3332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.272696][ T3332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1450.272750][ T3332] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1450.272782][ T3332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.274912][ T3332] usb 3-1: config 0 descriptor?? [ 1450.733883][ T3332] appleir 0003:05AC:8243.00D3: unknown main item tag 0x0 [ 1450.734158][ T3332] appleir 0003:05AC:8243.00D3: No inputs registered, leaving [ 1450.737840][ T3332] appleir 0003:05AC:8243.00D3: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1451.137835][T18397] usb 3-1: USB disconnect, device number 78 00:02:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x600000000000000}, 0x0) 00:02:31 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) 00:02:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x8f8fcff) 00:02:31 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f00000000c0)=""/4096, 0x1000) 00:02:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffffc) 00:02:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x3, 0x688f80) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000380)={0x0, 0x6, 0xf2, {0xf2, 0x8, "5ee038545cdb3b98ae86df2005e976bcfd9b27f29828d514782f4351279ef6b00b3b076a31c3daf84f96e7917e68e2b9e9f4af1b0a971e16aa780545224f3323410cfe916acae79af78462da0a14c53c32305963f685ba7f6fad85168f68a708097da2c959f272efaef6990f24bb139b08f44899ecf9e87ece5db8dc1abd473b38dfdd1e5703c1c56e18458f2f9e3bb9771b1dd7dd3191138e8a0fd6a8b0ad8b766098c439a1940bf88377bce11d1fe4fd13778f615c06f1151d0b37cfb573098904b6f18ce4a4ca94f88a82d3601e23baa760e3a0c26ace5cbb9b0e7c26d3dd07c9d84e8e9c2d736c9e449dd05be329"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0x31, 0xb5, "311923b4e65ff920c8df7426fe6dcce2fc7fc94cdd90a27865e786119487b3eb68d1f69424d1b2c6ef5cc1d2cc9458c8c37a903638246180c73adce4d9c25f05b735433f950f70ea733e1a16fb814c9169a9fbbc89047fa65ccf3255eee79131e2e9e60b4dcd1082131682929ea3c91583c303bf9ef02053490c177725f32bf4a59f99b8ee35d2a60b305c2f7f8648fa348e3e36bf7dbbecac4293f98c78e31f5805bcb67aa3732f7fbd8cd29539bd76daa80b3768"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x8, 0x147, 0x40000003, 0xfd, 0xcaa8, 0xff, 0x8, 0x10001, 0x5, 0x6, 0x3f}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0xfffd}}) 00:02:31 executing program 5: futex_waitv(&(0x7f0000001a80)=[{0x0, &(0x7f0000000000), 0x2}, {0x0, 0x0, 0x2}], 0x2, 0x0, 0x0, 0x0) 00:02:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@tclass={{0x14}}], 0x18}, 0x0) 00:02:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x700000000000000}, 0x0) [ 1451.690841][T29406] __nla_validate_parse: 4 callbacks suppressed [ 1451.690861][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x900000000000000}, 0x0) 00:02:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffffe) [ 1451.690892][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) [ 1451.761150][T29413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x9000000) 00:02:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x4c, r1, 0x201, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 00:02:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf00000000000000}, 0x0) [ 1451.761187][T29413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1451.886984][T29420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0xd0, &(0x7f0000000280)=""/208, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:02:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89a0, 0x0) [ 1451.887022][T29420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1451.997944][T29429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1451.997981][T29429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1452.012483][ T3332] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1452.016485][T29426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1452.402515][ T3332] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1452.402574][ T3332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.402606][ T3332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.402632][ T3332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1452.402660][ T3332] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1452.402676][ T3332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.404981][ T3332] usb 3-1: config 0 descriptor?? 00:02:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x3, 0x688f80) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000380)={0x0, 0x6, 0xf2, {0xf2, 0x8, "5ee038545cdb3b98ae86df2005e976bcfd9b27f29828d514782f4351279ef6b00b3b076a31c3daf84f96e7917e68e2b9e9f4af1b0a971e16aa780545224f3323410cfe916acae79af78462da0a14c53c32305963f685ba7f6fad85168f68a708097da2c959f272efaef6990f24bb139b08f44899ecf9e87ece5db8dc1abd473b38dfdd1e5703c1c56e18458f2f9e3bb9771b1dd7dd3191138e8a0fd6a8b0ad8b766098c439a1940bf88377bce11d1fe4fd13778f615c06f1151d0b37cfb573098904b6f18ce4a4ca94f88a82d3601e23baa760e3a0c26ace5cbb9b0e7c26d3dd07c9d84e8e9c2d736c9e449dd05be329"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0x31, 0xb5, "311923b4e65ff920c8df7426fe6dcce2fc7fc94cdd90a27865e786119487b3eb68d1f69424d1b2c6ef5cc1d2cc9458c8c37a903638246180c73adce4d9c25f05b735433f950f70ea733e1a16fb814c9169a9fbbc89047fa65ccf3255eee79131e2e9e60b4dcd1082131682929ea3c91583c303bf9ef02053490c177725f32bf4a59f99b8ee35d2a60b305c2f7f8648fa348e3e36bf7dbbecac4293f98c78e31f5805bcb67aa3732f7fbd8cd29539bd76daa80b3768"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x8, 0x147, 0x40000003, 0xfd, 0xcaa8, 0xff, 0x8, 0x10001, 0x5, 0x6, 0x3f}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0xfffd}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000040), 0x3, 0x688f80) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000380)={0x0, 0x6, 0xf2, {0xf2, 0x8, "5ee038545cdb3b98ae86df2005e976bcfd9b27f29828d514782f4351279ef6b00b3b076a31c3daf84f96e7917e68e2b9e9f4af1b0a971e16aa780545224f3323410cfe916acae79af78462da0a14c53c32305963f685ba7f6fad85168f68a708097da2c959f272efaef6990f24bb139b08f44899ecf9e87ece5db8dc1abd473b38dfdd1e5703c1c56e18458f2f9e3bb9771b1dd7dd3191138e8a0fd6a8b0ad8b766098c439a1940bf88377bce11d1fe4fd13778f615c06f1151d0b37cfb573098904b6f18ce4a4ca94f88a82d3601e23baa760e3a0c26ace5cbb9b0e7c26d3dd07c9d84e8e9c2d736c9e449dd05be329"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0x31, 0xb5, "311923b4e65ff920c8df7426fe6dcce2fc7fc94cdd90a27865e786119487b3eb68d1f69424d1b2c6ef5cc1d2cc9458c8c37a903638246180c73adce4d9c25f05b735433f950f70ea733e1a16fb814c9169a9fbbc89047fa65ccf3255eee79131e2e9e60b4dcd1082131682929ea3c91583c303bf9ef02053490c177725f32bf4a59f99b8ee35d2a60b305c2f7f8648fa348e3e36bf7dbbecac4293f98c78e31f5805bcb67aa3732f7fbd8cd29539bd76daa80b3768"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x8, 0x147, 0x40000003, 0xfd, 0xcaa8, 0xff, 0x8, 0x10001, 0x5, 0x6, 0x3f}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0xfffd}}) (async) 00:02:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x3f00000000000000}, 0x0) 00:02:32 executing program 5: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x8) 00:02:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x10000000000) 00:02:32 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) syz_clone(0x50100000, &(0x7f00000000c0)="9abf9f2aa423381a22dda5350aa851f2a6a07d3228a4eb4c53e02e9a1e11ffe27791aa", 0x23, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="615834a76ec7ea877dfa4a5b547cb1317493f197588cbf9d0909667fe01364f05ae53dcec12a127d7a37b1e5109860f99aacd70408a24a2be32dc946252e5325d24fb6ca93a5fb7b00122fefd2f8c9c7312c2e56011cfd84201d329d581d308fee2f54be1d3d1cf42919a69ef925779989713748d84ad3bd4b13ecd50059f3acdd72e0f3e200e8") sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="10002abd7000fbdbdf2525000000080001007063690011000200303030303a3030", @ANYBLOB, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0e0001006e657464", @ANYRES32], 0xfc}}, 0x0) 00:02:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xa000000) 00:02:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x4800000000000000}, 0x0) [ 1452.700249][T29444] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:02:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:02:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x1000000000000) 00:02:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x4c00000000000000}, 0x0) [ 1452.762592][ T3332] usbhid 3-1:0.0: can't add hid device: -71 [ 1452.762715][ T3332] usbhid: probe of 3-1:0.0 failed with error -71 [ 1452.766797][ T3332] usb 3-1: USB disconnect, device number 79 00:02:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xc000000) 00:02:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8994, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 1453.192610][ T3332] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1453.590417][ T3332] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1453.590486][ T3332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.590520][ T3332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.590548][ T3332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1453.590593][ T3332] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1453.590623][ T3332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.592731][ T3332] usb 3-1: config 0 descriptor?? [ 1454.094322][ T3332] appleir 0003:05AC:8243.00D4: unknown main item tag 0x0 [ 1454.094824][ T3332] appleir 0003:05AC:8243.00D4: No inputs registered, leaving [ 1454.099115][ T3332] appleir 0003:05AC:8243.00D4: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 00:02:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="128def7c1299a6306e8901000000000040ac054382c000007ce180b907f76216b020f59862afdfacf14f9ff4ae79c400000109022400010000002f86202f27e0c2106705ff0009040000060301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x6800000000000000}, 0x0) 00:02:34 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000380), 0x2) 00:02:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0x67, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x240, 0xffffffff, 0x120, 0x0, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, 0x0, {[{{@ipv6={@private0, @local, [], [], 'veth0_macvtap\x00', 'wg1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4, @gre_key, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, [], [], 'veth1_to_team\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@local, @icmp_id, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'gretap0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@private2, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 00:02:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe000000) 00:02:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4000000000000) [ 1454.496432][T29447] Error: Driver 'raw-gadget' is already registered, aborting... [ 1454.496448][T29447] UDC core: USB Raw Gadget: driver registration failed: -16 00:02:34 executing program 0: r0 = socket(0x2, 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x10, 0x101100) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000400)=""/91) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40) r2 = socket(0x1, 0x4, 0x3) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0x1, 0x9, 0x4}], 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0xf0, 0x6, 0xdb, 0x44, @empty, @loopback, 0x0, 0x80, 0x4000003, 0x101}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000000c0)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket(0x0, 0x6, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r4) bind$x25(r4, &(0x7f0000000380)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) sendmsg$xdp(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0xe, r3, 0x27}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="c43e8c27419eb1acfd0c14d2d5b0b30b2d706b64082c528b5f23d7c51afe97789f134dca639c9cc7e419a85e5fc7a1f5695597d48e289a7eda8dff8711e3f9b5eaf0b081819cfc43afa6eec6cdb0091a206f0f1caaab59d0594ba09b", 0x5c}, {&(0x7f0000000240)="1ecf46b287c3be63078a4423f3", 0xd}, {&(0x7f0000000280)="ccddc3ad9f51246d1aa3df717b78099e9303f40690c944a3450abcfbfdf416aa8f3390509d0b4ab7446de6cb110c5066258949dcdc4263657ad4bc30fc33b68c943b2132c466142cc79753bce5116c347e9658ccc475be95f1cf6812cbad0e77cc2bf452cca853bd029a9a3b1939f01157", 0x71}], 0x3, 0x0, 0x0, 0x80}, 0x20004000) 00:02:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x6c00000000000000}, 0x0) 00:02:34 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x202402) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) [ 1454.496467][T29447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.531158][ T3332] usb 3-1: USB disconnect, device number 80 00:02:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x40030000000000) 00:02:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x7400000000000000}, 0x0) [ 1454.699990][ T28] audit: type=1400 audit(1655510554.228:457): avc: denied { setopt } for pid=29482 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 00:02:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7}, 0x48) [ 1455.042306][ T3332] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1455.232393][ T3332] usb 3-1: device descriptor read/64, error 18 [ 1455.502406][ T3332] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1455.692375][ T3332] usb 3-1: device descriptor read/64, error 18 [ 1455.824179][ T3332] usb usb3-port1: attempt power cycle [ 1456.232356][ T3332] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1456.402672][ T3332] usb 3-1: device descriptor read/8, error -61 [ 1456.672340][ T3332] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1456.842570][ T3332] usb 3-1: device descriptor read/8, error -61 [ 1456.963698][ T3332] usb usb3-port1: unable to enumerate USB device 00:02:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="128def7c1299a6306e8901000000000040ac054382c000007ce180b907f76216b020f59862afdfacf14f9ff4ae79c400000109022400010000002f86202f27e0c2106705ff0009040000060301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf000000) 00:02:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x4b49, 0x0) 00:02:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x7a00000000000000}, 0x0) 00:02:37 executing program 0: r0 = socket(0x2, 0x6, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 00:02:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf0ffffffffffff) 00:02:37 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) 00:02:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='H'], &(0x7f0000000240)='GPL\x00', 0x3, 0xd0, &(0x7f0000000280)=""/208, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1457.684102][T29504] __nla_validate_parse: 18 callbacks suppressed [ 1457.684123][T29504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x9effffff00000000}, 0x0) 00:02:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x8, &(0x7f0000000000)=@req3, 0x1c) 00:02:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x10000000) [ 1457.684155][T29504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1457.689695][T29503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x100000000000000) [ 1457.841128][T29512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1457.841167][T29512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1457.913809][T29516] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1457.954041][T29518] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1458.052584][ T3332] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1458.252356][ T3332] usb 3-1: device descriptor read/64, error 18 [ 1458.530240][ T3332] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1458.712421][ T3332] usb 3-1: device descriptor read/64, error 18 [ 1458.832511][ T3332] usb usb3-port1: attempt power cycle [ 1459.252427][ T3332] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1459.442452][ T3332] usb 3-1: device descriptor read/8, error -61 [ 1459.722403][ T3332] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1459.892495][ T3332] usb 3-1: device descriptor read/8, error -61 [ 1460.014292][ T3332] usb usb3-port1: unable to enumerate USB device 00:02:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="128def7c1299a6306e8901000000000040ac054382c000007ce180b907f76216b020f59862afdfacf14f9ff4ae79c400000109022400010000002f86202f27e0c2106705ff0009040000060301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="128def7c1299a6306e8901000000000040ac054382c000007ce180b907f76216b020f59862afdfacf14f9ff4ae79c400000109022400010000002f86202f27e0c2106705ff0009040000060301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:02:40 executing program 5: r0 = socket(0x25, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 00:02:40 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, 0x0) 00:02:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xa71fe5d200000000}, 0x0) 00:02:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x20000000) 00:02:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x200000000000000) 00:02:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='s '], 0x10) [ 1460.772311][ T28] audit: type=1400 audit(1655510560.298:458): avc: denied { write } for pid=29524 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 00:02:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:02:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xf0ffffff00000000}, 0x0) [ 1460.805277][T29526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1460.805316][T29526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x300000000000000) 00:02:40 executing program 0: r0 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r0, 0x0, 0x600) [ 1460.820642][T29529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:02:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) [ 1461.232368][T18397] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1461.422398][T18397] usb 3-1: device descriptor read/64, error 18 [ 1461.692368][T18397] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1461.882349][T18397] usb 3-1: device descriptor read/64, error 18 [ 1462.003900][T18397] usb usb3-port1: attempt power cycle [ 1462.412341][T18397] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1462.582595][T18397] usb 3-1: device descriptor read/8, error -61 [ 1462.852480][T18397] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1463.022425][T18397] usb 3-1: device descriptor read/8, error -61 [ 1463.157011][T18397] usb usb3-port1: unable to enumerate USB device 00:02:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e000022010009058103"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0xe2, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x1, 0x1, 0x80, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "4683"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x7, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0x135b, 0x40, 0x9, 0x5, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x20, 0x1, [0x1f, 0x3ff, 0x9, 0xab0e]}, @country_functional={0x12, 0x24, 0x7, 0x88, 0x0, [0x9, 0x4, 0x0, 0x8, 0x5, 0x2]}, @mdlm_detail={0x5e, 0x24, 0x13, 0x2, "f2d1980780b34bbd08b036c312e7cfce8547b6f956fbde215a74a2c53b4522620ea1d0affa22397717540df027ed519771ddd3a32fcaf33a1354902a6c2ea1ade3c2fc0e7b6b04615dd59d47e79f007dae4b07722b6e4ad1c5a6"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xa, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0xe1, 0x1}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x7, 0x2, 0x20, 0x40, 0x9}, 0xf0, &(0x7f0000000380)={0x5, 0xf, 0xf0, 0x2, [@generic={0xe1, 0x10, 0x4, "423b0c2b50a745c9d794d63604de3714b8d2a11b7b158caefd1119baa50e44763e5398c62a17bf5231eb4f3257898c1cc78505cb4e053da23b14195dad6444362582724438dbb1af6f5dbbabf8fb3ed71b9e17b65fccae9d2832a354bb2229d3496136947240376ed2077cbee4807f7026bdf46a32182ae5ca05461a922fc2cd544c2ac8aa8370b27820141234d0e70b9f3df4c5427c715ec3bc3d58d3004cc67713a679b1b3a22d9ed26e4f3c43c923f946d15113858145e11f3c97d180c84971fa66280969a83c4715326349a00284bd290ba67b02381ffe3d36aae653"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x40, 0x8, 0x5}]}, 0x1, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "828ce775fcf361ef583a28e6aa65960fb9a74d0e288be3a3c1e3e666bc41b81ef3228e9c702b880fbe31e0685482"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x24000000) 00:02:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xffffff7f00000000}, 0x0) 00:02:43 executing program 5: socket(0x22, 0x0, 0xfffffe00) 00:02:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x0, 0x0, 0x0, 0x908}, 0x48) 00:02:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x400000000000000) 00:02:43 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8915, 0x0) 00:02:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0xfffffffffffff000}, 0x0) 00:02:43 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote}, 0x0, @in=@loopback}}, 0xe8) [ 1463.829607][T29549] __nla_validate_parse: 4 callbacks suppressed [ 1463.829626][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1463.829658][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:02:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x28010000) 00:02:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x2}, 0x0) [ 1463.855488][T29550] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}) [ 1463.901608][T29551] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1463.928178][T29556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1463.928216][T29556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1464.043865][T29562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1464.282569][ T5633] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1464.652440][ T5633] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.652623][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1464.652693][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1464.652740][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1464.652770][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.664989][ T5633] usb 3-1: config 0 descriptor?? [ 1464.715942][ T5633] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1464.916450][T29555] Error: Driver 'raw-gadget' is already registered, aborting... [ 1464.916471][T29555] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1464.916491][T29555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:02:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e000022010009058103"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0xe2, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x1, 0x1, 0x80, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "4683"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x7, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0x135b, 0x40, 0x9, 0x5, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x20, 0x1, [0x1f, 0x3ff, 0x9, 0xab0e]}, @country_functional={0x12, 0x24, 0x7, 0x88, 0x0, [0x9, 0x4, 0x0, 0x8, 0x5, 0x2]}, @mdlm_detail={0x5e, 0x24, 0x13, 0x2, "f2d1980780b34bbd08b036c312e7cfce8547b6f956fbde215a74a2c53b4522620ea1d0affa22397717540df027ed519771ddd3a32fcaf33a1354902a6c2ea1ade3c2fc0e7b6b04615dd59d47e79f007dae4b07722b6e4ad1c5a6"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xa, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0xe1, 0x1}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x7, 0x2, 0x20, 0x40, 0x9}, 0xf0, &(0x7f0000000380)={0x5, 0xf, 0xf0, 0x2, [@generic={0xe1, 0x10, 0x4, "423b0c2b50a745c9d794d63604de3714b8d2a11b7b158caefd1119baa50e44763e5398c62a17bf5231eb4f3257898c1cc78505cb4e053da23b14195dad6444362582724438dbb1af6f5dbbabf8fb3ed71b9e17b65fccae9d2832a354bb2229d3496136947240376ed2077cbee4807f7026bdf46a32182ae5ca05461a922fc2cd544c2ac8aa8370b27820141234d0e70b9f3df4c5427c715ec3bc3d58d3004cc67713a679b1b3a22d9ed26e4f3c43c923f946d15113858145e11f3c97d180c84971fa66280969a83c4715326349a00284bd290ba67b02381ffe3d36aae653"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x40, 0x8, 0x5}]}, 0x1, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "828ce775fcf361ef583a28e6aa65960fb9a74d0e288be3a3c1e3e666bc41b81ef3228e9c702b880fbe31e0685482"}}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:02:46 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000000)={{0x77359400}, {0x0, r0/1000+10000}}, &(0x7f0000000040)) 00:02:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x500000000000000) 00:02:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x3}, 0x0) 00:02:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:02:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x3f000000) 00:02:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 1466.877968][ T5633] usb 3-1: USB disconnect, device number 93 00:02:46 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) 00:02:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x4}, 0x0) 00:02:46 executing program 0: futex_waitv(&(0x7f0000001a80)=[{0x0, 0x0, 0x104}], 0x1, 0x0, &(0x7f0000002480), 0x0) 00:02:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x40000000) [ 1466.946073][T29573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1466.970426][T29570] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:02:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x600000000000000) [ 1467.147859][T29592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1467.382434][ T5633] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1467.752615][ T5633] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.752655][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1467.752705][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1467.752749][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1467.752779][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.755508][ T5633] usb 3-1: config 0 descriptor?? [ 1467.802782][ T5633] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 00:02:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e000022010009058103"], 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0xe2, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x1, 0x1, 0x80, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "4683"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x7, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0x135b, 0x40, 0x9, 0x5, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x20, 0x1, [0x1f, 0x3ff, 0x9, 0xab0e]}, @country_functional={0x12, 0x24, 0x7, 0x88, 0x0, [0x9, 0x4, 0x0, 0x8, 0x5, 0x2]}, @mdlm_detail={0x5e, 0x24, 0x13, 0x2, "f2d1980780b34bbd08b036c312e7cfce8547b6f956fbde215a74a2c53b4522620ea1d0affa22397717540df027ed519771ddd3a32fcaf33a1354902a6c2ea1ade3c2fc0e7b6b04615dd59d47e79f007dae4b07722b6e4ad1c5a6"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xa, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x80, 0xe1, 0x1}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x7, 0x2, 0x20, 0x40, 0x9}, 0xf0, &(0x7f0000000380)={0x5, 0xf, 0xf0, 0x2, [@generic={0xe1, 0x10, 0x4, "423b0c2b50a745c9d794d63604de3714b8d2a11b7b158caefd1119baa50e44763e5398c62a17bf5231eb4f3257898c1cc78505cb4e053da23b14195dad6444362582724438dbb1af6f5dbbabf8fb3ed71b9e17b65fccae9d2832a354bb2229d3496136947240376ed2077cbee4807f7026bdf46a32182ae5ca05461a922fc2cd544c2ac8aa8370b27820141234d0e70b9f3df4c5427c715ec3bc3d58d3004cc67713a679b1b3a22d9ed26e4f3c43c923f946d15113858145e11f3c97d180c84971fa66280969a83c4715326349a00284bd290ba67b02381ffe3d36aae653"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x40, 0x8, 0x5}]}, 0x1, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "828ce775fcf361ef583a28e6aa65960fb9a74d0e288be3a3c1e3e666bc41b81ef3228e9c702b880fbe31e0685482"}}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:47 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={[], [{@permit_directio}]}) 00:02:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x5}, 0x0) 00:02:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @local, @mcast1}}) 00:02:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x700000000000000) 00:02:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x48000000) [ 1468.000490][T29580] Error: Driver 'raw-gadget' is already registered, aborting... [ 1468.000500][T29580] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1468.000512][T29580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.022983][ T5633] usb 3-1: USB disconnect, device number 94 00:02:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x6}, 0x0) 00:02:47 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:02:47 executing program 5: r0 = socket(0x2, 0x6, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1468.086149][T29604] tmpfs: Unknown parameter 'permit_directio' [ 1468.100411][T29608] Error: Driver 'raw-gadget' is already registered, aborting... [ 1468.100425][T29608] UDC core: USB Raw Gadget: driver registration failed: -16 00:02:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4c000000) 00:02:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x7}, 0x0) 00:02:47 executing program 0: r0 = socket(0x2, 0x6, 0x0) bind$xdp(r0, &(0x7f0000000000), 0x10) [ 1468.100442][T29608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.255597][ T28] audit: type=1400 audit(1655510567.788:459): avc: denied { read } for pid=29615 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1468.502423][ T5633] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1468.882563][ T5633] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.882589][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1468.882649][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1468.882708][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1468.882740][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.884798][ T5633] usb 3-1: config 0 descriptor?? [ 1468.936697][ T5633] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1469.142929][ T3332] usb 3-1: USB disconnect, device number 95 00:02:49 executing program 5: socket(0x23, 0x0, 0x7) 00:02:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x800000000000000) 00:02:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0xd0, &(0x7f0000000280)=""/208, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:02:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x5, 0xc9, 0x1, {0x22, 0x45c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0xc9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1f, 0x1, 0x6, 0x20, 0xf9}, 0x42, &(0x7f0000000080)={0x5, 0xf, 0x42, 0x2, [@generic={0x33, 0x10, 0x1, "1f3d496c5c2a8955c70aab4a6d8708708c9a47ce21b0bbd73c2c07576ea6578f0d551c7fa95048c1183eea9791faf5e1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x8, 0xff33}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x280a}}, {0x7e, &(0x7f0000000280)=@string={0x7e, 0x3, "b5c7346e287e66e452190dcb09fcfbcf01b9deb7f0d1e5a7e7b56bd90c2855fcba28d35cbbfb4f05f28b360aa07fa43d251b1ecd774c005ba5792aded7f377b93ea9186f97e8b1ebc936fd60db44484b81752632b6c8b0c2025e6680401a551a1c6d4ed7a13ccafcb33994602e3950793072586c2b8bd6eed764ce59"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x31, &(0x7f0000000380)=@string={0x31, 0x3, "58135681dd1aed733851a849bfc25658a47ef066e60177773f51ca80edd6242abcc5a6a76cf3653fe06846987c7ddf"}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, "a8"}}, {0x34, &(0x7f0000000400)=@string={0x34, 0x3, "6c05c725ce6788c65a09bc52125b759a616e796acbdac6bee29a59314e6350fb64ce435e1f0ad428cc76a9443821f7ac2ec7"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x481}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cade962aca310d462940e5afc91dd54e7fedccd7d482a79c0d82f1c2296fab5f4331f84267e2e37032872a0ad335d4c51b86758c3f483b0ec43dafb9715d9c3bfe3458dc74d9f52f414399cbfd8180403e3732b4fa778b3e3917ddda5bd737a1518d36067581ded1ca5f331bf0b720cdd9b0fb4a3a7e2709fed546763921567999f86a2f472fba87d2cda8be47c30ce08535265f827215b9b616c89688ebc981a4ba7ab7ebe19eba3afa507a5d24c3b4f4b00a449fdf326b53486494236df63732d98d02e779a2accd54cf917e22b5f2cb928be6ab25"}}, {0x63, &(0x7f0000000580)=@string={0x63, 0x3, "fbb9be552768d4ca1d4bd3f2879dfad8bd0bb8f92de96e176a6ec12c1e749609dd3e071212df079aa3fd44c991db91c38f2e4e01e822224d3c81593f6262a8ea36f88b361338177ec7ccb57c6fc49e061720b3e9c89ceccdbb829087d1fadc92fa"}}, {0xfc, &(0x7f0000000600)=@string={0xfc, 0x3, "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"}}]}) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x60000000) 00:02:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x9}, 0x0) 00:02:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8904, 0x0) 00:02:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf}, 0x0) 00:02:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x8f8fcff00000000) [ 1469.723716][T29628] __nla_validate_parse: 4 callbacks suppressed [ 1469.723736][T29628] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:02:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000005a40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1, &(0x7f0000000200)=[@rthdrdstopts={{0x18}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 00:02:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x65580000) [ 1469.749358][T29626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 00:02:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x48}, 0x0) 00:02:49 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1b, &(0x7f0000000740)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@remote}, 0x0, @in=@loopback}}, 0xe8) [ 1469.884691][T29643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:02:49 executing program 0: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket(0x23, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) [ 1469.960533][T29645] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1469.972475][ T5633] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1470.362573][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1470.362638][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.362668][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.362692][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1470.362733][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1470.362761][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.364839][ T5633] usb 3-1: config 0 descriptor?? [ 1470.844338][ T5633] appleir 0003:05AC:8243.00D5: unknown main item tag 0x0 [ 1470.844851][ T5633] appleir 0003:05AC:8243.00D5: No inputs registered, leaving [ 1470.848660][ T5633] appleir 0003:05AC:8243.00D5: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1472.212340][ T5633] usb 3-1: reset high-speed USB device number 96 using dummy_hcd 00:02:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x5, 0xc9, 0x1, {0x22, 0x45c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0xc9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1f, 0x1, 0x6, 0x20, 0xf9}, 0x42, &(0x7f0000000080)={0x5, 0xf, 0x42, 0x2, [@generic={0x33, 0x10, 0x1, "1f3d496c5c2a8955c70aab4a6d8708708c9a47ce21b0bbd73c2c07576ea6578f0d551c7fa95048c1183eea9791faf5e1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x8, 0xff33}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x280a}}, {0x7e, &(0x7f0000000280)=@string={0x7e, 0x3, "b5c7346e287e66e452190dcb09fcfbcf01b9deb7f0d1e5a7e7b56bd90c2855fcba28d35cbbfb4f05f28b360aa07fa43d251b1ecd774c005ba5792aded7f377b93ea9186f97e8b1ebc936fd60db44484b81752632b6c8b0c2025e6680401a551a1c6d4ed7a13ccafcb33994602e3950793072586c2b8bd6eed764ce59"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x31, &(0x7f0000000380)=@string={0x31, 0x3, "58135681dd1aed733851a849bfc25658a47ef066e60177773f51ca80edd6242abcc5a6a76cf3653fe06846987c7ddf"}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, "a8"}}, {0x34, &(0x7f0000000400)=@string={0x34, 0x3, "6c05c725ce6788c65a09bc52125b759a616e796acbdac6bee29a59314e6350fb64ce435e1f0ad428cc76a9443821f7ac2ec7"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x481}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cade962aca310d462940e5afc91dd54e7fedccd7d482a79c0d82f1c2296fab5f4331f84267e2e37032872a0ad335d4c51b86758c3f483b0ec43dafb9715d9c3bfe3458dc74d9f52f414399cbfd8180403e3732b4fa778b3e3917ddda5bd737a1518d36067581ded1ca5f331bf0b720cdd9b0fb4a3a7e2709fed546763921567999f86a2f472fba87d2cda8be47c30ce08535265f827215b9b616c89688ebc981a4ba7ab7ebe19eba3afa507a5d24c3b4f4b00a449fdf326b53486494236df63732d98d02e779a2accd54cf917e22b5f2cb928be6ab25"}}, {0x63, &(0x7f0000000580)=@string={0x63, 0x3, "fbb9be552768d4ca1d4bd3f2879dfad8bd0bb8f92de96e176a6ec12c1e749609dd3e071212df079aa3fd44c991db91c38f2e4e01e822224d3c81593f6262a8ea36f88b361338177ec7ccb57c6fc49e061720b3e9c89ceccdbb829087d1fadc92fa"}}, {0xfc, &(0x7f0000000600)=@string={0xfc, 0x3, "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"}}]}) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:02:52 executing program 5: socketpair(0x28, 0x1, 0x0, &(0x7f0000001300)) 00:02:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x900000000000000) 00:02:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x4c}, 0x0) 00:02:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x68000000) 00:02:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x894c, 0x0) 00:02:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x277}, 0x1c) 00:02:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x68}, 0x0) 00:02:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x4, 0x0, 0x0) [ 1472.755424][T29665] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6c000000) [ 1472.793414][T29662] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:02:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xa00000000000000) 00:02:52 executing program 5: r0 = socket(0x2, 0x6, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x500}}, 0x0) [ 1472.953995][T29675] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1472.960544][T29678] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1473.082680][ T5633] usb 3-1: device descriptor read/64, error -71 [ 1473.352357][ T5633] usb 3-1: reset high-speed USB device number 96 using dummy_hcd 00:02:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x5, 0xc9, 0x1, {0x22, 0x45c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0xc9, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1f, 0x1, 0x6, 0x20, 0xf9}, 0x42, &(0x7f0000000080)={0x5, 0xf, 0x42, 0x2, [@generic={0x33, 0x10, 0x1, "1f3d496c5c2a8955c70aab4a6d8708708c9a47ce21b0bbd73c2c07576ea6578f0d551c7fa95048c1183eea9791faf5e1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x8, 0xff33}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x280a}}, {0x7e, &(0x7f0000000280)=@string={0x7e, 0x3, "b5c7346e287e66e452190dcb09fcfbcf01b9deb7f0d1e5a7e7b56bd90c2855fcba28d35cbbfb4f05f28b360aa07fa43d251b1ecd774c005ba5792aded7f377b93ea9186f97e8b1ebc936fd60db44484b81752632b6c8b0c2025e6680401a551a1c6d4ed7a13ccafcb33994602e3950793072586c2b8bd6eed764ce59"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x31, &(0x7f0000000380)=@string={0x31, 0x3, "58135681dd1aed733851a849bfc25658a47ef066e60177773f51ca80edd6242abcc5a6a76cf3653fe06846987c7ddf"}}, {0x3, &(0x7f00000003c0)=@string={0x3, 0x3, "a8"}}, {0x34, &(0x7f0000000400)=@string={0x34, 0x3, "6c05c725ce6788c65a09bc52125b759a616e796acbdac6bee29a59314e6350fb64ce435e1f0ad428cc76a9443821f7ac2ec7"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x481}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cade962aca310d462940e5afc91dd54e7fedccd7d482a79c0d82f1c2296fab5f4331f84267e2e37032872a0ad335d4c51b86758c3f483b0ec43dafb9715d9c3bfe3458dc74d9f52f414399cbfd8180403e3732b4fa778b3e3917ddda5bd737a1518d36067581ded1ca5f331bf0b720cdd9b0fb4a3a7e2709fed546763921567999f86a2f472fba87d2cda8be47c30ce08535265f827215b9b616c89688ebc981a4ba7ab7ebe19eba3afa507a5d24c3b4f4b00a449fdf326b53486494236df63732d98d02e779a2accd54cf917e22b5f2cb928be6ab25"}}, {0x63, &(0x7f0000000580)=@string={0x63, 0x3, "fbb9be552768d4ca1d4bd3f2879dfad8bd0bb8f92de96e176a6ec12c1e749609dd3e071212df079aa3fd44c991db91c38f2e4e01e822224d3c81593f6262a8ea36f88b361338177ec7ccb57c6fc49e061720b3e9c89ceccdbb829087d1fadc92fa"}}, {0xfc, &(0x7f0000000600)=@string={0xfc, 0x3, "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"}}]}) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:02:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x6c}, 0x0) 00:02:55 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8919, 0x0) 00:02:55 executing program 5: mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 00:02:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x74000000) 00:02:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xc00000000000000) 00:02:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x7ff}, 0x48) [ 1475.735814][T18399] usb 3-1: USB disconnect, device number 96 00:02:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x74}, 0x0) 00:02:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8903, 0x0) [ 1475.830592][T29689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1475.850720][T29687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x7a}, 0x0) 00:02:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f00000000c0)=@framed={{}, [@btf_id, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:02:55 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfc50]}, &(0x7f0000000140), 0x8) [ 1476.232351][T18399] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1476.602728][T18399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1476.602787][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.602822][T18399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.602851][T18399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1476.602896][T18399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1476.602925][T18399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.605743][T18399] usb 3-1: config 0 descriptor?? [ 1476.908646][T18399] appleir 0003:05AC:8243.00D6: unknown main item tag 0x0 [ 1476.908995][T18399] appleir 0003:05AC:8243.00D6: No inputs registered, leaving [ 1476.927756][T18399] appleir 0003:05AC:8243.00D6: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1478.292315][T18396] usb 3-1: reset high-speed USB device number 97 using dummy_hcd 00:02:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xce, {0xce, 0x2, "c7cf4011ecddb85a2bb95edffab39c11025e1a59513d07ae8e772495e3fb0b741dbe067b796f8f0bd3a01e8f664beaff72203cab3000e2bc8e8f22ba27590d5b74d1da66e616acb4af33fadaeaf2a148282c6cb0e68cbb3c7815f8f4752cb0cf500d2b27a665380d836a9f3b15d860d07737c3d413b8c3572b0115fdff78d014f1298a42ffd4e346a767ad7083b97ceccac28b2b2243738fbb50e6c64a7c7162ad7bdf3d573965c7582a271706dbbbea3ebea0608f1a99417c00116e4a77daa0b4ce7072c8857fa79093fe3e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000000280)={0x0, 0x22, 0x11, {[@global=@item_4={0x3, 0x1, 0x6, "377b85ca"}, @local=@item_012={0x2, 0x2, 0x5, "0e44"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xa, "c8d1b6e8"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x6, 'G'}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xd1d}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0x7f, "179a9875893f620e777ace5b95c4ed7251eab710b1a6ae8148f53b651ddab35ba00ded016bf2e525c157d9f45457f2e08fbb8048e9bbef2f16b58b1d06d83b4ea17cc781dd73bea69d44abdcda3dbccf74ad5259330a54458c4cfa3166bd60aabe44a36c3242d909509da59941a26f419dcebc0f261b37fb79be9df43cfcb4"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0x10, "f4d8cc5b1f0291cc015e0ed1420fa4e1"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) 00:02:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe00000000000000) 00:02:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x750c0000) 00:02:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0}, 0x0) 00:02:58 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000040)={[0x1]}, 0x8}) 00:02:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf0}, 0x0) 00:02:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, 0x0, 0x0) 00:02:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter, 0x97) 00:02:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x300}, 0x0) 00:02:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x760c0000) [ 1478.862701][T29710] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:02:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf00000000000000) [ 1478.873651][T29713] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:02:58 executing program 0: syz_mount_image$tmpfs(&(0x7f0000002c40), &(0x7f0000002c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0)={[{@huge_never}], [{@fsmagic}]}) [ 1479.057936][T29726] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1479.068833][T29729] tmpfs: Unknown parameter 'fsmagic' [ 1479.072567][T29727] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1479.192361][T18396] usb 3-1: device descriptor read/64, error -71 [ 1479.462449][T18396] usb 3-1: reset high-speed USB device number 97 using dummy_hcd 00:03:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x500}, 0x0) 00:03:01 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89ee, 0x0) 00:03:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:03:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7a000000) 00:03:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xce, {0xce, 0x2, "c7cf4011ecddb85a2bb95edffab39c11025e1a59513d07ae8e772495e3fb0b741dbe067b796f8f0bd3a01e8f664beaff72203cab3000e2bc8e8f22ba27590d5b74d1da66e616acb4af33fadaeaf2a148282c6cb0e68cbb3c7815f8f4752cb0cf500d2b27a665380d836a9f3b15d860d07737c3d413b8c3572b0115fdff78d014f1298a42ffd4e346a767ad7083b97ceccac28b2b2243738fbb50e6c64a7c7162ad7bdf3d573965c7582a271706dbbbea3ebea0608f1a99417c00116e4a77daa0b4ce7072c8857fa79093fe3e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000000280)={0x0, 0x22, 0x11, {[@global=@item_4={0x3, 0x1, 0x6, "377b85ca"}, @local=@item_012={0x2, 0x2, 0x5, "0e44"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xa, "c8d1b6e8"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x6, 'G'}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xd1d}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0x7f, "179a9875893f620e777ace5b95c4ed7251eab710b1a6ae8148f53b651ddab35ba00ded016bf2e525c157d9f45457f2e08fbb8048e9bbef2f16b58b1d06d83b4ea17cc781dd73bea69d44abdcda3dbccf74ad5259330a54458c4cfa3166bd60aabe44a36c3242d909509da59941a26f419dcebc0f261b37fb79be9df43cfcb4"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0x10, "f4d8cc5b1f0291cc015e0ed1420fa4e1"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xce, {0xce, 0x2, "c7cf4011ecddb85a2bb95edffab39c11025e1a59513d07ae8e772495e3fb0b741dbe067b796f8f0bd3a01e8f664beaff72203cab3000e2bc8e8f22ba27590d5b74d1da66e616acb4af33fadaeaf2a148282c6cb0e68cbb3c7815f8f4752cb0cf500d2b27a665380d836a9f3b15d860d07737c3d413b8c3572b0115fdff78d014f1298a42ffd4e346a767ad7083b97ceccac28b2b2243738fbb50e6c64a7c7162ad7bdf3d573965c7582a271706dbbbea3ebea0608f1a99417c00116e4a77daa0b4ce7072c8857fa79093fe3e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000000280)={0x0, 0x22, 0x11, {[@global=@item_4={0x3, 0x1, 0x6, "377b85ca"}, @local=@item_012={0x2, 0x2, 0x5, "0e44"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xa, "c8d1b6e8"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x6, 'G'}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xd1d}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0x7f, "179a9875893f620e777ace5b95c4ed7251eab710b1a6ae8148f53b651ddab35ba00ded016bf2e525c157d9f45457f2e08fbb8048e9bbef2f16b58b1d06d83b4ea17cc781dd73bea69d44abdcda3dbccf74ad5259330a54458c4cfa3166bd60aabe44a36c3242d909509da59941a26f419dcebc0f261b37fb79be9df43cfcb4"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0x10, "f4d8cc5b1f0291cc015e0ed1420fa4e1"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) (async) 00:03:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x1000000000000000) [ 1481.861772][T18395] usb 3-1: USB disconnect, device number 97 00:03:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x600}, 0x0) 00:03:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140), 0x4) 00:03:01 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_clone(0x50100000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 1481.915689][ T28] audit: type=1400 audit(1655510581.448:460): avc: denied { ioctl } for pid=29733 comm="syz-executor.5" path="socket:[117235]" dev="sockfs" ino=117235 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1481.921260][T29738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x1f00000000000000) [ 1481.982921][T29737] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x81000000) 00:03:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:03:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x700}, 0x0) [ 1482.046883][ T28] audit: type=1400 audit(1655510581.578:461): avc: denied { setopt } for pid=29743 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:03:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x900}, 0x0) 00:03:01 executing program 5: execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000180)='R{}{/\x00'], 0x0, 0x0) [ 1482.164124][T29750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2000000000000000) [ 1482.352449][T18395] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1482.355683][T29762] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1482.712467][T18395] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1482.712524][T18395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.712558][T18395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.712584][T18395] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1482.712626][T18395] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1482.712653][T18395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.714669][T18395] usb 3-1: config 0 descriptor?? [ 1483.194360][T18395] appleir 0003:05AC:8243.00D7: unknown main item tag 0x0 [ 1483.194861][T18395] appleir 0003:05AC:8243.00D7: No inputs registered, leaving [ 1483.198981][T18395] appleir 0003:05AC:8243.00D7: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 00:03:03 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4009, 0x103) 00:03:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xce, {0xce, 0x2, "c7cf4011ecddb85a2bb95edffab39c11025e1a59513d07ae8e772495e3fb0b741dbe067b796f8f0bd3a01e8f664beaff72203cab3000e2bc8e8f22ba27590d5b74d1da66e616acb4af33fadaeaf2a148282c6cb0e68cbb3c7815f8f4752cb0cf500d2b27a665380d836a9f3b15d860d07737c3d413b8c3572b0115fdff78d014f1298a42ffd4e346a767ad7083b97ceccac28b2b2243738fbb50e6c64a7c7162ad7bdf3d573965c7582a271706dbbbea3ebea0608f1a99417c00116e4a77daa0b4ce7072c8857fa79093fe3e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f0000000280)={0x0, 0x22, 0x11, {[@global=@item_4={0x3, 0x1, 0x6, "377b85ca"}, @local=@item_012={0x2, 0x2, 0x5, "0e44"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xa, "c8d1b6e8"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x6, 'G'}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xd1d}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0x7f, "179a9875893f620e777ace5b95c4ed7251eab710b1a6ae8148f53b651ddab35ba00ded016bf2e525c157d9f45457f2e08fbb8048e9bbef2f16b58b1d06d83b4ea17cc781dd73bea69d44abdcda3dbccf74ad5259330a54458c4cfa3166bd60aabe44a36c3242d909509da59941a26f419dcebc0f261b37fb79be9df43cfcb4"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0x10, "f4d8cc5b1f0291cc015e0ed1420fa4e1"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x2}}) 00:03:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x88a8ffff) 00:03:03 executing program 0: execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x800) 00:03:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2400000000000000) 00:03:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf00}, 0x0) [ 1483.741261][T18395] usb 3-1: USB disconnect, device number 98 00:03:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40049409, 0x0) 00:03:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:03:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x3f00}, 0x0) [ 1483.830273][T29770] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x3f00000000000000) 00:03:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x90f8fcff) 00:03:03 executing program 5: r0 = socket(0x1, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:03:03 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x4b47, 0x0) [ 1483.925820][T29781] sit0: mtu less than device minimum [ 1484.025265][T29786] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1484.204583][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.204635][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.272398][T18395] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1484.632516][T18395] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1484.632571][T18395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.632637][T18395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.632666][T18395] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1484.632707][T18395] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1484.632737][T18395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.635235][T18395] usb 3-1: config 0 descriptor?? 00:03:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382c0355000000109022400010080040000fd0301000003210e000001220100090581030000002b282b61d4c8ed5a1f5e353f0a0897d8e0a1fdac2df08d18f0710fe1aa36849fa6bc853a0ac8da29ac92182bbf1ac84742c4c42bdcbba142f23e37495264bad0b2870f27aa3aee68452499841e4120a2829cb1f9cab9c51d9f83a0528c90655a51fae80cbd50974a6654ab9986287bf5f9541cf63710e9475ec42dabf7c6d9b0dc0c20de523cf098e3674773533fc2323184242ab918e6f10d042b87973a8aca9cae4eb449cb62934cf46e33c9a50b4dc25ac9acb9f651"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="f70bd1bbfe"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000380)={0x0, 0x4, 0xee, {0xee, 0x8, "767fc91c5872ae1a0aef8b900c842fef2eacca0588ef8c3191bc31e3e36accb7a036215d11435c4cd6c8e92dd7ab7776bfb6356ba8301001e9cfcf7ad3a2b2ec6f42bb3bd3dadbca33df07416bde09e7ebf25887ac8fad4ba5897650db176943dd0dfee7bc7e3fdef632a43ca40c1402437024d69496df454d7817edcb019c6c0e47411157268fba64700dc732ce51ef1e34694ce45b1ee7664b98244d5223554cee54ddd31cc00e2d89f0d566b4602f8a324239bb1681a0e4b100684caeca017738b42fbd9fac807edde9fec62ce7a047415bcce96fae36d25e3769b5e00daf4d2c2a0955ee47c488dd6c50"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000280)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0xa, 'w'}, @main=@item_012={0x2, 0x0, 0xa, "0e42"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "86b21d4b"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x20b}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xf9, "25e198cd3ad2ce5024b3c3c5592a26dd27571193f75c4ca44d5c52b5863cbc3849b1e699d244d705db301087d2bafbeeed274ed76e822cef0bc73671da4669826f71fd3e8b315cffbde8fe7ac497fc5ee9d94f18bf863a23645f1c43599f719dbf3533ca374160e445e47afcf667285f2fdc24fe4cba573c30244c13b8f2239595c8e4291000015a6cd6ed6db912d14d816099cff032780eb11683080d9511a59efc992d37dbabab72eb3b3d7e66e7192d0876f42e99ff3ff9eadb41b7ddd6de02464c9ecfc524b988c3b0c65042446e86a2fa5696701ff50a7d40efad152aa43c1c331e26decb065a13737210efd6d358818e72f447608681"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x55}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000600)={0x20, 0x1, 0x23, "b35644c3161ee27ed75671d89b338ce2b29dd5f831479c2304e07b947b081cba0f2c48"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x3}}) 00:03:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x4800}, 0x0) 00:03:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4800000000000000) 00:03:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, 0x0) 00:03:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:03:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x9effffff) 00:03:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=ANY=[], 0xa) sendmsg$unix(r0, &(0x7f0000002600)={0x0, 0x0, 0x0}, 0x0) 00:03:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x4c00}, 0x0) 00:03:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000040)=@abs, 0x8) [ 1485.162917][T29803] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1485.172379][T18395] usbhid 3-1:0.0: can't add hid device: -71 [ 1485.172456][T18395] usbhid: probe of 3-1:0.0 failed with error -71 00:03:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4c00000000000000) [ 1485.179038][T18395] usb 3-1: USB disconnect, device number 99 00:03:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000040)=@abs, 0x8) 00:03:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1485.344518][T29816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1485.372553][ T28] audit: type=1400 audit(1655510584.908:462): avc: denied { read } for pid=29819 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1485.612365][T18395] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1485.972447][T18395] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.972478][T18395] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1486.052537][T18395] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=35.c0 [ 1486.052559][T18395] usb 3-1: New USB device strings: Mfr=80, Product=0, SerialNumber=0 [ 1486.052581][T18395] usb 3-1: Manufacturer: syz [ 1486.054203][T18395] usb 3-1: config 0 descriptor?? [ 1486.759228][T29807] Error: Driver 'raw-gadget' is already registered, aborting... [ 1486.759238][T29807] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1486.759250][T29807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.794412][T18395] usb 3-1: USB disconnect, device number 100 00:03:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xa20b0000) 00:03:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x6800}, 0x0) 00:03:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000040)=@abs, 0x8) 00:03:06 executing program 5: syz_usb_connect$cdc_ncm(0x5, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x653, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x8, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "d8444a"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x9, 0x8001, 0x7f}, {0x6, 0x24, 0x1a, 0x800}, [@mbim={0xc, 0x24, 0x1b, 0xffc1, 0xfffd, 0x7, 0x4, 0x64bf, 0x3f}, @acm={0x4, 0x24, 0x2, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x17f, 0x1, 0x6, 0x5d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xff, 0x0, 0x86, 0x8, 0x7}, 0x73, &(0x7f0000000140)={0x5, 0xf, 0x73, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x4, 0xffff}, @generic={0x64, 0x10, 0x3, "99a06a1612a100a383338bf2e3a45c9202a75ee8b5d0619c5a6c62fb87ac8b3ae1e9bcbd2a0ce362d5fc79198a21185fb15ff969ec090fba9f04f7453aaf4fdb716798aa05e09316c01624de8651d650422862e794317e83ff4507c089deda6c57"}]}, 0x6, [{0x48, &(0x7f0000000200)=@string={0x48, 0x3, "52fb5278e7e7e69ec962789f09f79f482096acdf7e9277a66e56820909596f88fa009ea5e1f7cc03200d99cb90fdc291dad4d4d06f5294e5cf858291577ce0b0c425432d43a8"}}, {0x2c, &(0x7f0000000280)=@string={0x2c, 0x3, "e736ef927e9e125fd64b90680a73f64255a8b10fe0f33204676c43dbb6dbc771aafe06e7b71b0fca2704"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x0, 0x0}, {0x4e, &(0x7f0000000380)=@string={0x4e, 0x3, "8d1212812d678f778ec8f259049735555c2f59703d999a3b08541cf3538674e211a07449380968841308fa7a1bf353fb83d4c8da2a31c9759fa27e6b299d62c636761a4f0d0503de7898d9b0"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x380a}}]}) 00:03:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382c0355000000109022400010080040000fd0301000003210e000001220100090581030000002b282b61d4c8ed5a1f5e353f0a0897d8e0a1fdac2df08d18f0710fe1aa36849fa6bc853a0ac8da29ac92182bbf1ac84742c4c42bdcbba142f23e37495264bad0b2870f27aa3aee68452499841e4120a2829cb1f9cab9c51d9f83a0528c90655a51fae80cbd50974a6654ab9986287bf5f9541cf63710e9475ec42dabf7c6d9b0dc0c20de523cf098e3674773533fc2323184242ab918e6f10d042b87973a8aca9cae4eb449cb62934cf46e33c9a50b4dc25ac9acb9f651"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="f70bd1bbfe"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000380)={0x0, 0x4, 0xee, {0xee, 0x8, "767fc91c5872ae1a0aef8b900c842fef2eacca0588ef8c3191bc31e3e36accb7a036215d11435c4cd6c8e92dd7ab7776bfb6356ba8301001e9cfcf7ad3a2b2ec6f42bb3bd3dadbca33df07416bde09e7ebf25887ac8fad4ba5897650db176943dd0dfee7bc7e3fdef632a43ca40c1402437024d69496df454d7817edcb019c6c0e47411157268fba64700dc732ce51ef1e34694ce45b1ee7664b98244d5223554cee54ddd31cc00e2d89f0d566b4602f8a324239bb1681a0e4b100684caeca017738b42fbd9fac807edde9fec62ce7a047415bcce96fae36d25e3769b5e00daf4d2c2a0955ee47c488dd6c50"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000280)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0xa, 'w'}, @main=@item_012={0x2, 0x0, 0xa, "0e42"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "86b21d4b"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x20b}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xf9, "25e198cd3ad2ce5024b3c3c5592a26dd27571193f75c4ca44d5c52b5863cbc3849b1e699d244d705db301087d2bafbeeed274ed76e822cef0bc73671da4669826f71fd3e8b315cffbde8fe7ac497fc5ee9d94f18bf863a23645f1c43599f719dbf3533ca374160e445e47afcf667285f2fdc24fe4cba573c30244c13b8f2239595c8e4291000015a6cd6ed6db912d14d816099cff032780eb11683080d9511a59efc992d37dbabab72eb3b3d7e66e7192d0876f42e99ff3ff9eadb41b7ddd6de02464c9ecfc524b988c3b0c65042446e86a2fa5696701ff50a7d40efad152aa43c1c331e26decb065a13737210efd6d358818e72f447608681"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x55}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000600)={0x20, 0x1, 0x23, "b35644c3161ee27ed75671d89b338ce2b29dd5f831479c2304e07b947b081cba0f2c48"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x3}}) 00:03:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x5601000000000000) 00:03:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x6c00}, 0x0) 00:03:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000040)=@abs, 0x8) 00:03:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)='\x00\x00\x00\x00', 0x4) [ 1487.346557][T29832] Error: Driver 'raw-gadget' is already registered, aborting... [ 1487.346573][T29832] UDC core: USB Raw Gadget: driver registration failed: -16 00:03:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x7400}, 0x0) 00:03:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xad000000) [ 1487.346592][T29832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.348756][T29834] Error: Driver 'raw-gadget' is already registered, aborting... [ 1487.348769][T29834] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1487.348788][T29834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:03:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6000000000000000) 00:03:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x7a00}, 0x0) [ 1487.377235][T29827] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe0020000) 00:03:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf000}, 0x0) [ 1487.574851][T18397] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1487.581209][T29848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1487.822317][T18397] usb 6-1: Using ep0 maxpacket: 32 [ 1488.034492][T18397] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1488.034533][T18397] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1488.432571][T18397] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1488.432607][T18397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.432632][T18397] usb 6-1: Product: ఌ [ 1488.432650][T18397] usb 6-1: Manufacturer: 㛧鋯鹾弒䯖梐猊䋶ꡕྱв汧燇ﺪ᮷쨏Ч [ 1488.752720][T18397] cdc_ncm 6-1:1.0: bind() failure [ 1488.756898][T18397] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1488.756931][T18397] cdc_ncm 6-1:1.1: bind() failure [ 1488.771669][T18397] usb 6-1: USB disconnect, device number 108 00:03:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6558000000000000) 00:03:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x30000}, 0x0) 00:03:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf0ffffff) 00:03:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382c0355000000109022400010080040000fd0301000003210e000001220100090581030000002b282b61d4c8ed5a1f5e353f0a0897d8e0a1fdac2df08d18f0710fe1aa36849fa6bc853a0ac8da29ac92182bbf1ac84742c4c42bdcbba142f23e37495264bad0b2870f27aa3aee68452499841e4120a2829cb1f9cab9c51d9f83a0528c90655a51fae80cbd50974a6654ab9986287bf5f9541cf63710e9475ec42dabf7c6d9b0dc0c20de523cf098e3674773533fc2323184242ab918e6f10d042b87973a8aca9cae4eb449cb62934cf46e33c9a50b4dc25ac9acb9f651"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="f70bd1bbfe"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000380)={0x0, 0x4, 0xee, {0xee, 0x8, "767fc91c5872ae1a0aef8b900c842fef2eacca0588ef8c3191bc31e3e36accb7a036215d11435c4cd6c8e92dd7ab7776bfb6356ba8301001e9cfcf7ad3a2b2ec6f42bb3bd3dadbca33df07416bde09e7ebf25887ac8fad4ba5897650db176943dd0dfee7bc7e3fdef632a43ca40c1402437024d69496df454d7817edcb019c6c0e47411157268fba64700dc732ce51ef1e34694ce45b1ee7664b98244d5223554cee54ddd31cc00e2d89f0d566b4602f8a324239bb1681a0e4b100684caeca017738b42fbd9fac807edde9fec62ce7a047415bcce96fae36d25e3769b5e00daf4d2c2a0955ee47c488dd6c50"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000280)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0xa, 'w'}, @main=@item_012={0x2, 0x0, 0xa, "0e42"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "86b21d4b"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x20b}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xf9, "25e198cd3ad2ce5024b3c3c5592a26dd27571193f75c4ca44d5c52b5863cbc3849b1e699d244d705db301087d2bafbeeed274ed76e822cef0bc73671da4669826f71fd3e8b315cffbde8fe7ac497fc5ee9d94f18bf863a23645f1c43599f719dbf3533ca374160e445e47afcf667285f2fdc24fe4cba573c30244c13b8f2239595c8e4291000015a6cd6ed6db912d14d816099cff032780eb11683080d9511a59efc992d37dbabab72eb3b3d7e66e7192d0876f42e99ff3ff9eadb41b7ddd6de02464c9ecfc524b988c3b0c65042446e86a2fa5696701ff50a7d40efad152aa43c1c331e26decb065a13737210efd6d358818e72f447608681"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x55}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000600)={0x20, 0x1, 0x23, "b35644c3161ee27ed75671d89b338ce2b29dd5f831479c2304e07b947b081cba0f2c48"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x3}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382c0355000000109022400010080040000fd0301000003210e000001220100090581030000002b282b61d4c8ed5a1f5e353f0a0897d8e0a1fdac2df08d18f0710fe1aa36849fa6bc853a0ac8da29ac92182bbf1ac84742c4c42bdcbba142f23e37495264bad0b2870f27aa3aee68452499841e4120a2829cb1f9cab9c51d9f83a0528c90655a51fae80cbd50974a6654ab9986287bf5f9541cf63710e9475ec42dabf7c6d9b0dc0c20de523cf098e3674773533fc2323184242ab918e6f10d042b87973a8aca9cae4eb449cb62934cf46e33c9a50b4dc25ac9acb9f651"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="f70bd1bbfe"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000380)={0x0, 0x4, 0xee, {0xee, 0x8, "767fc91c5872ae1a0aef8b900c842fef2eacca0588ef8c3191bc31e3e36accb7a036215d11435c4cd6c8e92dd7ab7776bfb6356ba8301001e9cfcf7ad3a2b2ec6f42bb3bd3dadbca33df07416bde09e7ebf25887ac8fad4ba5897650db176943dd0dfee7bc7e3fdef632a43ca40c1402437024d69496df454d7817edcb019c6c0e47411157268fba64700dc732ce51ef1e34694ce45b1ee7664b98244d5223554cee54ddd31cc00e2d89f0d566b4602f8a324239bb1681a0e4b100684caeca017738b42fbd9fac807edde9fec62ce7a047415bcce96fae36d25e3769b5e00daf4d2c2a0955ee47c488dd6c50"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000280)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0xa, 'w'}, @main=@item_012={0x2, 0x0, 0xa, "0e42"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "86b21d4b"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x20b}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xf9, "25e198cd3ad2ce5024b3c3c5592a26dd27571193f75c4ca44d5c52b5863cbc3849b1e699d244d705db301087d2bafbeeed274ed76e822cef0bc73671da4669826f71fd3e8b315cffbde8fe7ac497fc5ee9d94f18bf863a23645f1c43599f719dbf3533ca374160e445e47afcf667285f2fdc24fe4cba573c30244c13b8f2239595c8e4291000015a6cd6ed6db912d14d816099cff032780eb11683080d9511a59efc992d37dbabab72eb3b3d7e66e7192d0876f42e99ff3ff9eadb41b7ddd6de02464c9ecfc524b988c3b0c65042446e86a2fa5696701ff50a7d40efad152aa43c1c331e26decb065a13737210efd6d358818e72f447608681"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x55}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000600)={0x20, 0x1, 0x23, "b35644c3161ee27ed75671d89b338ce2b29dd5f831479c2304e07b947b081cba0f2c48"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x3}}) (async) 00:03:08 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0xffffffffffffff24) 00:03:08 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000104000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000ac0)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)={0x40, 0x16, 0x87, "4eab89bb2b309defa6801d52f6c032efe8d597facc4218436282c9af3fea46188758f2848c7a2b65abf5ae4c659120db4e6f7c4e33efcbed1cae4114dfeb051e86ef8646d00e3bce9efbc3c8b6021f5395d1ec73f3c6d5d59b8804d8c64979bf965e3a0ab60508173549d9f940b1bcb622b21fd79c1ecb989b50144259f0e6772a288636107b31"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x64}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000d000000de1a51b483ff4080b587cf7737"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:03:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x34000}, 0x0) 00:03:08 executing program 5: add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x4000, 0x0) [ 1489.228204][T29862] Error: Driver 'raw-gadget' is already registered, aborting... [ 1489.228220][T29862] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1489.228240][T29862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:03:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x400300}, 0x0) 00:03:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x939, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @dev}}]}, 0x24}}, 0x0) [ 1489.271128][T29859] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6800000000000000) 00:03:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf4010000) 00:03:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf0ffff}, 0x0) 00:03:09 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204e040c124000010203140902"], 0x0) 00:03:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x1000000}, 0x0) [ 1489.492435][T18397] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1489.492571][T29875] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1489.559242][T29882] Error: Driver 'raw-gadget' is already registered, aborting... [ 1489.559258][T29882] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1489.559278][T29882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.852726][T18397] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.852756][T18397] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1489.932559][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=35.c0 [ 1489.932597][T18397] usb 3-1: New USB device strings: Mfr=80, Product=0, SerialNumber=0 [ 1489.932623][T18397] usb 3-1: Manufacturer: syz [ 1489.934888][T18397] usb 3-1: config 0 descriptor?? 00:03:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000022400010000000009040000fd0301000009210e000001220100090581031ea938a063cba8ae9c5b1c267ca086aff8c2aff284e4dc76992e39b0b0b3a6cfb19f5e04d8b0873e79d0d0fe91eef21834fa38abc433dfa0d3"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x20, 0x24, 0xc6, {0xc6, 0x5, "d7281db8565a2a64430b4f5174cb052f1fe965bfa91b1259c92823f278e4b2e6673d250ec93af0c76b3e749570ea4c8902dbe341fb17dc019ec77a1d2e7e10396007e5d1a6962200c9fdd04aec55f2f12f8d05483151852dce00beda8f1b5182a8285a9166ca954d5f6f831c1d7a73f4577fe7f84d071b73efbb00fc64f60ee1f0ef057fe4555d9c069652bf9bbc9684d8da0e7a6a88dcbed9b6a7409e7c66de1d98e15efbc3fd1a7cd82a94d64528c76b25c8945805ff6d02f4678ad5337bbdaa5305b6"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0xf, 0x13, "ad2c0bb9ec23d6212c1b68d4841bfcb184443f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:03:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6c00000000000000) 00:03:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x2000000}, 0x0) 00:03:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x94}]}) 00:03:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf5ffffff) 00:03:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540c) [ 1490.628540][T29860] Error: Driver 'raw-gadget' is already registered, aborting... [ 1490.628550][T29860] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1490.628561][T29860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:03:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000240)=0x4) 00:03:10 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}, {@privport}]}}) 00:03:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x3000000}, 0x0) [ 1490.629508][T29860] Error: Driver 'raw-gadget' is already registered, aborting... [ 1490.629520][T29860] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1490.629536][T29860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.684032][T18397] usb 3-1: USB disconnect, device number 101 00:03:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfcffffff) [ 1490.738520][T29893] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7400000000000000) 00:03:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x20}, {0x16}]}) [ 1490.839949][ T28] audit: type=1400 audit(1655510590.368:463): avc: denied { getopt } for pid=29903 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1490.855785][T29907] 9pnet_fd: Insufficient options for proto=fd [ 1490.955459][T29912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1491.001017][ T28] audit: type=1326 audit(1655510590.528:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29913 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31dea89109 code=0x0 [ 1491.112510][T18397] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1491.302346][T18397] usb 3-1: device descriptor read/64, error 18 [ 1491.572548][T18397] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1491.762340][T18397] usb 3-1: device descriptor read/64, error 18 [ 1491.882535][T18397] usb usb3-port1: attempt power cycle [ 1492.292392][T18397] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1492.392400][T18397] usb 3-1: Invalid ep0 maxpacket: 0 [ 1492.542384][T18397] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1492.652581][T18397] usb 3-1: Invalid ep0 maxpacket: 0 [ 1492.652810][T18397] usb usb3-port1: unable to enumerate USB device 00:03:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000022400010000000009040000fd0301000009210e000001220100090581031ea938a063cba8ae9c5b1c267ca086aff8c2aff284e4dc76992e39b0b0b3a6cfb19f5e04d8b0873e79d0d0fe91eef21834fa38abc433dfa0d3"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x20, 0x24, 0xc6, {0xc6, 0x5, "d7281db8565a2a64430b4f5174cb052f1fe965bfa91b1259c92823f278e4b2e6673d250ec93af0c76b3e749570ea4c8902dbe341fb17dc019ec77a1d2e7e10396007e5d1a6962200c9fdd04aec55f2f12f8d05483151852dce00beda8f1b5182a8285a9166ca954d5f6f831c1d7a73f4577fe7f84d071b73efbb00fc64f60ee1f0ef057fe4555d9c069652bf9bbc9684d8da0e7a6a88dcbed9b6a7409e7c66de1d98e15efbc3fd1a7cd82a94d64528c76b25c8945805ff6d02f4678ad5337bbdaa5305b6"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0xf, 0x13, "ad2c0bb9ec23d6212c1b68d4841bfcb184443f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000022400010000000009040000fd0301000009210e000001220100090581031ea938a063cba8ae9c5b1c267ca086aff8c2aff284e4dc76992e39b0b0b3a6cfb19f5e04d8b0873e79d0d0fe91eef21834fa38abc433dfa0d3"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x20, 0x24, 0xc6, {0xc6, 0x5, "d7281db8565a2a64430b4f5174cb052f1fe965bfa91b1259c92823f278e4b2e6673d250ec93af0c76b3e749570ea4c8902dbe341fb17dc019ec77a1d2e7e10396007e5d1a6962200c9fdd04aec55f2f12f8d05483151852dce00beda8f1b5182a8285a9166ca954d5f6f831c1d7a73f4577fe7f84d071b73efbb00fc64f60ee1f0ef057fe4555d9c069652bf9bbc9684d8da0e7a6a88dcbed9b6a7409e7c66de1d98e15efbc3fd1a7cd82a94d64528c76b25c8945805ff6d02f4678ad5337bbdaa5305b6"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0xf, 0x13, "ad2c0bb9ec23d6212c1b68d4841bfcb184443f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1}}) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:03:13 executing program 0: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x3, {0x7, 0x25, 0x1, 0x0, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf6, 0x0, 0x0, 0x7, "8287825379838e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x5e, 0x0, {0x7, 0x25, 0x1, 0x80, 0xf8, 0x7fff}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x80, 0x2, 0x0, 0x20, 0x6}, 0x2a, &(0x7f0000000200)={0x5, 0xf, 0x2a, 0x4, [@generic={0x8, 0x10, 0xb, "99d66abf44"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x6, 0xfd5a}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xf, 0x47a7}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x8, 0x0, 0xeee}]}, 0x4, [{0xd4, &(0x7f0000000440)=@string={0xd4, 0x3, "cee9d2ece83a2902eeeb55fcd06cdff2c13b967d31787556ba8b4412d2b752d2eff6d85e0c158c29e5b84d1c40b4912520a4b0d7d365691eaee5531934f8606dae0ce4ec7da9f03fcdaf500527d570ced2bda0e2cf3b3abccb1d83867289901e1834f855b21739acd967978964cd4fd5b7c80374d67bae3c4dae301f8a3aabe8e07420f06b603ef9aec921851695d330371c94a35c97fb81dc01a9d7b9be909d6628db8ef36cc6a3769d4d733956b9c148d2cc303183c233cce9f6e705e27536d688718ca26bd7db8b01ee22f91db5cb300e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x446}}, {0xb5, &(0x7f0000000540)=@string={0xb5, 0x3, "aa1464ed2354994fe9cb86e8917d0d91c8b808392468e9f7cf4ce83c26e2a29ff256d40c35917cdb8341e869d35e2ec10622c58bec8392b6bd4878b602e3d3404439682cad5ec90f25227663d2984cf921464af3d63edddcf7f0007c1244fc7036cf30e16adbe9ba24737440494069857a461e1d4110d9d5916efb66be56b48f114f37670ddaa617f6099f6a4cfc002cca10b0af94c4c99cade7f4af78a592b40233f99e4039145435fd7e3d37699afe2e51d0"}}, {0xfa, &(0x7f0000000640)=@string={0xfa, 0x3, "eafa7b412131fa492831286bd8dcb8fe9d5326a3a74c8f4a3cff385994fac7d0af44b7768244d2bbe045dba5e923ebdd4ad3a920e58fb8ff66f30f0fc45a02b5a5105b304df2c1231fceae60a0c8eb1429d8482cbe3e53b7145d62bf4f1b102cf01768f670f6840fba2312fc052719be616e203f5d82c627972fb81a85724ea6063057ec69bf063acaeb2c93fb8c0d1897037eb2432c20f5036edf70209bb932df6bcefcfc55b7783a15f70b461c69d53e1408f02df814fe945ce6bbbb26216f031073fe8b0b1e8c4dc42aae5fcfb87e9d00a688f2d0de28d6cdadfd95e5464628539d4e180c7abe54ab6490519e925e9bffddebbfb82c63"}}]}) 00:03:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x4000000}, 0x0) 00:03:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfeffffff) 00:03:13 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) 00:03:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x750c000000000000) 00:03:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xffffffff00000000) 00:03:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x5000000}, 0x0) [ 1493.776835][T29926] Error: Driver 'raw-gadget' is already registered, aborting... [ 1493.776850][T29926] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1493.776868][T29926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:03:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) 00:03:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xff030000) 00:03:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x6000000}, 0x0) [ 1493.818147][T29924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1493.845460][ T28] audit: type=1400 audit(1655510593.378:465): avc: denied { map } for pid=29927 comm="syz-executor.5" path="socket:[117627]" dev="sockfs" ino=117627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 00:03:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x760c000000000000) 00:03:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000022400010000000009040000fd0301000009210e000001220100090581031ea938a063cba8ae9c5b1c267ca086aff8c2aff284e4dc76992e39b0b0b3a6cfb19f5e04d8b0873e79d0d0fe91eef21834fa38abc433dfa0d3"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x20, 0x24, 0xc6, {0xc6, 0x5, "d7281db8565a2a64430b4f5174cb052f1fe965bfa91b1259c92823f278e4b2e6673d250ec93af0c76b3e749570ea4c8902dbe341fb17dc019ec77a1d2e7e10396007e5d1a6962200c9fdd04aec55f2f12f8d05483151852dce00beda8f1b5182a8285a9166ca954d5f6f831c1d7a73f4577fe7f84d071b73efbb00fc64f60ee1f0ef057fe4555d9c069652bf9bbc9684d8da0e7a6a88dcbed9b6a7409e7c66de1d98e15efbc3fd1a7cd82a94d64528c76b25c8945805ff6d02f4678ad5337bbdaa5305b6"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0xf, 0x13, "ad2c0bb9ec23d6212c1b68d4841bfcb184443f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000022400010000000009040000fd0301000009210e000001220100090581031ea938a063cba8ae9c5b1c267ca086aff8c2aff284e4dc76992e39b0b0b3a6cfb19f5e04d8b0873e79d0d0fe91eef21834fa38abc433dfa0d3"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x20, 0x24, 0xc6, {0xc6, 0x5, "d7281db8565a2a64430b4f5174cb052f1fe965bfa91b1259c92823f278e4b2e6673d250ec93af0c76b3e749570ea4c8902dbe341fb17dc019ec77a1d2e7e10396007e5d1a6962200c9fdd04aec55f2f12f8d05483151852dce00beda8f1b5182a8285a9166ca954d5f6f831c1d7a73f4577fe7f84d071b73efbb00fc64f60ee1f0ef057fe4555d9c069652bf9bbc9684d8da0e7a6a88dcbed9b6a7409e7c66de1d98e15efbc3fd1a7cd82a94d64528c76b25c8945805ff6d02f4678ad5337bbdaa5305b6"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0xf, 0x13, "ad2c0bb9ec23d6212c1b68d4841bfcb184443f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1}}) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) [ 1494.009706][T29943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1494.045733][T29945] Error: Driver 'raw-gadget' is already registered, aborting... [ 1494.045748][T29945] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1494.045766][T29945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.078375][T18397] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1494.250633][T29945] Error: Driver 'raw-gadget' is already registered, aborting... [ 1494.250647][T29945] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1494.250664][T29945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.493515][T18397] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.493542][T18397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1494.682626][T18397] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1494.682664][T18397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.682689][T18397] usb 1-1: Product: ᒪ吣侙쯩綑鄍룈㤈栤䳏㳨龢囲೔鄵䆃槨廓섮∆诅菬뚒䢽뙸䃓㥄ⱨ庭࿉∥捶飒樓䘡㻖簀䐒烼켶뫩猤䁴䁉蕩䙺ᴞ၁헙溑曻嚾辴休朷ឦ৶檟ﱌⰀ჊꾰쒔鳉꿴ꕸ뒒㌂黹㥀吔ﴵ㵾椷ﺚ儮 [ 1494.682781][T18397] usb 1-1: Manufacturer: ц [ 1494.682800][T18397] usb 1-1: SerialNumber: 﫪䅻ㄡ䧺ㄨ欨ﺸ厝ꌦ䲧䪏\夸杖탇䒯皷䒂믒䗠ꗛ⏩퍊₩迥ᄌ༏嫄딂Ⴅせ⏁츟悮좠ᓫⱈ㺾띓崔뽢᭏Ⱀ៰྄⎺ﰒ✅븙湡㼠艝⟆⾗᪸犅Ꙏ〆뽩㨆錬賻᠍Η뉾ⱃ渃烟鬠㊹毟ﳎ嗼碷ᔺ௷᱆합ᐾ︔岔믦⚻漡ဃﹳ஋谞쑍긪콟纸袦탲⣞췖ﶭ䙆匨亝ఘ빺ꭔ遤鹑庒ロ뢿挬 [ 1495.012828][T18397] usb 1-1: 0:2 : does not exist [ 1495.020327][T18397] usb 1-1: USB disconnect, device number 2 [ 1495.057423][ T4226] udevd[4226]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:03:15 executing program 0: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = dup2(r0, r0) lseek(r1, 0x4, 0x0) 00:03:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x61, 0x0, 0x0, 0xfffffff8}]}) 00:03:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000000)) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:03:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7a00000000000000) 00:03:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x7000000}, 0x0) 00:03:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffcf808) 00:03:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r0, 0x0) 00:03:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x9000000}, 0x0) [ 1495.571897][T29958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffcf890) 00:03:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf000000}, 0x0) [ 1495.649740][ T28] audit: type=1400 audit(1655510595.178:466): avc: denied { accept } for pid=29962 comm="syz-executor.5" path="socket:[118182]" dev="sockfs" ino=118182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 00:03:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x8100000000000000) 00:03:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newnexthop={0x20, 0x68, 0x939, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x4}]}, 0x20}}, 0x0) 00:03:15 executing program 0: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = dup2(r0, r0) lseek(r1, 0x4, 0x0) 00:03:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x3f000000}, 0x0) [ 1495.752405][T29465] usb 3-1: new high-speed USB device number 106 using dummy_hcd 00:03:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffa888) 00:03:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x48000000}, 0x0) 00:03:15 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000600)="ee", 0x1, 0x7fff}]) [ 1495.819125][T29971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1495.940330][T29982] loop5: detected capacity change from 0 to 127 [ 1496.032668][ T4226] I/O error, dev loop5, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1496.122627][T29465] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1496.122684][T29465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.122718][T29465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.122745][T29465] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1496.122790][T29465] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1496.122819][T29465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.125225][T29465] usb 3-1: config 0 descriptor?? [ 1496.604420][T29465] appleir 0003:05AC:8243.00D8: unknown main item tag 0x0 [ 1496.604962][T29465] appleir 0003:05AC:8243.00D8: No inputs registered, leaving [ 1496.611231][T29465] appleir 0003:05AC:8243.00D8: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1497.972324][T18397] usb 3-1: reset high-speed USB device number 106 using dummy_hcd 00:03:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000000)) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000000)) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:03:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x88a8ffff00000000) 00:03:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffff000) 00:03:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x4c000000}, 0x0) 00:03:18 executing program 0: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = dup2(r0, r0) lseek(r1, 0x4, 0x0) 00:03:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000000)={[{@fat=@gid={'gid', 0x3d, 0xee01}}]}) 00:03:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x68000000}, 0x0) 00:03:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newnexthop={0x12, 0x68, 0x939, 0x0, 0x0, {}, [@NHA_BLACKHOLE]}, 0x1c}}, 0x0) [ 1498.528982][T29993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1498.537124][T29988] FAT-fs (loop5): bogus number of reserved sectors 00:03:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x90f8fcff00000000) 00:03:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffff7f) [ 1498.537145][T29988] FAT-fs (loop5): Can't find a valid FAT filesystem 00:03:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x6c000000}, 0x0) 00:03:18 executing program 0: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = dup2(r0, r0) lseek(r1, 0x4, 0x0) [ 1498.750738][T30004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1498.862519][T18397] usb 3-1: device descriptor read/64, error -71 [ 1499.132365][T18397] usb 3-1: reset high-speed USB device number 106 using dummy_hcd 00:03:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000000)) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:03:19 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000240)) 00:03:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x74000000}, 0x0) 00:03:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x9100000000000000) 00:03:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffff9e) 00:03:19 executing program 0: ioperm(0x0, 0x7ff, 0x0) [ 1500.287354][T29465] usb 3-1: USB disconnect, device number 106 00:03:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x7a000000}, 0x0) 00:03:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2}) 00:03:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) [ 1500.351906][T30023] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x9effffff00000000) 00:03:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffff0) 00:03:20 executing program 5: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) [ 1500.532493][ T28] audit: type=1400 audit(1655510600.058:467): avc: denied { view } for pid=30036 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1500.567967][T30038] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1500.832420][T29465] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1501.232772][T29465] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1501.232830][T29465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.232862][T29465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.232890][T29465] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1501.232936][T29465] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1501.232966][T29465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.234993][T29465] usb 3-1: config 0 descriptor?? [ 1501.734187][T29465] appleir 0003:05AC:8243.00D9: unknown main item tag 0x0 [ 1501.734676][T29465] appleir 0003:05AC:8243.00D9: No inputs registered, leaving [ 1501.738256][T29465] appleir 0003:05AC:8243.00D9: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1501.932986][T18397] usb 3-1: USB disconnect, device number 107 00:03:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93e4e9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:03:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x9effffff}, 0x0) 00:03:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7c}, {0x16}]}) 00:03:21 executing program 0: syz_read_part_table(0x0, 0x3, &(0x7f0000000680)=[{&(0x7f00000018c0)="649beb17ed9126d4052def74a856d83c2e2ab4ad12857b79390c5089e398419396a06d370f6def614b95d6135932aa0972bb726023ceb7924851a1ee03bde39332ca0f9608a26451badb4938dd75f9483099722ea297a6613387dd2e873adf45204a8ec9bda03a4685b8a96332621db274b7d6a27a8614879432887f7a1fc37d870f7318756b", 0x86, 0x3}, {&(0x7f0000000100)="a12c840695624ccd5413958ebb236265c0daa13ebf37f817", 0x18, 0x7}, {0x0, 0x0, 0x7fff}]) 00:03:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xa20b000000000000) 00:03:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffff5) 00:03:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xa71fe5d2}, 0x0) 00:03:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x35}, {0x16}]}) [ 1502.475055][ T28] audit: type=1326 audit(1655510602.008:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31dea89109 code=0x0 00:03:22 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xdf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0xc, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1502.477419][T30054] loop0: detected capacity change from 0 to 127 [ 1502.529986][T30053] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1502.561503][ T28] audit: type=1326 audit(1655510602.088:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30058 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31dea89109 code=0x0 00:03:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffffc) 00:03:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xac}, {0x16}]}) 00:03:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe002000000000000) [ 1502.700067][T30065] Error: Driver 'raw-gadget' is already registered, aborting... [ 1502.700082][T30065] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1502.700103][T30065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.708268][ T28] audit: type=1326 audit(1655510602.238:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86ece89109 code=0x0 [ 1502.795007][T30069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1502.828659][ T5633] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1503.194100][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1503.194158][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.194191][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.194218][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1503.194261][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1503.194290][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.196497][ T5633] usb 3-1: config 0 descriptor?? [ 1503.683799][ T5633] appleir 0003:05AC:8243.00DA: unknown main item tag 0x0 [ 1503.684132][ T5633] appleir 0003:05AC:8243.00DA: No inputs registered, leaving [ 1503.687984][ T5633] appleir 0003:05AC:8243.00DA: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1505.164040][T18397] usb 3-1: reset high-speed USB device number 108 using dummy_hcd 00:03:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93e4e9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:03:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xd2e51fa7}, 0x0) 00:03:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffffe) 00:03:25 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002440)={0x6, 0x0, 0x0, &(0x7f0000002280)='GPL\x00', 0xc50, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000004680), 0xffffffffffffffff) 00:03:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf0ffffff00000000) 00:03:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'GPL\x00'}]}, 0x1c}}, 0x0) 00:03:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf0ffffff}, 0x0) 00:03:25 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:03:25 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:03:25 executing program 5: socketpair(0x29, 0x0, 0x0, &(0x7f0000000a80)) [ 1505.601718][T30080] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x3ffffffffff) 00:03:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf5ffffff00000000) [ 1505.800284][T30094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1505.914193][T18397] usb 3-1: device descriptor read/64, error -71 [ 1506.192421][T18397] usb 3-1: reset high-speed USB device number 108 using dummy_hcd 00:03:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93e4e9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:03:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e1f, @empty}, 0x0, 0x0, 0x0, 0x0, 0x41, &(0x7f00000002c0)='batadv0\x00', 0x4d, 0x1, 0x4}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) write$binfmt_misc(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2a) socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000004000495000d00000000000672af0000591a7821677962612659ee8b55b6e18bad6be783ee8f9930bfd74d61e666701722b51507cea754ad66b6dd62e3c5ad978a679c314b798b9c9f2fa3b823418d31f6cac93237e72529877ad4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r4 = socket$inet6(0xa, 0x803, 0x6) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000380)=0x1c) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x6, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_bridge\x00'}, 0x18) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x6c, [0x2, 0x2dd, 0x0, 0x1], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x78) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x60}}, 0x42881) 00:03:26 executing program 5: socketpair(0x11, 0xa, 0x0, &(0x7f0000002500)) 00:03:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xfffff000}, 0x0) 00:03:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x1000000000000) 00:03:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfcffffff00000000) [ 1506.829779][ T5633] usb 3-1: USB disconnect, device number 108 00:03:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002700), r0) 00:03:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1506.921940][T30108] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1506.927139][ T28] audit: type=1400 audit(1655510606.458:471): avc: denied { write } for pid=30098 comm="syz-executor.0" path="socket:[118942]" dev="sockfs" ino=118942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:03:26 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x4e23, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xffffff9e}, 0x0) 00:03:26 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x4e23, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 1507.096019][T30110] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1507.157044][T30121] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 1507.312364][ T5633] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1507.702582][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1507.702618][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.702637][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.702652][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1507.702677][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1507.702693][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.704321][ T5633] usb 3-1: config 0 descriptor?? [ 1508.222566][ T5633] usbhid 3-1:0.0: can't add hid device: -71 [ 1508.222620][ T5633] usbhid: probe of 3-1:0.0 failed with error -71 [ 1508.224691][ T5633] usb 3-1: USB disconnect, device number 109 00:03:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4000000000000) 00:03:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfeffffff00000000) 00:03:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e1f, @empty}, 0x0, 0x0, 0x0, 0x0, 0x41, &(0x7f00000002c0)='batadv0\x00', 0x4d, 0x1, 0x4}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) write$binfmt_misc(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2a) socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000004000495000d00000000000672af0000591a7821677962612659ee8b55b6e18bad6be783ee8f9930bfd74d61e666701722b51507cea754ad66b6dd62e3c5ad978a679c314b798b9c9f2fa3b823418d31f6cac93237e72529877ad4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r4 = socket$inet6(0xa, 0x803, 0x6) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000380)=0x1c) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x6, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_bridge\x00'}, 0x18) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x6c, [0x2, 0x2dd, 0x0, 0x1], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x78) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x60}}, 0x42881) 00:03:28 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x4e23, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0xd56, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x40, 0xe5, 0xcf, 0x10, 0x5c6, 0x9231, 0x206b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd44, 0x4, 0x2, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x99, 0x1, 0xd, 0x7e, 0x38, 0x20, 0x1f, [], [{{0x9, 0x5, 0xb, 0x1, 0x0, 0xe0, 0xc0, 0x40, [@generic={0x9f, 0x23, "844559511751776a802a9f34e662b8ef2e225a350d4441a9ee7e29017264627c2e0332351c2ade6f8abf88cf3fb7c9470b07c5cdaa671a6aee970599e4329468126e679ad70ea72fa35bb9685e64fa1a6f117bc7d40c77b5377dfa9d4e69ce5b43a0a37eb8b9851e8143a3591806c806ea3fac02e973a32e47b6542ea07d49854cf85a6cc060d89f5e49cdedabd794f6c438e6625d748e40a229ac9176"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xd6, 0xf8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x45, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x7f, 0x1, 0x9, [@generic={0xef, 0x11, "046151ab59afae84bd2b0dd38a2204a5873880b46408c1cedbfc3671a3bd3b8dd9918305add3eec76fe7e239fd17fd9a811557cd754881f153f33b219fb6a15d56d9ff4d07aae8b8d4ad2626edcd9acfe4b2125de7b65f8b5846c1f37ae4927314877fe03adcb491a8b8c985f2d194280a592c6378adb5aad3dec58fcee45c1a748e97917357e14badbc3fa3aa84515251eec09529135295a7a2175eaf2e67ddc9b5640b49a92ebdaeec8fc7b339fff31364482ab10de8dec0aa4214936071914fa038f41b6f54ccd4a576eedbcca83ae4d44f6aa517611649e7fdcce64d821be483e4c9aee0a5e45b36f6ebee"}, @generic={0x12, 0x23, "807adff6c541fc808fb4824f9e2b1bed"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x80, 0xfd, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xff, 0x3, 0xfa, [@generic={0x80, 0x10, "1b2d617e9b7a345c095399dd9b67c31f5faac07212f421fb048ac867e1febf3ea87ae2a807eca922cbc089285ade931b1d2c0221d5c65e27830ad2026c3e7a12968ed6daeb22e71ef6b1fb61efe7e591eed30bbcf3b9ec28fd68c5cd6e0cfe050711791e3fe3a49dc2dbc18027295bfd555e23f6daa272cc1dcd4832508b"}, @generic={0xc4, 0x17, "7523bf7327c502a7a534270a03602f04f4be92c2aa86697e41f87309500a5176d2849b46fb1e6bdbc2b6e185effc728993b11810d0788685068c82d7703de5dd97eb6665319779a93d967d11d16a86488dd583e2961418ebd4bde0a977e3807ffaa5c7aa16e2266ed981d03720ebf6c341cf5c4b50b246df4228f63cb0084cb161bb609ad6b8a0dc8608620248625892d0f2e9cdc418992ca1b068928936bcfaf6af4c381e36e17e2c28799478efcac576541b44ffbc56dbb6f5f95253f3bf31b634"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x84, 0x10, 0x40, 0x20, 0x1, 0x2}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x0, 0x1, 0x2a, [@generic={0x52, 0x31, "ef32cf24ed67ef6dcebc1ccca745798262c727befba8f22b3c118b5486c6330d6b7c4df8a83b9573e8b46e4659bcd165b2f89bd09e6bc04f5c3fb676e59463717e64a57fdbc550b200e2bb043e50ebff"}, @generic={0x70, 0x11, "d361e49718e5f038145cbe20f972f25efcc0864867db1ba55ad5e806b3ee82f28db89536356bf61efee3167eae1e29fe61d9f6f4427fd4f4801abeea798c4c75d94a504de396b4e1f26c9e053a05dbf74cdde3f3b6784eb39aadd46f884e4c00231805fc39dc2afdf73c7736e408"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0xa0, 0xa7}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xbc, 0x80, 0x20}}, {{0x9, 0x5, 0x3, 0xa, 0x10, 0x9b, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x1f, 0x4, 0x7, [@generic={0xc, 0x0, "6666720cb23afde081d8"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x8, 0x5, 0xe4, [@generic={0x3b, 0x0, "de76689fb0788014dc191b3f1b9586265b59340278fb558ba76f0d6c35d2b7921e96679fa13aaa03e77fa01c2fafca160fea64c4d3f0248470"}, @generic={0xeb, 0x21, "78506cdd7685d415448e3adc94744f94e5002e816d3576646305fe4dc63a5c2e4e22cac3ce21bbeb3a729f7c58bf680e017b5ce15b0fd8fe7408fc9b9945efa7ee1487d460e0c983dfdaab74e6727fb4ac7d14c350cf830941561eb396d1822bad15041a7f62c34877057e97318b820400b5438f337e2b11538ba7189daf242859164811a7acc3a6298398ce6152ff3deaed995d9f9840f7b12858163c8da2882069bcfddabb10b6a722c4f29eb681c940efec195a9b4afed62714b1f828983b36cd02735a0d653a5255441f3f90f945f4f416bed977e1edd30e5ebff08906411a44ad8ec5702fd6f8"}]}}]}}, {{0x9, 0x4, 0x5c, 0xe, 0x3, 0xca, 0x25, 0xa5, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "6364c4e35aed"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x20, 0x0, 0x9}}], [{{0x9, 0x5, 0x9, 0x3, 0x0, 0x1, 0x32, 0x0, [@generic={0x7f, 0x21, "796f0d4e35c92899521c95cfd29696a542333a733e68a3955ce0b3996f4a5d90c88a9f0f2ee077b072792be9b021269737fbcf26197885299b952682d6f5ce292118ba8064c37ff47e5562ec59f0cd724e97b86494c45ee32f5964464efa12ecbcca6e1e45a737a014fa9292f7f28310a7c2ae7720410826693e64948e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6}]}}, {{0x9, 0x5, 0x6, 0x14, 0x20, 0x11, 0x40, 0x84}}, {{0x9, 0x5, 0xc, 0xa, 0x200, 0x4, 0x2, 0x0, [@generic={0x68, 0x31, "943f6076476ef54c02a3dda386a5fce2db089965f639bf6a4401943a3ab0d98bf16cbd318e1d9f293212c43c81927435c615aa59a248edca6d02ad481b6bba86c27450d3dcf32941e1e21bdc7fd4f42b909e5cf41ad4dfc19cf5ac7e43e282716e6fa27138ed"}, @generic={0x15, 0xa, "289520b61bfe086f9c6c6aeac1bad196f52d71"}]}}]}}, {{0x9, 0x4, 0xe0, 0x8, 0x4, 0xf8, 0xe7, 0x3c, 0x6, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x40, 0x2, 0x31, 0x1f, "d41bf34b910d4850"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x1, 0x0, "7931ffe5cf"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x2, 0x0, "de7d5e7a3c"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x6, 0x1e, [@generic={0xfb, 0x7, "50ff4daf0f90b031a314b67bf49fcc0a8319a0387d06e6a6116c3191a4fe48013b94f3e183832025e32dca2feaee56fa317972a5b979a276afd0f5e4bacba235976ccec1cba689133431f2a1908f22dc0496eeb141b39c8558704f32d2ffef33a90177bb868e5ddf70367e1635e4568044975b8c313c3c80586013ca30a1b0cb7d1093be4c7546c3672f9221950d4f6c498cea33f6abc0b7d30e8c412844e1a5947b692151ebca9df3eb97a0825580b6cb858b9eb32c4e1ebace5a341f0e8949bb98a7faba06a296fcce5208543d7507e63b8e2b9177c74e810fc69e7f51fd87ff308f2e860bf7d5d915fbcc058cf1027771e94805c2ae75b5"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x5, 0x5, 0x4, [@generic={0x5b, 0xc, "4770fdf90b3b79db501a2ae10ac499ccef0720464e22d31f441ff4ebb5291085dc31db14f058da1978b96924d8506cc636e879fa2b187d05621ac46e832d99da2ed47d982888d23d5659f54347d6c0094ada243ebd21c1c7a1"}, @generic={0x28, 0x6, "9cc31a998ca5f183a7703ad49f2e9023423b24beb1346943871d6babcfec573ffab590fdb097"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x44, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xff, 0x7}]}}, {{0x9, 0x5, 0x8a, 0x0, 0x200, 0x81, 0x76, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x4055}]}}]}}, {{0x9, 0x4, 0xc1, 0xdf, 0xf, 0xa7, 0x8e, 0xf2, 0x1f, [], [{{0x9, 0x5, 0xc, 0x10, 0x48, 0x3f, 0x6, 0x5, [@generic={0x5d, 0x8, "5fdbea5843f19aeed86c40f9b5b5a924240ebe36c82c3295a33346bf2a95323fa09caa995691a8d5642fda89f07632057b2941c55534ddb44dd4106dda76cead5f6c71b0af49e863fda0ca9054553d3a9590b4bf3220b04a1118ba"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9c, 0x60, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x400}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x8, 0x8, 0x2, [@generic={0xd3, 0xb, "ed721e74370720d840494b8743dd7e048260889de589c1531c7f841c87f28da0b46aa0832532f9ba34278e1418fad49d10d937cfbba45d0daa938c20d9a24e9c6478ed165f8c7a21d09047588f5290f674fe56dba083095a4d755ce3ab30cfc4f0a64231b9f9240ca2bbc18c58f5f62bd4e82a16c2ded58d95a0c8dd429c40c1881ecaba0b839da7991ad9f6d550e9f7ab893b38b295b1668fc7bdd5764916a3e9523cdaaddd2cba27109a2f7680c6de8133ea6dbcb910c39a96e66dde2b946712459442bb9d622d5a38451a3f8cb6599b"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x8, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x9, 0x9, 0x98, [@generic={0xbc, 0x21, "57bf6cd7387b874257d28cd945b82d45c144a4470b8701ae9114bb7773ab0e950e95e68685b910aa12d2df5aaa7bfe7fcebfb3525726eda8d71d78301e824ad809c477d3200f42e1b289625a2bfa638dca0c602244c33b6b1426992bf6a67da3f021fe5621032fa0daff862353e8fd78e2b4764201191a3a921ef242f57378c1dc60f27375dbe15e32b7204cb35902d674a3c96d07556521ec4f906d8f49fe3aa035974b44f775105b02ec2496412a5af2a1ee85b4bb5b6e35f3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x1, 0x0, 0x85, [@generic={0x30, 0x30, "67de284fcda97c24d90e9dbe30f331508273303f8f50ca08acdb581f6a1914fe1ba05fa1aabda4bf014d45a7a5af"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x2, 0x2f, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x8, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x20, 0x6, 0x9, [@generic={0x34, 0x23, "e47be08f44994bb6fb63fb99c2a4328e99c96707e777eb9781e37e2aa55ca073aa198fb439acc9697e6516de36cb67cbfb76"}, @generic={0xe, 0xe, "1de418c13b3ee8a407d00094"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x3, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x40, 0x4, [@generic={0xc, 0x7, "06252c87464ed954878d"}, @generic={0x1d, 0x30, "995bc5a3f7d8b0af297ecefbded1920f942ea9f46cca6c20b8cf34"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x7f, 0x97, 0x3, [@generic={0x8b, 0x5, "77df3969de8a11f3e5baf48d879695da02cb4ba9c21bd9b010ce461bc59992c1fbfe951a22638c8dab6edbbc752296a50374aac53a9f98384bdae5559e49260d7b007eb0a1883d37f9c864517e6b62b210f2eb917f884d6082f52278d7bab0c1f2a3007606f3b1784e96413dae13d727d52dd1458360e2529adaca092240b95fd5b10629cea11e1b6a"}, @generic={0xa3, 0x5, "f1f47e462cac0cdec09cf547ba5e5ea4cd8d8437b199c3836c567aea4ff290e2d28aeeddbc34047e17d445dc4422c68b28f10b7e1488da45aec85703256c08cbc06ef09efa88641800ed563fd06ee6b3373480f516bd3bb5048611d3ccac7e23c0abba6f57c03be5440831947c1e8f97f0a0baf418a4181e46e2d73c46efbd90c025d55c8f9534e02e7df1b6943f86bec583e4ea213f92cd1fec6b23bc6603d89a"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x5, 0x80, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x93c55607b0e47b71, 0x1, 0x7f, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0xff, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x9bb}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x9}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x6, 0x0, 0x40, 0x9}, 0x95, &(0x7f0000000040)={0x5, 0xf, 0x95, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xbf, 0xfc, 0x20, 0x800, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf1, 0x8, 0xa, 0xda30, 0x8}, @ptm_cap={0x3}, @generic={0x6a, 0x10, 0x2, "e0551bb805a5267787a5e59a026e5855a7433e1a6ea3b98dd02f65f71507c814cf0465e4d2a16e1896d321712094022ee19b5626757c6f6744ece90422a482ca9be0c3242174302cb054cd69c0a8c0b63c1a580e0eb4b85e6a577c246e347d5f0039c205091563"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1f, 0x5d, 0x2}]}, 0x4, [{0xf2, &(0x7f0000000380)=@string={0xf2, 0x3, "34cec6f14909ca5c5d59041e920336c1ab0bf02356f80d71d114ef314c1ff2acdca6653227640e458f134dfa80a5fd5d294a469752815bb3fc7b46481c31d45edaa67126fcbe8bd84540ce00c03f06b0e9b246193f38026e3d8b8892277bad05991578feacbd624f8b74ef5b635b0729f04abb5c7adae6c00d02a89f0f1782a3efba999e14f2109aa5634391e20d35cedba82fd93f7140657ce8c4bdbaa2bb4265edfb7904a046628ac02f2d09d324fb81bf1d4932f72c76772af3280255d29ca19102227d17b81a71345d7e75776cc3e3bce26445cc88fc81bbe507bff9263d4af62b39846da2d3f151f34a940794f1"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3409}}, {0xd9, &(0x7f0000000480)=@string={0xd9, 0x3, "d50c30531319db3763849b9bf5e0fe61f0fcf314259d7934a2322ed848957ef26ff8475b5a8cd0b14dea376e9a6ab950d07e0b6bdf536a992773d2607aa6ccd0d27b71233dd7eb1ea5daeafe14580d879580d6da7933c07166687ed636130ccfadc9791f51321d6a449e4cf116711998d716eda41c354c47c64fb79771167421c8ac426192c4cd2de5f7f2f11dfe258b5e55de5a38735cc33e85d3190a86cee73ca8d66727ef1f8bd84679ce9d701e59ab2b397e0b387fb0979cc25d9b647a00cecf2febd48e53ac72f1ced781912f30994f7adc77823b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42b}}]}) 00:03:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x3000000000000}, 0x0) 00:03:28 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x4e23, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x40030000000000}, 0x0) 00:03:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffff7f00000000) [ 1508.747244][T30134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1508.765494][T30136] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x40030000000000) 00:03:28 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 00:03:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 00:03:28 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 00:03:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1508.982607][T30146] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1509.002891][ T5633] usb 3-1: new high-speed USB device number 110 using dummy_hcd 00:03:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e1f, @empty}, 0x0, 0x0, 0x0, 0x0, 0x41, &(0x7f00000002c0)='batadv0\x00', 0x4d, 0x1, 0x4}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) write$binfmt_misc(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2a) socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000004000495000d00000000000672af0000591a7821677962612659ee8b55b6e18bad6be783ee8f9930bfd74d61e666701722b51507cea754ad66b6dd62e3c5ad978a679c314b798b9c9f2fa3b823418d31f6cac93237e72529877ad4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r4 = socket$inet6(0xa, 0x803, 0x6) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000380)=0x1c) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x6, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_bridge\x00'}, 0x18) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x6c, [0x2, 0x2dd, 0x0, 0x1], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x78) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x60}}, 0x42881) 00:03:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf0ffffffffffff) [ 1509.005521][T30147] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1509.362503][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1509.362556][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.362583][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.362606][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1509.362669][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1509.362695][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.364297][ T5633] usb 3-1: config 0 descriptor?? [ 1509.854094][ T5633] appleir 0003:05AC:8243.00DB: unknown main item tag 0x0 [ 1509.854363][ T5633] appleir 0003:05AC:8243.00DB: No inputs registered, leaving [ 1509.857462][ T5633] appleir 0003:05AC:8243.00DB: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1511.312306][T18397] usb 3-1: reset high-speed USB device number 110 using dummy_hcd 00:03:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (rerun: 32) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_connect(0x6, 0xd56, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x40, 0xe5, 0xcf, 0x10, 0x5c6, 0x9231, 0x206b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd44, 0x4, 0x2, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x99, 0x1, 0xd, 0x7e, 0x38, 0x20, 0x1f, [], [{{0x9, 0x5, 0xb, 0x1, 0x0, 0xe0, 0xc0, 0x40, [@generic={0x9f, 0x23, "844559511751776a802a9f34e662b8ef2e225a350d4441a9ee7e29017264627c2e0332351c2ade6f8abf88cf3fb7c9470b07c5cdaa671a6aee970599e4329468126e679ad70ea72fa35bb9685e64fa1a6f117bc7d40c77b5377dfa9d4e69ce5b43a0a37eb8b9851e8143a3591806c806ea3fac02e973a32e47b6542ea07d49854cf85a6cc060d89f5e49cdedabd794f6c438e6625d748e40a229ac9176"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xd6, 0xf8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x45, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x7f, 0x1, 0x9, [@generic={0xef, 0x11, "046151ab59afae84bd2b0dd38a2204a5873880b46408c1cedbfc3671a3bd3b8dd9918305add3eec76fe7e239fd17fd9a811557cd754881f153f33b219fb6a15d56d9ff4d07aae8b8d4ad2626edcd9acfe4b2125de7b65f8b5846c1f37ae4927314877fe03adcb491a8b8c985f2d194280a592c6378adb5aad3dec58fcee45c1a748e97917357e14badbc3fa3aa84515251eec09529135295a7a2175eaf2e67ddc9b5640b49a92ebdaeec8fc7b339fff31364482ab10de8dec0aa4214936071914fa038f41b6f54ccd4a576eedbcca83ae4d44f6aa517611649e7fdcce64d821be483e4c9aee0a5e45b36f6ebee"}, @generic={0x12, 0x23, "807adff6c541fc808fb4824f9e2b1bed"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x80, 0xfd, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xff, 0x3, 0xfa, [@generic={0x80, 0x10, "1b2d617e9b7a345c095399dd9b67c31f5faac07212f421fb048ac867e1febf3ea87ae2a807eca922cbc089285ade931b1d2c0221d5c65e27830ad2026c3e7a12968ed6daeb22e71ef6b1fb61efe7e591eed30bbcf3b9ec28fd68c5cd6e0cfe050711791e3fe3a49dc2dbc18027295bfd555e23f6daa272cc1dcd4832508b"}, @generic={0xc4, 0x17, "7523bf7327c502a7a534270a03602f04f4be92c2aa86697e41f87309500a5176d2849b46fb1e6bdbc2b6e185effc728993b11810d0788685068c82d7703de5dd97eb6665319779a93d967d11d16a86488dd583e2961418ebd4bde0a977e3807ffaa5c7aa16e2266ed981d03720ebf6c341cf5c4b50b246df4228f63cb0084cb161bb609ad6b8a0dc8608620248625892d0f2e9cdc418992ca1b068928936bcfaf6af4c381e36e17e2c28799478efcac576541b44ffbc56dbb6f5f95253f3bf31b634"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x84, 0x10, 0x40, 0x20, 0x1, 0x2}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x0, 0x1, 0x2a, [@generic={0x52, 0x31, "ef32cf24ed67ef6dcebc1ccca745798262c727befba8f22b3c118b5486c6330d6b7c4df8a83b9573e8b46e4659bcd165b2f89bd09e6bc04f5c3fb676e59463717e64a57fdbc550b200e2bb043e50ebff"}, @generic={0x70, 0x11, "d361e49718e5f038145cbe20f972f25efcc0864867db1ba55ad5e806b3ee82f28db89536356bf61efee3167eae1e29fe61d9f6f4427fd4f4801abeea798c4c75d94a504de396b4e1f26c9e053a05dbf74cdde3f3b6784eb39aadd46f884e4c00231805fc39dc2afdf73c7736e408"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0xa0, 0xa7}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xbc, 0x80, 0x20}}, {{0x9, 0x5, 0x3, 0xa, 0x10, 0x9b, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x1f, 0x4, 0x7, [@generic={0xc, 0x0, "6666720cb23afde081d8"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x8, 0x5, 0xe4, [@generic={0x3b, 0x0, "de76689fb0788014dc191b3f1b9586265b59340278fb558ba76f0d6c35d2b7921e96679fa13aaa03e77fa01c2fafca160fea64c4d3f0248470"}, @generic={0xeb, 0x21, "78506cdd7685d415448e3adc94744f94e5002e816d3576646305fe4dc63a5c2e4e22cac3ce21bbeb3a729f7c58bf680e017b5ce15b0fd8fe7408fc9b9945efa7ee1487d460e0c983dfdaab74e6727fb4ac7d14c350cf830941561eb396d1822bad15041a7f62c34877057e97318b820400b5438f337e2b11538ba7189daf242859164811a7acc3a6298398ce6152ff3deaed995d9f9840f7b12858163c8da2882069bcfddabb10b6a722c4f29eb681c940efec195a9b4afed62714b1f828983b36cd02735a0d653a5255441f3f90f945f4f416bed977e1edd30e5ebff08906411a44ad8ec5702fd6f8"}]}}]}}, {{0x9, 0x4, 0x5c, 0xe, 0x3, 0xca, 0x25, 0xa5, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "6364c4e35aed"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x20, 0x0, 0x9}}], [{{0x9, 0x5, 0x9, 0x3, 0x0, 0x1, 0x32, 0x0, [@generic={0x7f, 0x21, "796f0d4e35c92899521c95cfd29696a542333a733e68a3955ce0b3996f4a5d90c88a9f0f2ee077b072792be9b021269737fbcf26197885299b952682d6f5ce292118ba8064c37ff47e5562ec59f0cd724e97b86494c45ee32f5964464efa12ecbcca6e1e45a737a014fa9292f7f28310a7c2ae7720410826693e64948e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6}]}}, {{0x9, 0x5, 0x6, 0x14, 0x20, 0x11, 0x40, 0x84}}, {{0x9, 0x5, 0xc, 0xa, 0x200, 0x4, 0x2, 0x0, [@generic={0x68, 0x31, "943f6076476ef54c02a3dda386a5fce2db089965f639bf6a4401943a3ab0d98bf16cbd318e1d9f293212c43c81927435c615aa59a248edca6d02ad481b6bba86c27450d3dcf32941e1e21bdc7fd4f42b909e5cf41ad4dfc19cf5ac7e43e282716e6fa27138ed"}, @generic={0x15, 0xa, "289520b61bfe086f9c6c6aeac1bad196f52d71"}]}}]}}, {{0x9, 0x4, 0xe0, 0x8, 0x4, 0xf8, 0xe7, 0x3c, 0x6, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x40, 0x2, 0x31, 0x1f, "d41bf34b910d4850"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x1, 0x0, "7931ffe5cf"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x2, 0x0, "de7d5e7a3c"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x6, 0x1e, [@generic={0xfb, 0x7, "50ff4daf0f90b031a314b67bf49fcc0a8319a0387d06e6a6116c3191a4fe48013b94f3e183832025e32dca2feaee56fa317972a5b979a276afd0f5e4bacba235976ccec1cba689133431f2a1908f22dc0496eeb141b39c8558704f32d2ffef33a90177bb868e5ddf70367e1635e4568044975b8c313c3c80586013ca30a1b0cb7d1093be4c7546c3672f9221950d4f6c498cea33f6abc0b7d30e8c412844e1a5947b692151ebca9df3eb97a0825580b6cb858b9eb32c4e1ebace5a341f0e8949bb98a7faba06a296fcce5208543d7507e63b8e2b9177c74e810fc69e7f51fd87ff308f2e860bf7d5d915fbcc058cf1027771e94805c2ae75b5"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x5, 0x5, 0x4, [@generic={0x5b, 0xc, "4770fdf90b3b79db501a2ae10ac499ccef0720464e22d31f441ff4ebb5291085dc31db14f058da1978b96924d8506cc636e879fa2b187d05621ac46e832d99da2ed47d982888d23d5659f54347d6c0094ada243ebd21c1c7a1"}, @generic={0x28, 0x6, "9cc31a998ca5f183a7703ad49f2e9023423b24beb1346943871d6babcfec573ffab590fdb097"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x44, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xff, 0x7}]}}, {{0x9, 0x5, 0x8a, 0x0, 0x200, 0x81, 0x76, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x4055}]}}]}}, {{0x9, 0x4, 0xc1, 0xdf, 0xf, 0xa7, 0x8e, 0xf2, 0x1f, [], [{{0x9, 0x5, 0xc, 0x10, 0x48, 0x3f, 0x6, 0x5, [@generic={0x5d, 0x8, "5fdbea5843f19aeed86c40f9b5b5a924240ebe36c82c3295a33346bf2a95323fa09caa995691a8d5642fda89f07632057b2941c55534ddb44dd4106dda76cead5f6c71b0af49e863fda0ca9054553d3a9590b4bf3220b04a1118ba"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9c, 0x60, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x400}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x8, 0x8, 0x2, [@generic={0xd3, 0xb, "ed721e74370720d840494b8743dd7e048260889de589c1531c7f841c87f28da0b46aa0832532f9ba34278e1418fad49d10d937cfbba45d0daa938c20d9a24e9c6478ed165f8c7a21d09047588f5290f674fe56dba083095a4d755ce3ab30cfc4f0a64231b9f9240ca2bbc18c58f5f62bd4e82a16c2ded58d95a0c8dd429c40c1881ecaba0b839da7991ad9f6d550e9f7ab893b38b295b1668fc7bdd5764916a3e9523cdaaddd2cba27109a2f7680c6de8133ea6dbcb910c39a96e66dde2b946712459442bb9d622d5a38451a3f8cb6599b"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x8, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x9, 0x9, 0x98, [@generic={0xbc, 0x21, "57bf6cd7387b874257d28cd945b82d45c144a4470b8701ae9114bb7773ab0e950e95e68685b910aa12d2df5aaa7bfe7fcebfb3525726eda8d71d78301e824ad809c477d3200f42e1b289625a2bfa638dca0c602244c33b6b1426992bf6a67da3f021fe5621032fa0daff862353e8fd78e2b4764201191a3a921ef242f57378c1dc60f27375dbe15e32b7204cb35902d674a3c96d07556521ec4f906d8f49fe3aa035974b44f775105b02ec2496412a5af2a1ee85b4bb5b6e35f3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x1, 0x0, 0x85, [@generic={0x30, 0x30, "67de284fcda97c24d90e9dbe30f331508273303f8f50ca08acdb581f6a1914fe1ba05fa1aabda4bf014d45a7a5af"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x2, 0x2f, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x8, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x20, 0x6, 0x9, [@generic={0x34, 0x23, "e47be08f44994bb6fb63fb99c2a4328e99c96707e777eb9781e37e2aa55ca073aa198fb439acc9697e6516de36cb67cbfb76"}, @generic={0xe, 0xe, "1de418c13b3ee8a407d00094"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x3, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x40, 0x4, [@generic={0xc, 0x7, "06252c87464ed954878d"}, @generic={0x1d, 0x30, "995bc5a3f7d8b0af297ecefbded1920f942ea9f46cca6c20b8cf34"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x7f, 0x97, 0x3, [@generic={0x8b, 0x5, "77df3969de8a11f3e5baf48d879695da02cb4ba9c21bd9b010ce461bc59992c1fbfe951a22638c8dab6edbbc752296a50374aac53a9f98384bdae5559e49260d7b007eb0a1883d37f9c864517e6b62b210f2eb917f884d6082f52278d7bab0c1f2a3007606f3b1784e96413dae13d727d52dd1458360e2529adaca092240b95fd5b10629cea11e1b6a"}, @generic={0xa3, 0x5, "f1f47e462cac0cdec09cf547ba5e5ea4cd8d8437b199c3836c567aea4ff290e2d28aeeddbc34047e17d445dc4422c68b28f10b7e1488da45aec85703256c08cbc06ef09efa88641800ed563fd06ee6b3373480f516bd3bb5048611d3ccac7e23c0abba6f57c03be5440831947c1e8f97f0a0baf418a4181e46e2d73c46efbd90c025d55c8f9534e02e7df1b6943f86bec583e4ea213f92cd1fec6b23bc6603d89a"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x5, 0x80, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x93c55607b0e47b71, 0x1, 0x7f, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0xff, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x9bb}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x9}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x6, 0x0, 0x40, 0x9}, 0x95, &(0x7f0000000040)={0x5, 0xf, 0x95, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xbf, 0xfc, 0x20, 0x800, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf1, 0x8, 0xa, 0xda30, 0x8}, @ptm_cap={0x3}, @generic={0x6a, 0x10, 0x2, "e0551bb805a5267787a5e59a026e5855a7433e1a6ea3b98dd02f65f71507c814cf0465e4d2a16e1896d321712094022ee19b5626757c6f6744ece90422a482ca9be0c3242174302cb054cd69c0a8c0b63c1a580e0eb4b85e6a577c246e347d5f0039c205091563"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1f, 0x5d, 0x2}]}, 0x4, [{0xf2, &(0x7f0000000380)=@string={0xf2, 0x3, "34cec6f14909ca5c5d59041e920336c1ab0bf02356f80d71d114ef314c1ff2acdca6653227640e458f134dfa80a5fd5d294a469752815bb3fc7b46481c31d45edaa67126fcbe8bd84540ce00c03f06b0e9b246193f38026e3d8b8892277bad05991578feacbd624f8b74ef5b635b0729f04abb5c7adae6c00d02a89f0f1782a3efba999e14f2109aa5634391e20d35cedba82fd93f7140657ce8c4bdbaa2bb4265edfb7904a046628ac02f2d09d324fb81bf1d4932f72c76772af3280255d29ca19102227d17b81a71345d7e75776cc3e3bce26445cc88fc81bbe507bff9263d4af62b39846da2d3f151f34a940794f1"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3409}}, {0xd9, &(0x7f0000000480)=@string={0xd9, 0x3, "d50c30531319db3763849b9bf5e0fe61f0fcf314259d7934a2322ed848957ef26ff8475b5a8cd0b14dea376e9a6ab950d07e0b6bdf536a992773d2607aa6ccd0d27b71233dd7eb1ea5daeafe14580d879580d6da7933c07166687ed636130ccfadc9791f51321d6a449e4cf116711998d716eda41c354c47c64fb79771167421c8ac426192c4cd2de5f7f2f11dfe258b5e55de5a38735cc33e85d3190a86cee73ca8d66727ef1f8bd84679ce9d701e59ab2b397e0b387fb0979cc25d9b647a00cecf2febd48e53ac72f1ced781912f30994f7adc77823b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42b}}]}) 00:03:31 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 00:03:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x200000000000000}, 0x0) 00:03:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x100000000000000) 00:03:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffffff00000000) 00:03:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e1f, @empty}, 0x0, 0x0, 0x0, 0x0, 0x41, &(0x7f00000002c0)='batadv0\x00', 0x4d, 0x1, 0x4}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) write$binfmt_misc(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a307b7d5194032753cf8656ab977ab58db6297d415eb6b4114a04000000000000000000ae3277001d9da30c48700459b41985b2afdc6e5744385ca57a3afbd27f5adf97fc0126c716e4abe5e57061ba552cca0a30fbc9aab0df7ecaf6bd8961bde0518b10d3df49a0bafff60e604066ff80694dbd059e361c6e72be43ba44a569965df85c652200ed0e684c6313e474ce332fb30ceef1beeffd39e6977503426bd7ec6da66b9c41c423c9cb6d3840f1b0be4d0a0e8b22c553a96991d4428672f1684f0f6d06410e3d21ba935db15a43091bc6e7f4395ac6f167f63a4e0370f9f54739ad56b9c92342b9e4771265dc010d1bac3f2c7cd9da3520e5237eb6d3e82a028657b9994f29c5835ed54847dd"], 0x2a) socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000004000495000d00000000000672af0000591a7821677962612659ee8b55b6e18bad6be783ee8f9930bfd74d61e666701722b51507cea754ad66b6dd62e3c5ad978a679c314b798b9c9f2fa3b823418d31f6cac93237e72529877ad4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r4 = socket$inet6(0xa, 0x803, 0x6) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000380)=0x1c) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x6, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_bridge\x00'}, 0x18) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x6c, [0x2, 0x2dd, 0x0, 0x1], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x78) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x60}}, 0x42881) 00:03:31 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x300000000000000}, 0x0) 00:03:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x400000000000000}, 0x0) 00:03:31 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) [ 1511.825099][T30174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1511.845411][T30175] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffffffffff000) 00:03:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x200000000000000) [ 1512.049169][T30190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1512.122426][T18397] usb 3-1: device descriptor read/64, error -71 [ 1512.392351][T18397] usb 3-1: reset high-speed USB device number 110 using dummy_hcd 00:03:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0xd56, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x40, 0xe5, 0xcf, 0x10, 0x5c6, 0x9231, 0x206b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd44, 0x4, 0x2, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x99, 0x1, 0xd, 0x7e, 0x38, 0x20, 0x1f, [], [{{0x9, 0x5, 0xb, 0x1, 0x0, 0xe0, 0xc0, 0x40, [@generic={0x9f, 0x23, "844559511751776a802a9f34e662b8ef2e225a350d4441a9ee7e29017264627c2e0332351c2ade6f8abf88cf3fb7c9470b07c5cdaa671a6aee970599e4329468126e679ad70ea72fa35bb9685e64fa1a6f117bc7d40c77b5377dfa9d4e69ce5b43a0a37eb8b9851e8143a3591806c806ea3fac02e973a32e47b6542ea07d49854cf85a6cc060d89f5e49cdedabd794f6c438e6625d748e40a229ac9176"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xd6, 0xf8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x45, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x7f, 0x1, 0x9, [@generic={0xef, 0x11, "046151ab59afae84bd2b0dd38a2204a5873880b46408c1cedbfc3671a3bd3b8dd9918305add3eec76fe7e239fd17fd9a811557cd754881f153f33b219fb6a15d56d9ff4d07aae8b8d4ad2626edcd9acfe4b2125de7b65f8b5846c1f37ae4927314877fe03adcb491a8b8c985f2d194280a592c6378adb5aad3dec58fcee45c1a748e97917357e14badbc3fa3aa84515251eec09529135295a7a2175eaf2e67ddc9b5640b49a92ebdaeec8fc7b339fff31364482ab10de8dec0aa4214936071914fa038f41b6f54ccd4a576eedbcca83ae4d44f6aa517611649e7fdcce64d821be483e4c9aee0a5e45b36f6ebee"}, @generic={0x12, 0x23, "807adff6c541fc808fb4824f9e2b1bed"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x80, 0xfd, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xff, 0x3, 0xfa, [@generic={0x80, 0x10, "1b2d617e9b7a345c095399dd9b67c31f5faac07212f421fb048ac867e1febf3ea87ae2a807eca922cbc089285ade931b1d2c0221d5c65e27830ad2026c3e7a12968ed6daeb22e71ef6b1fb61efe7e591eed30bbcf3b9ec28fd68c5cd6e0cfe050711791e3fe3a49dc2dbc18027295bfd555e23f6daa272cc1dcd4832508b"}, @generic={0xc4, 0x17, "7523bf7327c502a7a534270a03602f04f4be92c2aa86697e41f87309500a5176d2849b46fb1e6bdbc2b6e185effc728993b11810d0788685068c82d7703de5dd97eb6665319779a93d967d11d16a86488dd583e2961418ebd4bde0a977e3807ffaa5c7aa16e2266ed981d03720ebf6c341cf5c4b50b246df4228f63cb0084cb161bb609ad6b8a0dc8608620248625892d0f2e9cdc418992ca1b068928936bcfaf6af4c381e36e17e2c28799478efcac576541b44ffbc56dbb6f5f95253f3bf31b634"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x84, 0x10, 0x40, 0x20, 0x1, 0x2}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x0, 0x1, 0x2a, [@generic={0x52, 0x31, "ef32cf24ed67ef6dcebc1ccca745798262c727befba8f22b3c118b5486c6330d6b7c4df8a83b9573e8b46e4659bcd165b2f89bd09e6bc04f5c3fb676e59463717e64a57fdbc550b200e2bb043e50ebff"}, @generic={0x70, 0x11, "d361e49718e5f038145cbe20f972f25efcc0864867db1ba55ad5e806b3ee82f28db89536356bf61efee3167eae1e29fe61d9f6f4427fd4f4801abeea798c4c75d94a504de396b4e1f26c9e053a05dbf74cdde3f3b6784eb39aadd46f884e4c00231805fc39dc2afdf73c7736e408"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0xa0, 0xa7}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xbc, 0x80, 0x20}}, {{0x9, 0x5, 0x3, 0xa, 0x10, 0x9b, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x1f, 0x4, 0x7, [@generic={0xc, 0x0, "6666720cb23afde081d8"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x8, 0x5, 0xe4, [@generic={0x3b, 0x0, "de76689fb0788014dc191b3f1b9586265b59340278fb558ba76f0d6c35d2b7921e96679fa13aaa03e77fa01c2fafca160fea64c4d3f0248470"}, @generic={0xeb, 0x21, "78506cdd7685d415448e3adc94744f94e5002e816d3576646305fe4dc63a5c2e4e22cac3ce21bbeb3a729f7c58bf680e017b5ce15b0fd8fe7408fc9b9945efa7ee1487d460e0c983dfdaab74e6727fb4ac7d14c350cf830941561eb396d1822bad15041a7f62c34877057e97318b820400b5438f337e2b11538ba7189daf242859164811a7acc3a6298398ce6152ff3deaed995d9f9840f7b12858163c8da2882069bcfddabb10b6a722c4f29eb681c940efec195a9b4afed62714b1f828983b36cd02735a0d653a5255441f3f90f945f4f416bed977e1edd30e5ebff08906411a44ad8ec5702fd6f8"}]}}]}}, {{0x9, 0x4, 0x5c, 0xe, 0x3, 0xca, 0x25, 0xa5, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "6364c4e35aed"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x20, 0x0, 0x9}}], [{{0x9, 0x5, 0x9, 0x3, 0x0, 0x1, 0x32, 0x0, [@generic={0x7f, 0x21, "796f0d4e35c92899521c95cfd29696a542333a733e68a3955ce0b3996f4a5d90c88a9f0f2ee077b072792be9b021269737fbcf26197885299b952682d6f5ce292118ba8064c37ff47e5562ec59f0cd724e97b86494c45ee32f5964464efa12ecbcca6e1e45a737a014fa9292f7f28310a7c2ae7720410826693e64948e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6}]}}, {{0x9, 0x5, 0x6, 0x14, 0x20, 0x11, 0x40, 0x84}}, {{0x9, 0x5, 0xc, 0xa, 0x200, 0x4, 0x2, 0x0, [@generic={0x68, 0x31, "943f6076476ef54c02a3dda386a5fce2db089965f639bf6a4401943a3ab0d98bf16cbd318e1d9f293212c43c81927435c615aa59a248edca6d02ad481b6bba86c27450d3dcf32941e1e21bdc7fd4f42b909e5cf41ad4dfc19cf5ac7e43e282716e6fa27138ed"}, @generic={0x15, 0xa, "289520b61bfe086f9c6c6aeac1bad196f52d71"}]}}]}}, {{0x9, 0x4, 0xe0, 0x8, 0x4, 0xf8, 0xe7, 0x3c, 0x6, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x40, 0x2, 0x31, 0x1f, "d41bf34b910d4850"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x1, 0x0, "7931ffe5cf"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x2, 0x0, "de7d5e7a3c"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x6, 0x1e, [@generic={0xfb, 0x7, "50ff4daf0f90b031a314b67bf49fcc0a8319a0387d06e6a6116c3191a4fe48013b94f3e183832025e32dca2feaee56fa317972a5b979a276afd0f5e4bacba235976ccec1cba689133431f2a1908f22dc0496eeb141b39c8558704f32d2ffef33a90177bb868e5ddf70367e1635e4568044975b8c313c3c80586013ca30a1b0cb7d1093be4c7546c3672f9221950d4f6c498cea33f6abc0b7d30e8c412844e1a5947b692151ebca9df3eb97a0825580b6cb858b9eb32c4e1ebace5a341f0e8949bb98a7faba06a296fcce5208543d7507e63b8e2b9177c74e810fc69e7f51fd87ff308f2e860bf7d5d915fbcc058cf1027771e94805c2ae75b5"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x5, 0x5, 0x4, [@generic={0x5b, 0xc, "4770fdf90b3b79db501a2ae10ac499ccef0720464e22d31f441ff4ebb5291085dc31db14f058da1978b96924d8506cc636e879fa2b187d05621ac46e832d99da2ed47d982888d23d5659f54347d6c0094ada243ebd21c1c7a1"}, @generic={0x28, 0x6, "9cc31a998ca5f183a7703ad49f2e9023423b24beb1346943871d6babcfec573ffab590fdb097"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x44, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xff, 0x7}]}}, {{0x9, 0x5, 0x8a, 0x0, 0x200, 0x81, 0x76, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x4055}]}}]}}, {{0x9, 0x4, 0xc1, 0xdf, 0xf, 0xa7, 0x8e, 0xf2, 0x1f, [], [{{0x9, 0x5, 0xc, 0x10, 0x48, 0x3f, 0x6, 0x5, [@generic={0x5d, 0x8, "5fdbea5843f19aeed86c40f9b5b5a924240ebe36c82c3295a33346bf2a95323fa09caa995691a8d5642fda89f07632057b2941c55534ddb44dd4106dda76cead5f6c71b0af49e863fda0ca9054553d3a9590b4bf3220b04a1118ba"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9c, 0x60, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x400}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x8, 0x8, 0x2, [@generic={0xd3, 0xb, "ed721e74370720d840494b8743dd7e048260889de589c1531c7f841c87f28da0b46aa0832532f9ba34278e1418fad49d10d937cfbba45d0daa938c20d9a24e9c6478ed165f8c7a21d09047588f5290f674fe56dba083095a4d755ce3ab30cfc4f0a64231b9f9240ca2bbc18c58f5f62bd4e82a16c2ded58d95a0c8dd429c40c1881ecaba0b839da7991ad9f6d550e9f7ab893b38b295b1668fc7bdd5764916a3e9523cdaaddd2cba27109a2f7680c6de8133ea6dbcb910c39a96e66dde2b946712459442bb9d622d5a38451a3f8cb6599b"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x8, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x9, 0x9, 0x98, [@generic={0xbc, 0x21, "57bf6cd7387b874257d28cd945b82d45c144a4470b8701ae9114bb7773ab0e950e95e68685b910aa12d2df5aaa7bfe7fcebfb3525726eda8d71d78301e824ad809c477d3200f42e1b289625a2bfa638dca0c602244c33b6b1426992bf6a67da3f021fe5621032fa0daff862353e8fd78e2b4764201191a3a921ef242f57378c1dc60f27375dbe15e32b7204cb35902d674a3c96d07556521ec4f906d8f49fe3aa035974b44f775105b02ec2496412a5af2a1ee85b4bb5b6e35f3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x1, 0x0, 0x85, [@generic={0x30, 0x30, "67de284fcda97c24d90e9dbe30f331508273303f8f50ca08acdb581f6a1914fe1ba05fa1aabda4bf014d45a7a5af"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x2, 0x2f, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x8, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x20, 0x6, 0x9, [@generic={0x34, 0x23, "e47be08f44994bb6fb63fb99c2a4328e99c96707e777eb9781e37e2aa55ca073aa198fb439acc9697e6516de36cb67cbfb76"}, @generic={0xe, 0xe, "1de418c13b3ee8a407d00094"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x3, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x40, 0x4, [@generic={0xc, 0x7, "06252c87464ed954878d"}, @generic={0x1d, 0x30, "995bc5a3f7d8b0af297ecefbded1920f942ea9f46cca6c20b8cf34"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x7f, 0x97, 0x3, [@generic={0x8b, 0x5, "77df3969de8a11f3e5baf48d879695da02cb4ba9c21bd9b010ce461bc59992c1fbfe951a22638c8dab6edbbc752296a50374aac53a9f98384bdae5559e49260d7b007eb0a1883d37f9c864517e6b62b210f2eb917f884d6082f52278d7bab0c1f2a3007606f3b1784e96413dae13d727d52dd1458360e2529adaca092240b95fd5b10629cea11e1b6a"}, @generic={0xa3, 0x5, "f1f47e462cac0cdec09cf547ba5e5ea4cd8d8437b199c3836c567aea4ff290e2d28aeeddbc34047e17d445dc4422c68b28f10b7e1488da45aec85703256c08cbc06ef09efa88641800ed563fd06ee6b3373480f516bd3bb5048611d3ccac7e23c0abba6f57c03be5440831947c1e8f97f0a0baf418a4181e46e2d73c46efbd90c025d55c8f9534e02e7df1b6943f86bec583e4ea213f92cd1fec6b23bc6603d89a"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x5, 0x80, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x93c55607b0e47b71, 0x1, 0x7f, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0xff, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x9bb}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x9}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x6, 0x0, 0x40, 0x9}, 0x95, &(0x7f0000000040)={0x5, 0xf, 0x95, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xbf, 0xfc, 0x20, 0x800, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf1, 0x8, 0xa, 0xda30, 0x8}, @ptm_cap={0x3}, @generic={0x6a, 0x10, 0x2, "e0551bb805a5267787a5e59a026e5855a7433e1a6ea3b98dd02f65f71507c814cf0465e4d2a16e1896d321712094022ee19b5626757c6f6744ece90422a482ca9be0c3242174302cb054cd69c0a8c0b63c1a580e0eb4b85e6a577c246e347d5f0039c205091563"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1f, 0x5d, 0x2}]}, 0x4, [{0xf2, &(0x7f0000000380)=@string={0xf2, 0x3, "34cec6f14909ca5c5d59041e920336c1ab0bf02356f80d71d114ef314c1ff2acdca6653227640e458f134dfa80a5fd5d294a469752815bb3fc7b46481c31d45edaa67126fcbe8bd84540ce00c03f06b0e9b246193f38026e3d8b8892277bad05991578feacbd624f8b74ef5b635b0729f04abb5c7adae6c00d02a89f0f1782a3efba999e14f2109aa5634391e20d35cedba82fd93f7140657ce8c4bdbaa2bb4265edfb7904a046628ac02f2d09d324fb81bf1d4932f72c76772af3280255d29ca19102227d17b81a71345d7e75776cc3e3bce26445cc88fc81bbe507bff9263d4af62b39846da2d3f151f34a940794f1"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3409}}, {0xd9, &(0x7f0000000480)=@string={0xd9, 0x3, "d50c30531319db3763849b9bf5e0fe61f0fcf314259d7934a2322ed848957ef26ff8475b5a8cd0b14dea376e9a6ab950d07e0b6bdf536a992773d2607aa6ccd0d27b71233dd7eb1ea5daeafe14580d879580d6da7933c07166687ed636130ccfadc9791f51321d6a449e4cf116711998d716eda41c354c47c64fb79771167421c8ac426192c4cd2de5f7f2f11dfe258b5e55de5a38735cc33e85d3190a86cee73ca8d66727ef1f8bd84679ce9d701e59ab2b397e0b387fb0979cc25d9b647a00cecf2febd48e53ac72f1ced781912f30994f7adc77823b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_connect(0x6, 0xd56, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0x40, 0xe5, 0xcf, 0x10, 0x5c6, 0x9231, 0x206b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd44, 0x4, 0x2, 0x2, 0xa0, 0x1, [{{0x9, 0x4, 0x99, 0x1, 0xd, 0x7e, 0x38, 0x20, 0x1f, [], [{{0x9, 0x5, 0xb, 0x1, 0x0, 0xe0, 0xc0, 0x40, [@generic={0x9f, 0x23, "844559511751776a802a9f34e662b8ef2e225a350d4441a9ee7e29017264627c2e0332351c2ade6f8abf88cf3fb7c9470b07c5cdaa671a6aee970599e4329468126e679ad70ea72fa35bb9685e64fa1a6f117bc7d40c77b5377dfa9d4e69ce5b43a0a37eb8b9851e8143a3591806c806ea3fac02e973a32e47b6542ea07d49854cf85a6cc060d89f5e49cdedabd794f6c438e6625d748e40a229ac9176"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xd6, 0xf8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x45, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x7f, 0x1, 0x9, [@generic={0xef, 0x11, "046151ab59afae84bd2b0dd38a2204a5873880b46408c1cedbfc3671a3bd3b8dd9918305add3eec76fe7e239fd17fd9a811557cd754881f153f33b219fb6a15d56d9ff4d07aae8b8d4ad2626edcd9acfe4b2125de7b65f8b5846c1f37ae4927314877fe03adcb491a8b8c985f2d194280a592c6378adb5aad3dec58fcee45c1a748e97917357e14badbc3fa3aa84515251eec09529135295a7a2175eaf2e67ddc9b5640b49a92ebdaeec8fc7b339fff31364482ab10de8dec0aa4214936071914fa038f41b6f54ccd4a576eedbcca83ae4d44f6aa517611649e7fdcce64d821be483e4c9aee0a5e45b36f6ebee"}, @generic={0x12, 0x23, "807adff6c541fc808fb4824f9e2b1bed"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x80, 0xfd, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xff, 0x3, 0xfa, [@generic={0x80, 0x10, "1b2d617e9b7a345c095399dd9b67c31f5faac07212f421fb048ac867e1febf3ea87ae2a807eca922cbc089285ade931b1d2c0221d5c65e27830ad2026c3e7a12968ed6daeb22e71ef6b1fb61efe7e591eed30bbcf3b9ec28fd68c5cd6e0cfe050711791e3fe3a49dc2dbc18027295bfd555e23f6daa272cc1dcd4832508b"}, @generic={0xc4, 0x17, "7523bf7327c502a7a534270a03602f04f4be92c2aa86697e41f87309500a5176d2849b46fb1e6bdbc2b6e185effc728993b11810d0788685068c82d7703de5dd97eb6665319779a93d967d11d16a86488dd583e2961418ebd4bde0a977e3807ffaa5c7aa16e2266ed981d03720ebf6c341cf5c4b50b246df4228f63cb0084cb161bb609ad6b8a0dc8608620248625892d0f2e9cdc418992ca1b068928936bcfaf6af4c381e36e17e2c28799478efcac576541b44ffbc56dbb6f5f95253f3bf31b634"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x84, 0x10, 0x40, 0x20, 0x1, 0x2}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x0, 0x1, 0x2a, [@generic={0x52, 0x31, "ef32cf24ed67ef6dcebc1ccca745798262c727befba8f22b3c118b5486c6330d6b7c4df8a83b9573e8b46e4659bcd165b2f89bd09e6bc04f5c3fb676e59463717e64a57fdbc550b200e2bb043e50ebff"}, @generic={0x70, 0x11, "d361e49718e5f038145cbe20f972f25efcc0864867db1ba55ad5e806b3ee82f28db89536356bf61efee3167eae1e29fe61d9f6f4427fd4f4801abeea798c4c75d94a504de396b4e1f26c9e053a05dbf74cdde3f3b6784eb39aadd46f884e4c00231805fc39dc2afdf73c7736e408"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0xa0, 0xa7}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xbc, 0x80, 0x20}}, {{0x9, 0x5, 0x3, 0xa, 0x10, 0x9b, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x1f, 0x4, 0x7, [@generic={0xc, 0x0, "6666720cb23afde081d8"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x8, 0x5, 0xe4, [@generic={0x3b, 0x0, "de76689fb0788014dc191b3f1b9586265b59340278fb558ba76f0d6c35d2b7921e96679fa13aaa03e77fa01c2fafca160fea64c4d3f0248470"}, @generic={0xeb, 0x21, "78506cdd7685d415448e3adc94744f94e5002e816d3576646305fe4dc63a5c2e4e22cac3ce21bbeb3a729f7c58bf680e017b5ce15b0fd8fe7408fc9b9945efa7ee1487d460e0c983dfdaab74e6727fb4ac7d14c350cf830941561eb396d1822bad15041a7f62c34877057e97318b820400b5438f337e2b11538ba7189daf242859164811a7acc3a6298398ce6152ff3deaed995d9f9840f7b12858163c8da2882069bcfddabb10b6a722c4f29eb681c940efec195a9b4afed62714b1f828983b36cd02735a0d653a5255441f3f90f945f4f416bed977e1edd30e5ebff08906411a44ad8ec5702fd6f8"}]}}]}}, {{0x9, 0x4, 0x5c, 0xe, 0x3, 0xca, 0x25, 0xa5, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "6364c4e35aed"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x20, 0x0, 0x9}}], [{{0x9, 0x5, 0x9, 0x3, 0x0, 0x1, 0x32, 0x0, [@generic={0x7f, 0x21, "796f0d4e35c92899521c95cfd29696a542333a733e68a3955ce0b3996f4a5d90c88a9f0f2ee077b072792be9b021269737fbcf26197885299b952682d6f5ce292118ba8064c37ff47e5562ec59f0cd724e97b86494c45ee32f5964464efa12ecbcca6e1e45a737a014fa9292f7f28310a7c2ae7720410826693e64948e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6}]}}, {{0x9, 0x5, 0x6, 0x14, 0x20, 0x11, 0x40, 0x84}}, {{0x9, 0x5, 0xc, 0xa, 0x200, 0x4, 0x2, 0x0, [@generic={0x68, 0x31, "943f6076476ef54c02a3dda386a5fce2db089965f639bf6a4401943a3ab0d98bf16cbd318e1d9f293212c43c81927435c615aa59a248edca6d02ad481b6bba86c27450d3dcf32941e1e21bdc7fd4f42b909e5cf41ad4dfc19cf5ac7e43e282716e6fa27138ed"}, @generic={0x15, 0xa, "289520b61bfe086f9c6c6aeac1bad196f52d71"}]}}]}}, {{0x9, 0x4, 0xe0, 0x8, 0x4, 0xf8, 0xe7, 0x3c, 0x6, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x40, 0x2, 0x31, 0x1f, "d41bf34b910d4850"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x1, 0x0, "7931ffe5cf"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x2, 0x0, "de7d5e7a3c"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x6, 0x1e, [@generic={0xfb, 0x7, "50ff4daf0f90b031a314b67bf49fcc0a8319a0387d06e6a6116c3191a4fe48013b94f3e183832025e32dca2feaee56fa317972a5b979a276afd0f5e4bacba235976ccec1cba689133431f2a1908f22dc0496eeb141b39c8558704f32d2ffef33a90177bb868e5ddf70367e1635e4568044975b8c313c3c80586013ca30a1b0cb7d1093be4c7546c3672f9221950d4f6c498cea33f6abc0b7d30e8c412844e1a5947b692151ebca9df3eb97a0825580b6cb858b9eb32c4e1ebace5a341f0e8949bb98a7faba06a296fcce5208543d7507e63b8e2b9177c74e810fc69e7f51fd87ff308f2e860bf7d5d915fbcc058cf1027771e94805c2ae75b5"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x5, 0x5, 0x4, [@generic={0x5b, 0xc, "4770fdf90b3b79db501a2ae10ac499ccef0720464e22d31f441ff4ebb5291085dc31db14f058da1978b96924d8506cc636e879fa2b187d05621ac46e832d99da2ed47d982888d23d5659f54347d6c0094ada243ebd21c1c7a1"}, @generic={0x28, 0x6, "9cc31a998ca5f183a7703ad49f2e9023423b24beb1346943871d6babcfec573ffab590fdb097"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x44, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xff, 0x7}]}}, {{0x9, 0x5, 0x8a, 0x0, 0x200, 0x81, 0x76, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x4055}]}}]}}, {{0x9, 0x4, 0xc1, 0xdf, 0xf, 0xa7, 0x8e, 0xf2, 0x1f, [], [{{0x9, 0x5, 0xc, 0x10, 0x48, 0x3f, 0x6, 0x5, [@generic={0x5d, 0x8, "5fdbea5843f19aeed86c40f9b5b5a924240ebe36c82c3295a33346bf2a95323fa09caa995691a8d5642fda89f07632057b2941c55534ddb44dd4106dda76cead5f6c71b0af49e863fda0ca9054553d3a9590b4bf3220b04a1118ba"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9c, 0x60, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8b, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x400}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x8, 0x8, 0x2, [@generic={0xd3, 0xb, "ed721e74370720d840494b8743dd7e048260889de589c1531c7f841c87f28da0b46aa0832532f9ba34278e1418fad49d10d937cfbba45d0daa938c20d9a24e9c6478ed165f8c7a21d09047588f5290f674fe56dba083095a4d755ce3ab30cfc4f0a64231b9f9240ca2bbc18c58f5f62bd4e82a16c2ded58d95a0c8dd429c40c1881ecaba0b839da7991ad9f6d550e9f7ab893b38b295b1668fc7bdd5764916a3e9523cdaaddd2cba27109a2f7680c6de8133ea6dbcb910c39a96e66dde2b946712459442bb9d622d5a38451a3f8cb6599b"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x8, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x9, 0x9, 0x98, [@generic={0xbc, 0x21, "57bf6cd7387b874257d28cd945b82d45c144a4470b8701ae9114bb7773ab0e950e95e68685b910aa12d2df5aaa7bfe7fcebfb3525726eda8d71d78301e824ad809c477d3200f42e1b289625a2bfa638dca0c602244c33b6b1426992bf6a67da3f021fe5621032fa0daff862353e8fd78e2b4764201191a3a921ef242f57378c1dc60f27375dbe15e32b7204cb35902d674a3c96d07556521ec4f906d8f49fe3aa035974b44f775105b02ec2496412a5af2a1ee85b4bb5b6e35f3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x1, 0x0, 0x85, [@generic={0x30, 0x30, "67de284fcda97c24d90e9dbe30f331508273303f8f50ca08acdb581f6a1914fe1ba05fa1aabda4bf014d45a7a5af"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x2, 0x2f, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x8, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x20, 0x6, 0x9, [@generic={0x34, 0x23, "e47be08f44994bb6fb63fb99c2a4328e99c96707e777eb9781e37e2aa55ca073aa198fb439acc9697e6516de36cb67cbfb76"}, @generic={0xe, 0xe, "1de418c13b3ee8a407d00094"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x3, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x81}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x40, 0x4, [@generic={0xc, 0x7, "06252c87464ed954878d"}, @generic={0x1d, 0x30, "995bc5a3f7d8b0af297ecefbded1920f942ea9f46cca6c20b8cf34"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x7f, 0x97, 0x3, [@generic={0x8b, 0x5, "77df3969de8a11f3e5baf48d879695da02cb4ba9c21bd9b010ce461bc59992c1fbfe951a22638c8dab6edbbc752296a50374aac53a9f98384bdae5559e49260d7b007eb0a1883d37f9c864517e6b62b210f2eb917f884d6082f52278d7bab0c1f2a3007606f3b1784e96413dae13d727d52dd1458360e2529adaca092240b95fd5b10629cea11e1b6a"}, @generic={0xa3, 0x5, "f1f47e462cac0cdec09cf547ba5e5ea4cd8d8437b199c3836c567aea4ff290e2d28aeeddbc34047e17d445dc4422c68b28f10b7e1488da45aec85703256c08cbc06ef09efa88641800ed563fd06ee6b3373480f516bd3bb5048611d3ccac7e23c0abba6f57c03be5440831947c1e8f97f0a0baf418a4181e46e2d73c46efbd90c025d55c8f9534e02e7df1b6943f86bec583e4ea213f92cd1fec6b23bc6603d89a"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x5, 0x80, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x93c55607b0e47b71, 0x1, 0x7f, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0xff, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x9bb}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x9}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x6, 0x0, 0x40, 0x9}, 0x95, &(0x7f0000000040)={0x5, 0xf, 0x95, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xbf, 0xfc, 0x20, 0x800, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf1, 0x8, 0xa, 0xda30, 0x8}, @ptm_cap={0x3}, @generic={0x6a, 0x10, 0x2, "e0551bb805a5267787a5e59a026e5855a7433e1a6ea3b98dd02f65f71507c814cf0465e4d2a16e1896d321712094022ee19b5626757c6f6744ece90422a482ca9be0c3242174302cb054cd69c0a8c0b63c1a580e0eb4b85e6a577c246e347d5f0039c205091563"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1f, 0x5d, 0x2}]}, 0x4, [{0xf2, &(0x7f0000000380)=@string={0xf2, 0x3, "34cec6f14909ca5c5d59041e920336c1ab0bf02356f80d71d114ef314c1ff2acdca6653227640e458f134dfa80a5fd5d294a469752815bb3fc7b46481c31d45edaa67126fcbe8bd84540ce00c03f06b0e9b246193f38026e3d8b8892277bad05991578feacbd624f8b74ef5b635b0729f04abb5c7adae6c00d02a89f0f1782a3efba999e14f2109aa5634391e20d35cedba82fd93f7140657ce8c4bdbaa2bb4265edfb7904a046628ac02f2d09d324fb81bf1d4932f72c76772af3280255d29ca19102227d17b81a71345d7e75776cc3e3bce26445cc88fc81bbe507bff9263d4af62b39846da2d3f151f34a940794f1"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3409}}, {0xd9, &(0x7f0000000480)=@string={0xd9, 0x3, "d50c30531319db3763849b9bf5e0fe61f0fcf314259d7934a2322ed848957ef26ff8475b5a8cd0b14dea376e9a6ab950d07e0b6bdf536a992773d2607aa6ccd0d27b71233dd7eb1ea5daeafe14580d879580d6da7933c07166687ed636130ccfadc9791f51321d6a449e4cf116711998d716eda41c354c47c64fb79771167421c8ac426192c4cd2de5f7f2f11dfe258b5e55de5a38735cc33e85d3190a86cee73ca8d66727ef1f8bd84679ce9d701e59ab2b397e0b387fb0979cc25d9b647a00cecf2febd48e53ac72f1ced781912f30994f7adc77823b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42b}}]}) (async) 00:03:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e1f, @empty}, 0x0, 0x0, 0x0, 0x0, 0x41, &(0x7f00000002c0)='batadv0\x00', 0x4d, 0x1, 0x4}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) write$binfmt_misc(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2a) socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000004000495000d00000000000672af0000591a7821677962612659ee8b55b6e18bad6be783ee8f9930bfd74d61e666701722b51507cea754ad66b6dd62e3c5ad978a679c314b798b9c9f2fa3b823418d31f6cac93237e72529877ad4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r4 = socket$inet6(0xa, 0x803, 0x6) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000380)=0x1c) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x6, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_bridge\x00'}, 0x18) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x6c, [0x2, 0x2dd, 0x0, 0x1], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x78) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x60}}, 0x42881) 00:03:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x500000000000000}, 0x0) 00:03:32 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8000, 0x7}}, './file0\x00'}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:03:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x300000000000000) [ 1513.076085][ T5633] usb 3-1: USB disconnect, device number 110 00:03:32 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x4e23, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 1513.160132][T30203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x700000000000000}, 0x0) 00:03:32 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x4e23, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x900000000000000}, 0x0) 00:03:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8000, 0x7}}, './file0\x00'}) (rerun: 64) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) [ 1513.308094][T30208] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1513.449563][T30221] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1513.582339][ T5633] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1513.942447][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1513.942505][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.942536][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.942562][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1513.942605][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1513.942634][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.944665][ T5633] usb 3-1: config 0 descriptor?? [ 1514.423471][ T5633] appleir 0003:05AC:8243.00DC: unknown main item tag 0x0 [ 1514.423741][ T5633] appleir 0003:05AC:8243.00DC: No inputs registered, leaving [ 1514.427476][ T5633] appleir 0003:05AC:8243.00DC: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 00:03:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000000000500e3fc03010000092124090581ecffffffffff09ff00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:03:34 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x4e23, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "efedceded6b8559f68bf9e290d860700ec00000002000000df00", "b08243e770a0239de97112947ab619a0fc552b308dd9fddedc8d6910a994d3e90e11f28d47e7d35b138a67912d5e584e", "bf9f88bb4e72935940e8f708dc8c7bd8f1dd00", {"2a428150e5521c21986d65b1cc4f7771", "d75315bef33b9a631bb455c13ba1215e"}}}}}}}, 0x0) 00:03:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e1f, @empty}, 0x0, 0x0, 0x0, 0x0, 0x41, &(0x7f00000002c0)='batadv0\x00', 0x4d, 0x1, 0x4}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) write$binfmt_misc(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a307b7d5194032753cf8656ab977ab58db6297d415eb6b4114a04000000000000000000ae3277001d9da30c48700459b41985b2afdc6e5744385ca57a3afbd27f5adf97fc0126c716e4abe5e57061ba552cca0a30fbc9aab0df7ecaf6bd8961bde0518b10d3df49a0bafff60e604066ff80694dbd059e361c6e72be43ba44a569965df85c652200ed0e684c6313e474ce332fb30ceef1beeffd39e6977503426bd7ec6da66b9c41c423c9cb6d3840f1b0be4d0a0e8b22c553a96991d4428672f1684f0f6d06410e3d21ba935db15a43091bc6e7f4395ac6f167f63a4e0370f9f54739ad56b9c92342b9e4771265dc010d1bac3f2c7cd9da3520e5237eb6d3e82a028657b9994f29c5835ed54847dd"], 0x2a) socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000004000495000d00000000000672af0000591a7821677962612659ee8b55b6e18bad6be783ee8f9930bfd74d61e666701722b51507cea754ad66b6dd62e3c5ad978a679c314b798b9c9f2fa3b823418d31f6cac93237e72529877ad4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r4 = socket$inet6(0xa, 0x803, 0x6) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000380)=0x1c) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x6, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_bridge\x00'}, 0x18) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x6c, [0x2, 0x2dd, 0x0, 0x1], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x78) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x60}}, 0x42881) 00:03:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x400000000000000) 00:03:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf00000000000000}, 0x0) 00:03:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8000, 0x7}}, './file0\x00'}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8000, 0x7}}, './file0\x00'}) (async) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) (async) [ 1514.945211][T30224] Error: Driver 'raw-gadget' is already registered, aborting... [ 1514.945225][T30224] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1514.945242][T30224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:03:34 executing program 5: socketpair(0x0, 0xe, 0x0, &(0x7f0000000140)) 00:03:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x3f00000000000000}, 0x0) [ 1514.953618][T18397] usb 3-1: USB disconnect, device number 111 [ 1515.038505][T30237] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1515.065524][T30235] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x4800000000000000}, 0x0) 00:03:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x6d41005668507649, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x1c}}, 0x0) 00:03:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 00:03:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x500000000000000) [ 1515.345569][T30260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1515.472446][T18397] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1515.772481][T18397] usb 3-1: no configurations [ 1515.772501][T18397] usb 3-1: can't read configurations, error -22 [ 1515.922327][T18397] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1516.222546][T18397] usb 3-1: no configurations [ 1516.222560][T18397] usb 3-1: can't read configurations, error -22 [ 1516.222688][T18397] usb usb3-port1: attempt power cycle [ 1516.642401][T18397] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1516.802520][T18397] usb 3-1: no configurations [ 1516.802540][T18397] usb 3-1: can't read configurations, error -22 [ 1516.952311][T18397] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1517.082420][T18397] usb 3-1: no configurations [ 1517.082433][T18397] usb 3-1: can't read configurations, error -22 [ 1517.082549][T18397] usb usb3-port1: unable to enumerate USB device 00:03:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000000000500e3fc03010000092124090581ecffffffffff09ff00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:03:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 00:03:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="a0d298a01246b29518001000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000240)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000110001e90d7d1f45889ad9fbe6a18a180d4a5d5c3325f020b7e1ebe72285c1dc775ed59a1854a84f47d975aebd233dcf669ec705edf7c5d444ede19dbc84d986aeae0b0351d7e5446f54810955d371acfbd149601064ab540ffb382fd0d01c579f2103a26e403e59e1f44d04de82cdfa", @ANYRES32=r8], 0x34}}, 0x0) 00:03:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e1f, @empty}, 0x0, 0x0, 0x0, 0x0, 0x41, &(0x7f00000002c0)='batadv0\x00', 0x4d, 0x1, 0x4}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) write$binfmt_misc(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2a) socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000040000000000004000495000d00000000000672af0000591a7821677962612659ee8b55b6e18bad6be783ee8f9930bfd74d61e666701722b51507cea754ad66b6dd62e3c5ad978a679c314b798b9c9f2fa3b823418d31f6cac93237e72529877ad4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r4 = socket$inet6(0xa, 0x803, 0x6) r5 = accept$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000380)=0x1c) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x6, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_bridge\x00'}, 0x18) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x6c, [0x2, 0x2dd, 0x0, 0x1], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x78) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x60}}, 0x42881) 00:03:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 00:03:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x600000000000000) 00:03:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 00:03:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x6800000000000000}, 0x0) 00:03:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x6c00000000000000}, 0x0) [ 1518.102730][T30266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="a0d298a01246b29518001000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000240)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000110001e90d7d1f45889ad9fbe6a18a180d4a5d5c3325f020b7e1ebe72285c1dc775ed59a1854a84f47d975aebd233dcf669ec705edf7c5d444ede19dbc84d986aeae0b0351d7e5446f54810955d371acfbd149601064ab540ffb382fd0d01c579f2103a26e403e59e1f44d04de82cdfa", @ANYRES32=r8], 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="a0d298a01246b29518001000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000240)) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000110001e90d7d1f45889ad9fbe6a18a180d4a5d5c3325f020b7e1ebe72285c1dc775ed59a1854a84f47d975aebd233dcf669ec705edf7c5d444ede19dbc84d986aeae0b0351d7e5446f54810955d371acfbd149601064ab540ffb382fd0d01c579f2103a26e403e59e1f44d04de82cdfa", @ANYRES32=r8], 0x34}}, 0x0) (async) 00:03:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 00:03:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x7400000000000000}, 0x0) [ 1518.175038][T30275] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1518.376773][T30283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1518.502421][T18397] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1518.787833][T18397] usb 3-1: no configurations [ 1518.787847][T18397] usb 3-1: can't read configurations, error -22 [ 1518.932477][T18397] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1519.213398][T18397] usb 3-1: no configurations [ 1519.213412][T18397] usb 3-1: can't read configurations, error -22 [ 1519.213568][T18397] usb usb3-port1: attempt power cycle [ 1519.632393][T18397] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1519.762443][T18397] usb 3-1: no configurations [ 1519.762457][T18397] usb 3-1: can't read configurations, error -22 [ 1519.912377][T18397] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1520.042624][T18397] usb 3-1: no configurations [ 1520.042644][T18397] usb 3-1: can't read configurations, error -22 [ 1520.042884][T18397] usb usb3-port1: unable to enumerate USB device 00:03:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000000000500e3fc03010000092124090581ecffffffffff09ff00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000000000500e3fc03010000092124090581ecffffffffff09ff00"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:03:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 00:03:40 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 00:03:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x700000000000000) 00:03:40 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000100)=@raw=[@alu={0x4, 0x1, 0x1, 0xa, 0x1, 0x8, 0xfffffffffffffffc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x83, &(0x7f0000000180)=""/131, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xa, 0x200, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 00:03:40 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="a0d298a01246b29518001000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000240)) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000110001e90d7d1f45889ad9fbe6a18a180d4a5d5c3325f020b7e1ebe72285c1dc775ed59a1854a84f47d975aebd233dcf669ec705edf7c5d444ede19dbc84d986aeae0b0351d7e5446f54810955d371acfbd149601064ab540ffb382fd0d01c579f2103a26e403e59e1f44d04de82cdfa", @ANYRES32=r8], 0x34}}, 0x0) 00:03:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 00:03:40 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x143800, 0x0) 00:03:40 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) [ 1521.179804][T30300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x800000000000000) 00:03:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0xf9000000, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/250, 0x1a, 0xfa, 0x1}, 0x20) 00:03:40 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) [ 1521.253725][T30303] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1521.375626][T30320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1521.612365][T18397] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1521.902526][T18397] usb 3-1: no configurations [ 1521.902564][T18397] usb 3-1: can't read configurations, error -22 [ 1522.072340][T18397] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1522.372620][T18397] usb 3-1: no configurations [ 1522.372642][T18397] usb 3-1: can't read configurations, error -22 [ 1522.372922][T18397] usb usb3-port1: attempt power cycle [ 1522.782384][T18397] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1522.914296][T18397] usb 3-1: no configurations [ 1522.914310][T18397] usb 3-1: can't read configurations, error -22 [ 1523.062331][T18397] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1523.192488][T18397] usb 3-1: no configurations [ 1523.192508][T18397] usb 3-1: can't read configurations, error -22 [ 1523.192683][T18397] usb usb3-port1: unable to enumerate USB device 00:03:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xa71fe5d200000000}, 0x0) 00:03:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x8f8fcff00000000) 00:03:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 00:03:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000280)=@raw=[@cb_func, @btf_id, @func, @alu, @btf_id], &(0x7f0000000300)='GPL\x00', 0x4, 0x97, &(0x7f0000000340)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:03:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f0000000080)) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}, 0x3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000500)={{r5, r6+60000000}, {r7, r8+60000000}}, 0x0) creat(0x0, 0x20) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r9 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f0000000080)=[{&(0x7f0000000380)="d2646e28db560f48fab1ba6f32da3490182a62b0ff3bca5d2341c13cacbdc32a614be4f6099980c29a7f6f2a5efc2784636ea26da99f8add0a647f6752a6ee99446ea88f2a3c35dee483c0fc11ab5e4a54cea77cae8651da3639cb1048e80c28f9b18126d93e1821b17d5d55fe11e80f54d66429d759dc1f49af274dd88ee4843acf3fb1d21dcb321bd9a9628b6d64609c1e850f6dd0224457b4115b6cbe187526234729311af5e85a351c608114dafe5845d043dff6cd3ff86ff0f4726c5f10be9c8866d8d5823ae3a51af8dc5449eaac6d828d151d402884252d35a88eafcdf1a24702", 0xe4, 0x1}], 0x2080020, &(0x7f0000000280)={[{@errors_continue}, {@gid={'gid', 0x3d, 0xee01}}], [{@pcr={'pcr', 0x3d, 0x17}}, {@euid_lt={'euid<', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x4}}]}) preadv(r9, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0xfffffffc, 0x80000000) syz_usb_disconnect(0xffffffffffffffff) 00:03:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) write$tcp_mem(r2, &(0x7f0000000100)={0x7, 0x20, 0x6, 0x20, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7dcaa24ec3ed42ec45b2fc", @ANYRES32=r5], 0x34}}, 0x0) 00:03:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x1}) 00:03:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 00:03:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 00:03:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x900000000000000) [ 1524.248259][T30333] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1524.280727][T30330] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) write$tcp_mem(r2, &(0x7f0000000100)={0x7, 0x20, 0x6, 0x20, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7dcaa24ec3ed42ec45b2fc", @ANYRES32=r5], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) write$tcp_mem(r2, &(0x7f0000000100)={0x7, 0x20, 0x6, 0x20, 0x5}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7dcaa24ec3ed42ec45b2fc", @ANYRES32=r5], 0x34}}, 0x0) (async) 00:03:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 00:03:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) 00:03:43 executing program 0: syz_clone(0x2a10000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:03:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 1524.401765][T30343] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1524.456278][T30346] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1524.662435][T29465] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1525.072461][T29465] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1525.072504][T29465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.072522][T29465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1525.072537][T29465] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1525.072562][T29465] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1525.072577][T29465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.074318][T29465] usb 3-1: config 0 descriptor?? [ 1525.568563][T29465] appleir 0003:05AC:8243.00DD: unknown main item tag 0x0 [ 1525.569177][T29465] appleir 0003:05AC:8243.00DD: No inputs registered, leaving [ 1525.588775][T29465] appleir 0003:05AC:8243.00DD: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1525.771141][ T28] audit: type=1400 audit(1655510625.298:472): avc: denied { wake_alarm } for pid=30334 comm="syz-executor.2" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1525.794499][ C1] hrtimer: interrupt took 260822 ns [ 1526.207933][T18397] usb 3-1: USB disconnect, device number 124 00:03:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f0000000080)) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}, 0x3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000500)={{r5, r6+60000000}, {r7, r8+60000000}}, 0x0) (async) creat(0x0, 0x20) (async) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) (async) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r9 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f0000000080)=[{&(0x7f0000000380)="d2646e28db560f48fab1ba6f32da3490182a62b0ff3bca5d2341c13cacbdc32a614be4f6099980c29a7f6f2a5efc2784636ea26da99f8add0a647f6752a6ee99446ea88f2a3c35dee483c0fc11ab5e4a54cea77cae8651da3639cb1048e80c28f9b18126d93e1821b17d5d55fe11e80f54d66429d759dc1f49af274dd88ee4843acf3fb1d21dcb321bd9a9628b6d64609c1e850f6dd0224457b4115b6cbe187526234729311af5e85a351c608114dafe5845d043dff6cd3ff86ff0f4726c5f10be9c8866d8d5823ae3a51af8dc5449eaac6d828d151d402884252d35a88eafcdf1a24702", 0xe4, 0x1}], 0x2080020, &(0x7f0000000280)={[{@errors_continue}, {@gid={'gid', 0x3d, 0xee01}}], [{@pcr={'pcr', 0x3d, 0x17}}, {@euid_lt={'euid<', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x4}}]}) preadv(r9, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0xfffffffc, 0x80000000) (async) syz_usb_disconnect(0xffffffffffffffff) 00:03:46 executing program 0: clock_gettime(0xc2a3dc58e9da2ade, 0x0) 00:03:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 00:03:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xa00000000000000) 00:03:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) 00:03:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x4) (async) r4 = socket$packet(0x11, 0x2, 0x300) write$tcp_mem(r2, &(0x7f0000000100)={0x7, 0x20, 0x6, 0x20, 0x5}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7dcaa24ec3ed42ec45b2fc", @ANYRES32=r5], 0x34}}, 0x0) 00:03:46 executing program 0: mount$binderfs(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 00:03:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 00:03:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xc00000000000000) 00:03:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 1526.822937][T30376] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:46 executing program 0: socket$inet(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0) 00:03:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) [ 1526.953929][T30385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1526.953966][T30385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1527.026091][T30389] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1527.112410][T18397] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1527.473617][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1527.473666][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.473701][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.473728][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1527.473773][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1527.473802][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.475781][T18397] usb 3-1: config 0 descriptor?? 00:03:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f0000000080)) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}, 0x3) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000500)={{r5, r6+60000000}, {r7, r8+60000000}}, 0x0) creat(0x0, 0x20) (async) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x0) (async) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r9 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f0000000080)=[{&(0x7f0000000380)="d2646e28db560f48fab1ba6f32da3490182a62b0ff3bca5d2341c13cacbdc32a614be4f6099980c29a7f6f2a5efc2784636ea26da99f8add0a647f6752a6ee99446ea88f2a3c35dee483c0fc11ab5e4a54cea77cae8651da3639cb1048e80c28f9b18126d93e1821b17d5d55fe11e80f54d66429d759dc1f49af274dd88ee4843acf3fb1d21dcb321bd9a9628b6d64609c1e850f6dd0224457b4115b6cbe187526234729311af5e85a351c608114dafe5845d043dff6cd3ff86ff0f4726c5f10be9c8866d8d5823ae3a51af8dc5449eaac6d828d151d402884252d35a88eafcdf1a24702", 0xe4, 0x1}], 0x2080020, &(0x7f0000000280)={[{@errors_continue}, {@gid={'gid', 0x3d, 0xee01}}], [{@pcr={'pcr', 0x3d, 0x17}}, {@euid_lt={'euid<', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x4}}]}) preadv(r9, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0xfffffffc, 0x80000000) (async) syz_usb_disconnect(0xffffffffffffffff) 00:03:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYRES16=r5, @ANYRES32=r8, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYBLOB="d804f32153e0f05f7ae00ae360ad4693a873f5c7b4999fc1b3a0967ed9edeb32c96f86fc52699532e585722d5dc0487ae048589e91ad60d0f2066e5618a89658003c5882729647b4867de6ce6a5f844487b2f21c5c55da5e6917619cb39e1aef9400439a7183402f"], 0x34}}, 0x20000000) 00:03:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x3}, 0x0) 00:03:47 executing program 0: mount$binderfs(0x0, &(0x7f0000000480)='./binderfs\x00', 0x0, 0x12028, &(0x7f0000000500)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}, {@context={'context', 0x3d, 'system_u'}}], 0x3a}) 00:03:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 00:03:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe00000000000000) 00:03:47 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x8}, &(0x7f0000000140)={0x1}, 0x0, 0x0, 0x0) [ 1527.741766][ T28] audit: type=1400 audit(1655510627.268:473): avc: denied { remount } for pid=30400 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 00:03:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:03:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 00:03:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYRES16=r5, @ANYRES32=r8, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYBLOB="d804f32153e0f05f7ae00ae360ad4693a873f5c7b4999fc1b3a0967ed9edeb32c96f86fc52699532e585722d5dc0487ae048589e91ad60d0f2066e5618a89658003c5882729647b4867de6ce6a5f844487b2f21c5c55da5e6917619cb39e1aef9400439a7183402f"], 0x34}}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYRES16=r5, @ANYRES32=r8, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYBLOB="d804f32153e0f05f7ae00ae360ad4693a873f5c7b4999fc1b3a0967ed9edeb32c96f86fc52699532e585722d5dc0487ae048589e91ad60d0f2066e5618a89658003c5882729647b4867de6ce6a5f844487b2f21c5c55da5e6917619cb39e1aef9400439a7183402f"], 0x34}}, 0x20000000) (async) 00:03:47 executing program 0: mount$binderfs(0x0, &(0x7f0000000480)='./binderfs\x00', 0x0, 0x104000, 0x0) 00:03:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 1527.741827][T30401] SELinux: security_context_str_to_sid (rootcontext=system_u,:) failed with errno=-22 [ 1527.770832][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1527.770868][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1527.822381][T18397] usbhid 3-1:0.0: can't add hid device: -71 [ 1527.822465][T18397] usbhid: probe of 3-1:0.0 failed with error -71 [ 1527.831035][T18397] usb 3-1: USB disconnect, device number 125 [ 1528.232434][T18397] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1528.592397][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1528.592461][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.592496][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.592537][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1528.592582][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1528.592613][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.597177][T18397] usb 3-1: config 0 descriptor?? 00:03:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x23, 0x5e, {0x5e, 0xc, "a78a6a1da94d2fa61a3ff58c0a0f98251e0c0a9127f5595f7c7b96f33247d9c65b7695c042d030fb8a2a092f37cfd24f81a83d537498f1d2debe1d7954ff2615002fb48420ec6a61bfcbf3fd8f4058eb02435058bdcf5421edb6d8ae"}}, &(0x7f0000000380)=ANY=[@ANYBLOB="0003f4000000f403d5b1451bfb6e5286d135f0155a78181e92f5a212ce5ac0ac5ab75a2edc4c0426277ff572b5ef929ef8851f03ca9657055d6cbbbfa9a2b571e4bd75175a87093a8c5b29b4cdc9140fab46881c6f3026144f9cf31bbc8276671f5c3f816b2b0178ccdcd80615365211cb6f90f25e4bd0618f01cad67aec6aa70abb1e1807d8d7947cb2975d655ddcaf07b685d4c589ba71a5c7d2084ab80ee4d8a22c1114f58cccd28a2c471547280dcd96f9c02d8ed178b8284f5a41e976abb5567028dae14800ef5675e2c770f67b9b40001000000000000029bfc05e04f2f547d0efa72dce2b6450ec590b00"/250], &(0x7f0000000080)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x4, "7f09be20"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x23, 0x1, {0x22, 0xc3}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0xc, 0x25, "42c134b5b274ac8fe41df5bfede1a6e3040a5795dd9f526811a00addc735166040b08bfb42"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x1, 0x10, "818e556d0b85649909b6c0b833850d71"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x0, 0x51, {0x51, 0x21, "ff62ccfb4204eb3b9628baf63514d1d71a2d05b4074ac2b6e61a13be8a43d74c37fc60bf29afaa663793f4ca3739c196f429b8e844fb4a9810f1759b35b67053b343a2cc5df2f9b0bfc31f3326c77b"}}, &(0x7f00000005c0)={0x0, 0x3, 0x88, @string={0x88, 0x3, "045deaae0bdb5677b421fd772ef72fdbba87d0839e16c8b23778cdf7f532434d4d8024ba6e32a9153ac6cdcb97f4c873217ae988234a878cfc75ee1ac9795f3a88b4d989acbe98a115ac584266aff808e6d5368b55ab61f8c8ad1b560316195e6188ef6b0bc0331f1bcd952d24ea9bf5dd82f1c4a0204a101d54bf5ab5107712616159756553"}}}, &(0x7f0000000940)={0x34, &(0x7f00000006c0)={0x0, 0x17, 0xac, "6cd4fc7abfa37026f68d79db6eb35bef007eb0e86d80754dc5010b5e2192f4e8bae1da8cba390f1793621cd1fd225754882eb1e53d6c9c342d179c9930b580169f8fed2f4a119c0f46dc2a5aac8f8b3eac310d0de135de447cb40c3191bfd978fd2f6e56d278e5bd27d887092b86ce98c083c80ed8420aa01eec1b4836a4d03074db52f09e9fc2ee9371ee25bdac3240f8d2f858b228e22e23671d0c25964e707b2f51f91a0bb5620e0e0a2c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0xb9, {0xb7, "8c09b4182a7606ca6b6fe6c0107cb45f70404455404975bbe46b6025d2045d3152a9549bab7f60b829bcebd95fec69d4460c1625930ed9a8270c663f7a9c76442dc5d50ee9598348dbefbb104659ba801791b3cc847e74075787d88787373d04d7b078e2da8257b0ba935b13672a05d3869a3e7676104fe5121fd318ce531b4f560a949680233b1999b12ead6429abad494be9898a766a01a408a4ce4611b486b13e234d2febfcd7124a3d6a387f4e95ebed1f919ebc20"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xf8}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x1}}) 00:03:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf00000000000000) 00:03:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 00:03:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000080)=@framed={{}, [@generic, @generic]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0xab) 00:03:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x6}, 0x0) 00:03:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r5) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYRES16=r5, @ANYRES32=r8, @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYBLOB="d804f32153e0f05f7ae00ae360ad4693a873f5c7b4999fc1b3a0967ed9edeb32c96f86fc52699532e585722d5dc0487ae048589e91ad60d0f2066e5618a89658003c5882729647b4867de6ce6a5f844487b2f21c5c55da5e6917619cb39e1aef9400439a7183402f"], 0x34}}, 0x20000000) (rerun: 32) 00:03:48 executing program 0: add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "14f23daf7255518d8a6f271983198e46b16159e5e9473b71934b4079ec70e5c35faf71486d4a806ab6c7889853ec1f5aab09cb3502046023ebc7755708e2a1a1"}, 0x20000208, 0xfffffffffffffffb) 00:03:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x0) 00:03:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:03:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x1000000000000000) 00:03:48 executing program 0: r0 = creat(&(0x7f0000000540)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) getresgid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd200) [ 1528.953739][T18397] usbhid 3-1:0.0: can't add hid device: -71 [ 1528.953826][T18397] usbhid: probe of 3-1:0.0 failed with error -71 [ 1528.955986][T18397] usb 3-1: USB disconnect, device number 126 00:03:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 1529.132805][ T28] audit: type=1804 audit(1655510628.658:474): pid=30455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2661325655/syzkaller.mU8Gab/1792/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1529.133315][ T28] audit: type=1800 audit(1655510628.668:475): pid=30455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1529.342485][T18397] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1529.732577][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1529.732629][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.732663][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.732690][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1529.732733][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1529.732762][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.737157][T18397] usb 3-1: config 0 descriptor?? [ 1530.266436][T18397] appleir 0003:05AC:8243.00DE: unknown main item tag 0x0 [ 1530.266941][T18397] appleir 0003:05AC:8243.00DE: No inputs registered, leaving [ 1530.269635][T18397] appleir 0003:05AC:8243.00DE: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1531.732320][T18397] usb 3-1: reset high-speed USB device number 127 using dummy_hcd 00:03:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:03:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x9}, 0x0) 00:03:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2000}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000186dd06100009ffffffffffff00000000000000000000ffffac1414aa000000000000fe80f2ffffff060000000000000000bb"], 0x34) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x3, [@broadcast, @remote, @multicast]}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYBLOB="157277d894014693962ec5cb849dd953cb1f0816052f76372a14f227a95c8454b7db6ad6655d00a5da04923f848fe890f6897db25e56f650d34184e1af061b77b9721cb166cd14ea26c621a29ae8b9bcd66a1dc8", @ANYRESOCT=r6, @ANYBLOB="1a70a0dfb9eaaaf451098e489836287e2f2e00cbb00924273d0c22b5a49b725be3cec0903bb989cf44e2488592bd5b863ab23c288f2dc185a42a6cb0ee95f82c09044ca7afd3d9556d211049dd99f2c350b408ce079f59682af20893b52fb49ce9dff520740e79e7a17dc8b666d8768fcedbf8a7d1bab9f57e49bc9242ddd7bf52c784756c68d92ce7c0f4e2bbacebd62f6300b9d730c2e3738ee15899f4d1c6ab1dc63086048f1cd4a5edeb298915efed9597ec6f6eace9c510a98b582584795fdea2c9b2", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT=r7, @ANYRESDEC=r7], 0x34}}, 0x4004891) 00:03:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2000000000000000) 00:03:51 executing program 0: syz_usb_connect$uac1(0x3, 0xe7, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x6, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x35}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0xffff, 0x0, "b47d"}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0x6, 0x20, "8213e882c8da"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x400, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x3, 0x1, 0x2}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x8, "c4d479"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6b58, 0x7, 0xec, "d420c726a8a680"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0xff, 0x8, "4e89f92a"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x9, 0x7, "61af6e97"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x6, 0x80, "ff66615608"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x7f, 0x0, 'c', "2397"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfc, 0x4, 0x1, {0x7, 0x25, 0x1, 0x2, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x40, 0x0, 0x8, {0x7, 0x25, 0x1, 0x0, 0x20, 0x8000}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x2, 0x8, 0x40, 0x92}, 0x1a, &(0x7f0000000140)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x78, 0x7f, 0xc, 0x4, 0x40}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x2, 0x1000}]}, 0x7, [{0x69, &(0x7f0000000180)=@string={0x69, 0x3, "77bf553e4ad434ab25a0927e7f35f86ccef3e01f1972e841e4fff4e21e0529ec9a8c73c288c5b82ee801632a248128a14337b0f212d420c551c7d09310738dd6e3cc2124186e68af405ee6b6d40e576ec6d5659ffb64e220d080b3919ee769ec6eee352994e9c5"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44b}}, {0x74, &(0x7f0000000280)=@string={0x74, 0x3, "cf9b4b8e1094047f4fcc24e40414c7cae1cde1b9cb5998766a516fc732ee31cc9f99716cb1475c27d52ed93e872829a696ea9452fa0cb963587efa66415d48a54e2d44f88305c26b05a8dfc233e99502b96de6435b09f14cd012d79b59927487bbfaaaea5667532d15885e95959300d36819"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x437}}, {0xca, &(0x7f0000000340)=@string={0xca, 0x3, "86d8a09bbb84fe02576192a2228fc2cbe1350147ece5d3a5f7c3b5411922765828a0666115bcf8163d3641691844202915ec733184e17e93bd4f2bdcb3de79a07b2cf14e2014e3d810db2b46eac2c359784241bd30a769e8ede6f0e4247fd0beb7b17ec1b51c4e8fd99fe5e42351d5576f66beabaa198df2f10346f7c33bec27c8b5989a8104110673e9f10310857b3d5b773301687127fe60edf505220d89f575b87e8b75b9bce0035626058fac0b98e3429a45c83c5fe448c065725f8698b828d725eb99184342"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x814}}]}) syz_usb_connect$uac1(0x1, 0xcb, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xdf, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x20, 0xfe}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x4, 0x7, "32e07cc8"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x6, 0x4, 0x1}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x4, 0x3, [0x9, 0x9, 0x6], 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x5, 0x4, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x3, 0x1, 0x7f}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0xffff, 0x1f, "cddb1897"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0xd0, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x4}, @as_header={0x7, 0x24, 0x1, 0x1d, 0x0, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x1f, 0x20, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7f, 0x7, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x40, 0x1, {0x7, 0x25, 0x1, 0x80, 0x59}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x1f, 0x2, 0x7f}, 0xce, &(0x7f0000000640)={0x5, 0xf, 0xce, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb2, 0x1, 0x7a, 0x3, 0x4c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3f, 0x2, 0x2}, @generic={0x96, 0x10, 0x2, "494cc283495745a6dc1a39b21a309b50427018ef1f798a7156af2e14d1ad5322d0d13bd38b55aa10511298f86e4a283a3d82ed917ad61357cd0afaa6204dc24bf20e0b94fc2acee956b425c0c231772d5dbe61c5c2bdac9f8fd0d259304337e45cb774068b5d1c80df19031e35ba071656bfe6eaa020f12f17d09b9299df8e0d1cb423ce2a536415e3aff9fcf575890ac0eea6"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "6663875537141eb470735b6a0a8e7d24"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x4, 0x4f}]}, 0x7, [{0xc6, &(0x7f0000000b40)=ANY=[@ANYBLOB="c603e2c6dba80fe8f22fc5d6db002ecd7086900d1d940c5d4cd3c2125bbd9f4f5683b4f0d4f6b3af7225b839a8beabd014d3f805e0bae29ba52507fa1fa18ab5f45258e4a27f96e832289e1e75ee620773f04c31585d8f1e07cc9b0f7543f963ed7fb9617ab027df21dedf9a259642deef08000000000000009907199b8465b30445819bde788f19a9e845c0bec8589df5e2b020dd524b8ef8a9ead4abd9e7c2ed5d6eb6ac7a8b448a14a977c43e3be2f14e14816149b7c2ecf21fa49e7634bb8f17e1fc8b75d065ccd838ca5f57eb95c36b35b43e5c"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x240a}}, {0xffffffffffffffea, &(0x7f00000008c0)=@string={0x97, 0x3, "af2bf63ff3c1c9a396ca761a4b8ccb97108adc13e03737a117189789b7e504cbfd180246bba3fab68a6bdf4e801fc2f4611fb4f7b20857c88b8268ade044f90c8ac43bf7634e3bb71505640ea47e4a150ce1f0aba1c02dfe1b3d97728763e3fd5452503f0bcf6e69f08a0498be58a5debadf1d59b0a1e937577524b91b5c4cc10f96694384208f6962d971720261c2c755e4a2575f"}}, {0x65, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"]}, {0x69, &(0x7f0000000a00)=@string={0x69, 0x3, "2df2fb6e878dd2e5be8b61acca79d8dc88b5a0b984874f365947eca4bc0fcef5e69487e7c395be97f8b18cd61abed3136ec22ca5431aa7ba83afea12b9a2826f3c691b8033ab2ca06518a7dc3a6f9595842a9e08944d6ce143d0c819a5b178943628bfbf759d72"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x458}}]}) 00:03:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x23, 0x5e, {0x5e, 0xc, "a78a6a1da94d2fa61a3ff58c0a0f98251e0c0a9127f5595f7c7b96f33247d9c65b7695c042d030fb8a2a092f37cfd24f81a83d537498f1d2debe1d7954ff2615002fb48420ec6a61bfcbf3fd8f4058eb02435058bdcf5421edb6d8ae"}}, &(0x7f0000000380)=ANY=[@ANYBLOB="0003f4000000f403d5b1451bfb6e5286d135f0155a78181e92f5a212ce5ac0ac5ab75a2edc4c0426277ff572b5ef929ef8851f03ca9657055d6cbbbfa9a2b571e4bd75175a87093a8c5b29b4cdc9140fab46881c6f3026144f9cf31bbc8276671f5c3f816b2b0178ccdcd80615365211cb6f90f25e4bd0618f01cad67aec6aa70abb1e1807d8d7947cb2975d655ddcaf07b685d4c589ba71a5c7d2084ab80ee4d8a22c1114f58cccd28a2c471547280dcd96f9c02d8ed178b8284f5a41e976abb5567028dae14800ef5675e2c770f67b9b40001000000000000029bfc05e04f2f547d0efa72dce2b6450ec590b00"/250], &(0x7f0000000080)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x4, "7f09be20"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x23, 0x1, {0x22, 0xc3}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0xc, 0x25, "42c134b5b274ac8fe41df5bfede1a6e3040a5795dd9f526811a00addc735166040b08bfb42"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x1, 0x10, "818e556d0b85649909b6c0b833850d71"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x0, 0x51, {0x51, 0x21, "ff62ccfb4204eb3b9628baf63514d1d71a2d05b4074ac2b6e61a13be8a43d74c37fc60bf29afaa663793f4ca3739c196f429b8e844fb4a9810f1759b35b67053b343a2cc5df2f9b0bfc31f3326c77b"}}, &(0x7f00000005c0)={0x0, 0x3, 0x88, @string={0x88, 0x3, "045deaae0bdb5677b421fd772ef72fdbba87d0839e16c8b23778cdf7f532434d4d8024ba6e32a9153ac6cdcb97f4c873217ae988234a878cfc75ee1ac9795f3a88b4d989acbe98a115ac584266aff808e6d5368b55ab61f8c8ad1b560316195e6188ef6b0bc0331f1bcd952d24ea9bf5dd82f1c4a0204a101d54bf5ab5107712616159756553"}}}, &(0x7f0000000940)={0x34, &(0x7f00000006c0)={0x0, 0x17, 0xac, "6cd4fc7abfa37026f68d79db6eb35bef007eb0e86d80754dc5010b5e2192f4e8bae1da8cba390f1793621cd1fd225754882eb1e53d6c9c342d179c9930b580169f8fed2f4a119c0f46dc2a5aac8f8b3eac310d0de135de447cb40c3191bfd978fd2f6e56d278e5bd27d887092b86ce98c083c80ed8420aa01eec1b4836a4d03074db52f09e9fc2ee9371ee25bdac3240f8d2f858b228e22e23671d0c25964e707b2f51f91a0bb5620e0e0a2c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0xb9, {0xb7, "8c09b4182a7606ca6b6fe6c0107cb45f70404455404975bbe46b6025d2045d3152a9549bab7f60b829bcebd95fec69d4460c1625930ed9a8270c663f7a9c76442dc5d50ee9598348dbefbb104659ba801791b3cc847e74075787d88787373d04d7b078e2da8257b0ba935b13672a05d3869a3e7676104fe5121fd318ce531b4f560a949680233b1999b12ead6429abad494be9898a766a01a408a4ce4611b486b13e234d2febfcd7124a3d6a387f4e95ebed1f919ebc20"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xf8}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x1}}) 00:03:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 1531.980130][T30466] __nla_validate_parse: 81 callbacks suppressed [ 1531.980151][T30466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) [ 1531.980184][T30466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1532.021292][T30464] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48}, 0x0) 00:03:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2400000000000000) [ 1532.027154][T30469] Error: Driver 'raw-gadget' is already registered, aborting... [ 1532.027168][T30469] UDC core: USB Raw Gadget: driver registration failed: -16 00:03:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) [ 1532.027186][T30469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.091130][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2000}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000186dd06100009ffffffffffff00000000000000000000ffffac1414aa000000000000fe80f2ffffff060000000000000000bb"], 0x34) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x3, [@broadcast, @remote, @multicast]}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYBLOB="157277d894014693962ec5cb849dd953cb1f0816052f76372a14f227a95c8454b7db6ad6655d00a5da04923f848fe890f6897db25e56f650d34184e1af061b77b9721cb166cd14ea26c621a29ae8b9bcd66a1dc8", @ANYRESOCT=r6, @ANYBLOB="1a70a0dfb9eaaaf451098e489836287e2f2e00cbb00924273d0c22b5a49b725be3cec0903bb989cf44e2488592bd5b863ab23c288f2dc185a42a6cb0ee95f82c09044ca7afd3d9556d211049dd99f2c350b408ce079f59682af20893b52fb49ce9dff520740e79e7a17dc8b666d8768fcedbf8a7d1bab9f57e49bc9242ddd7bf52c784756c68d92ce7c0f4e2bbacebd62f6300b9d730c2e3738ee15899f4d1c6ab1dc63086048f1cd4a5edeb298915efed9597ec6f6eace9c510a98b582584795fdea2c9b2", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT=r7, @ANYRESDEC=r7], 0x34}}, 0x4004891) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2000}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000186dd06100009ffffffffffff00000000000000000000ffffac1414aa000000000000fe80f2ffffff060000000000000000bb"], 0x34) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x3, [@broadcast, @remote, @multicast]}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYBLOB="157277d894014693962ec5cb849dd953cb1f0816052f76372a14f227a95c8454b7db6ad6655d00a5da04923f848fe890f6897db25e56f650d34184e1af061b77b9721cb166cd14ea26c621a29ae8b9bcd66a1dc8", @ANYRESOCT=r6, @ANYBLOB="1a70a0dfb9eaaaf451098e489836287e2f2e00cbb00924273d0c22b5a49b725be3cec0903bb989cf44e2488592bd5b863ab23c288f2dc185a42a6cb0ee95f82c09044ca7afd3d9556d211049dd99f2c350b408ce079f59682af20893b52fb49ce9dff520740e79e7a17dc8b666d8768fcedbf8a7d1bab9f57e49bc9242ddd7bf52c784756c68d92ce7c0f4e2bbacebd62f6300b9d730c2e3738ee15899f4d1c6ab1dc63086048f1cd4a5edeb298915efed9597ec6f6eace9c510a98b582584795fdea2c9b2", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT=r7, @ANYRESDEC=r7], 0x34}}, 0x4004891) (async) 00:03:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 00:03:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) [ 1532.091170][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1532.213414][T30480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x68}, 0x0) [ 1532.213453][T30480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1532.237699][ T5632] usb 1-1: new high-speed USB device number 3 using dummy_hcd 00:03:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x2801000000000000) [ 1532.266394][T30481] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1532.328284][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1532.328322][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1532.474544][ T5632] usb 1-1: Using ep0 maxpacket: 32 [ 1532.672552][ T5632] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 1532.672585][ T5632] usb 1-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config [ 1532.672610][ T5632] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1532.672628][ T5632] usb 1-1: config 1 has no interface number 1 [ 1532.672648][ T5632] usb 1-1: too many endpoints for config 1 interface 3 altsetting 8: 196, using maximum allowed: 30 [ 1532.672684][ T5632] usb 1-1: config 1 interface 3 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 1532.672718][ T5632] usb 1-1: config 1 interface 3 has no altsetting 0 [ 1532.803149][T28676] usb 3-1: USB disconnect, device number 127 [ 1532.832460][ T5632] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1532.832495][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.832521][ T5632] usb 1-1: Product: ы [ 1532.832538][ T5632] usb 1-1: Manufacturer: ц [ 1532.832555][ T5632] usb 1-1: SerialNumber: 鯏蹋鐐缄챏ᐄ쫇췡맡始皘兪읯찱馟汱䞱❜⻕㻙⢇꘩劔೺掹繘曺嵁ꕈⵎփ毂ꠅ싟ʕ涹䏦ज़䳱ዐ鯗鉙蝴請杖ⵓ蠕镞鎕팀ᥨ [ 1533.076095][T30463] Error: Driver 'raw-gadget' is already registered, aborting... [ 1533.076106][T30463] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1533.076121][T30463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.193628][ T5632] usb 1-1: 0:2 : does not exist [ 1533.236907][ T5632] usb 1-1: USB disconnect, device number 3 [ 1533.271079][ T4226] udevd[4226]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:03:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x7, 0x80, 0x4007, 0x41}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0}, 0x20) 00:03:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:03:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x23, 0x5e, {0x5e, 0xc, "a78a6a1da94d2fa61a3ff58c0a0f98251e0c0a9127f5595f7c7b96f33247d9c65b7695c042d030fb8a2a092f37cfd24f81a83d537498f1d2debe1d7954ff2615002fb48420ec6a61bfcbf3fd8f4058eb02435058bdcf5421edb6d8ae"}}, &(0x7f0000000380)=ANY=[@ANYBLOB="0003f4000000f403d5b1451bfb6e5286d135f0155a78181e92f5a212ce5ac0ac5ab75a2edc4c0426277ff572b5ef929ef8851f03ca9657055d6cbbbfa9a2b571e4bd75175a87093a8c5b29b4cdc9140fab46881c6f3026144f9cf31bbc8276671f5c3f816b2b0178ccdcd80615365211cb6f90f25e4bd0618f01cad67aec6aa70abb1e1807d8d7947cb2975d655ddcaf07b685d4c589ba71a5c7d2084ab80ee4d8a22c1114f58cccd28a2c471547280dcd96f9c02d8ed178b8284f5a41e976abb5567028dae14800ef5675e2c770f67b9b40001000000000000029bfc05e04f2f547d0efa72dce2b6450ec590b00"/250], &(0x7f0000000080)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x4, "7f09be20"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x23, 0x1, {0x22, 0xc3}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0xc, 0x25, "42c134b5b274ac8fe41df5bfede1a6e3040a5795dd9f526811a00addc735166040b08bfb42"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x1, 0x10, "818e556d0b85649909b6c0b833850d71"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x0, 0x51, {0x51, 0x21, "ff62ccfb4204eb3b9628baf63514d1d71a2d05b4074ac2b6e61a13be8a43d74c37fc60bf29afaa663793f4ca3739c196f429b8e844fb4a9810f1759b35b67053b343a2cc5df2f9b0bfc31f3326c77b"}}, &(0x7f00000005c0)={0x0, 0x3, 0x88, @string={0x88, 0x3, "045deaae0bdb5677b421fd772ef72fdbba87d0839e16c8b23778cdf7f532434d4d8024ba6e32a9153ac6cdcb97f4c873217ae988234a878cfc75ee1ac9795f3a88b4d989acbe98a115ac584266aff808e6d5368b55ab61f8c8ad1b560316195e6188ef6b0bc0331f1bcd952d24ea9bf5dd82f1c4a0204a101d54bf5ab5107712616159756553"}}}, &(0x7f0000000940)={0x34, &(0x7f00000006c0)={0x0, 0x17, 0xac, "6cd4fc7abfa37026f68d79db6eb35bef007eb0e86d80754dc5010b5e2192f4e8bae1da8cba390f1793621cd1fd225754882eb1e53d6c9c342d179c9930b580169f8fed2f4a119c0f46dc2a5aac8f8b3eac310d0de135de447cb40c3191bfd978fd2f6e56d278e5bd27d887092b86ce98c083c80ed8420aa01eec1b4836a4d03074db52f09e9fc2ee9371ee25bdac3240f8d2f858b228e22e23671d0c25964e707b2f51f91a0bb5620e0e0a2c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0xb9, {0xb7, "8c09b4182a7606ca6b6fe6c0107cb45f70404455404975bbe46b6025d2045d3152a9549bab7f60b829bcebd95fec69d4460c1625930ed9a8270c663f7a9c76442dc5d50ee9598348dbefbb104659ba801791b3cc847e74075787d88787373d04d7b078e2da8257b0ba935b13672a05d3869a3e7676104fe5121fd318ce531b4f560a949680233b1999b12ead6429abad494be9898a766a01a408a4ce4611b486b13e234d2febfcd7124a3d6a387f4e95ebed1f919ebc20"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xf8}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x1}}) 00:03:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x3f00000000000000) 00:03:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2000}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000186dd06100009ffffffffffff00000000000000000000ffffac1414aa000000000000fe80f2ffffff060000000000000000bb"], 0x34) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x3, [@broadcast, @remote, @multicast]}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYBLOB="157277d894014693962ec5cb849dd953cb1f0816052f76372a14f227a95c8454b7db6ad6655d00a5da04923f848fe890f6897db25e56f650d34184e1af061b77b9721cb166cd14ea26c621a29ae8b9bcd66a1dc8", @ANYRESOCT=r6, @ANYBLOB="1a70a0dfb9eaaaf451098e489836287e2f2e00cbb00924273d0c22b5a49b725be3cec0903bb989cf44e2488592bd5b863ab23c288f2dc185a42a6cb0ee95f82c09044ca7afd3d9556d211049dd99f2c350b408ce079f59682af20893b52fb49ce9dff520740e79e7a17dc8b666d8768fcedbf8a7d1bab9f57e49bc9242ddd7bf52c784756c68d92ce7c0f4e2bbacebd62f6300b9d730c2e3738ee15899f4d1c6ab1dc63086048f1cd4a5edeb298915efed9597ec6f6eace9c510a98b582584795fdea2c9b2", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT=r7, @ANYRESDEC=r7], 0x34}}, 0x4004891) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2000}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000186dd06100009ffffffffffff00000000000000000000ffffac1414aa000000000000fe80f2ffffff060000000000000000bb"], 0x34) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r3, r2, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x3, [@broadcast, @remote, @multicast]}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r6) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYBLOB="157277d894014693962ec5cb849dd953cb1f0816052f76372a14f227a95c8454b7db6ad6655d00a5da04923f848fe890f6897db25e56f650d34184e1af061b77b9721cb166cd14ea26c621a29ae8b9bcd66a1dc8", @ANYRESOCT=r6, @ANYBLOB="1a70a0dfb9eaaaf451098e489836287e2f2e00cbb00924273d0c22b5a49b725be3cec0903bb989cf44e2488592bd5b863ab23c288f2dc185a42a6cb0ee95f82c09044ca7afd3d9556d211049dd99f2c350b408ce079f59682af20893b52fb49ce9dff520740e79e7a17dc8b666d8768fcedbf8a7d1bab9f57e49bc9242ddd7bf52c784756c68d92ce7c0f4e2bbacebd62f6300b9d730c2e3738ee15899f4d1c6ab1dc63086048f1cd4a5edeb298915efed9597ec6f6eace9c510a98b582584795fdea2c9b2", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT=r7, @ANYRESDEC=r7], 0x34}}, 0x4004891) (async) 00:03:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 00:03:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x74}, 0x0) 00:03:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:03:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4000000000000000) 00:03:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x2000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:03:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:03:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x7a}, 0x0) [ 1533.902511][T18397] usb 3-1: new high-speed USB device number 2 using dummy_hcd 00:03:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x7, 0xb60, 0x7, 0x0, 0x1}, 0x48) [ 1534.282454][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1534.282502][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.282542][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.282569][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1534.282610][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1534.282637][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.284768][T18397] usb 3-1: config 0 descriptor?? 00:03:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xb8c, 0x92, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x7b0f, 0x8, 0x1, {0x22, 0x3e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x4, 0x4d}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x3f, 0x7, 0x40}, 0x12c, &(0x7f0000000380)={0x5, 0xf, 0x12c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "ee9ab577cb8729893852c5fab0098b02"}, @generic={0x8f, 0x10, 0x4, "cedecb2eb1b86409fcd33e3ef20314835c8dab5fc1c367565e87f02aa4152f9a5bbfed22390d2e24cbdfd369588798026b44dd7027e0d5da737948dbcd66555822da5ba3a6a384fa39e0ce7b2be02141f957e52285d097061605bf392217f2bdeb50ea7e3ddaab04ca8499a8f86e30652d2f7eb2c52a99dd17efc37665148fa4e19d5bdd5d5885553d53b5a9"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "f51b683d77f56b1e417b00cedd2c693c"}, @ptm_cap={0x3}, @generic={0x6d, 0x10, 0x4, "493e5bd84481a85299c57b80af79ff8bd9512ce87bf79307316dc11488ba82fbc9d4c2725d944447587a2b55c303ab43078897eac5d82f2b7433e7cfa344bafb4b644e53df33b7618876a2270b07c72e1e11f03f826c6aa559c94523f9f386c64d637f1c192ead135bdd"}]}, 0x5, [{0xc1, &(0x7f00000004c0)=ANY=[@ANYBLOB="c103ebd5d28e48b17c9cb6d299c3c4d3b2ef08a6238f8dfdb39bff2d7117640a66564beac25f5bfaa07f23ac866ba5052e6e6f5a227c80066441c6e638cfa0d79bbc6127daefc75cabf235d869e57cc46aa0e5bc38993782f9b32ad44c2e62b43e7b12f8976c1e09768e5f02e4dd7c33f82c4e954fa18f9362af3db1394dada9e03e628e21b5c4b5e2480815feb368eb7652099c0fba15802243192904427c9b99923973ae00000000000000"]}, {0x32, &(0x7f0000000080)=@string={0x32, 0x3, "f1ea01a2355f25ba6fbb1373365d9bbfdd22108646797b934f7613c9052a8dc445cfbe6dd2dc2b7f1dccfe6677fca757"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41d}}, {0x2a, &(0x7f0000000280)=@string={0x2a, 0x3, "a47ba176ac8a5130d974b0b7b3b21bb53f5d4d53ab2754233429247397dea35b9a5b15263dd452f2"}}]}) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:03:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x24}}, 0x0) 00:03:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4800000000000000) 00:03:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 00:03:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x2000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:03:54 executing program 0: r0 = timerfd_create(0x0, 0x0) r1 = inotify_init1(0x0) fcntl$dupfd(r1, 0x0, r0) 00:03:54 executing program 0: r0 = timerfd_create(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) 00:03:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x24}}, 0x0) 00:03:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 1534.632398][T18397] usbhid 3-1:0.0: can't add hid device: -71 [ 1534.632483][T18397] usbhid: probe of 3-1:0.0 failed with error -71 00:03:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x2000}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = signalfd(r0, &(0x7f0000000000)={[0x3ff]}, 0x8) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:03:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x500}, 0x0) 00:03:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) [ 1534.655983][T18397] usb 3-1: USB disconnect, device number 2 [ 1535.002466][T18397] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1535.362481][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1535.362525][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.362557][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.362583][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1535.362626][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1535.362655][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.365026][T18397] usb 3-1: config 0 descriptor?? [ 1535.814308][T30550] Error: Driver 'raw-gadget' is already registered, aborting... [ 1535.814319][T30550] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1535.814331][T30550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.839357][T18397] appleir 0003:05AC:8243.00DF: unknown main item tag 0x0 [ 1535.839849][T18397] appleir 0003:05AC:8243.00DF: No inputs registered, leaving [ 1535.843030][T18397] appleir 0003:05AC:8243.00DF: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1537.292468][ T5633] usb 3-1: reset high-speed USB device number 3 using dummy_hcd 00:03:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x0) 00:03:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x24}}, 0x0) 00:03:57 executing program 0: r0 = timerfd_create(0x0, 0x0) dup(r0) 00:03:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)={0x22e, 0x77a, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:03:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4c00000000000000) 00:03:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xb8c, 0x92, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x7b0f, 0x8, 0x1, {0x22, 0x3e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x4, 0x4d}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x3f, 0x7, 0x40}, 0x12c, &(0x7f0000000380)={0x5, 0xf, 0x12c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "ee9ab577cb8729893852c5fab0098b02"}, @generic={0x8f, 0x10, 0x4, "cedecb2eb1b86409fcd33e3ef20314835c8dab5fc1c367565e87f02aa4152f9a5bbfed22390d2e24cbdfd369588798026b44dd7027e0d5da737948dbcd66555822da5ba3a6a384fa39e0ce7b2be02141f957e52285d097061605bf392217f2bdeb50ea7e3ddaab04ca8499a8f86e30652d2f7eb2c52a99dd17efc37665148fa4e19d5bdd5d5885553d53b5a9"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "f51b683d77f56b1e417b00cedd2c693c"}, @ptm_cap={0x3}, @generic={0x6d, 0x10, 0x4, "493e5bd84481a85299c57b80af79ff8bd9512ce87bf79307316dc11488ba82fbc9d4c2725d944447587a2b55c303ab43078897eac5d82f2b7433e7cfa344bafb4b644e53df33b7618876a2270b07c72e1e11f03f826c6aa559c94523f9f386c64d637f1c192ead135bdd"}]}, 0x5, [{0xc1, &(0x7f00000004c0)=ANY=[@ANYBLOB="c103ebd5d28e48b17c9cb6d299c3c4d3b2ef08a6238f8dfdb39bff2d7117640a66564beac25f5bfaa07f23ac866ba5052e6e6f5a227c80066441c6e638cfa0d79bbc6127daefc75cabf235d869e57cc46aa0e5bc38993782f9b32ad44c2e62b43e7b12f8976c1e09768e5f02e4dd7c33f82c4e954fa18f9362af3db1394dada9e03e628e21b5c4b5e2480815feb368eb7652099c0fba15802243192904427c9b99923973ae00000000000000"]}, {0x32, &(0x7f0000000080)=@string={0x32, 0x3, "f1ea01a2355f25ba6fbb1373365d9bbfdd22108646797b934f7613c9052a8dc445cfbe6dd2dc2b7f1dccfe6677fca757"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41d}}, {0x2a, &(0x7f0000000280)=@string={0x2a, 0x3, "a47ba176ac8a5130d974b0b7b3b21bb53f5d4d53ab2754233429247397dea35b9a5b15263dd452f2"}}]}) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:03:57 executing program 0: shmget(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 00:03:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 1537.690452][T30575] __nla_validate_parse: 20 callbacks suppressed [ 1537.690472][T30575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x0) 00:03:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)={0x22e, 0x77a, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:03:57 executing program 0: shmget(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) [ 1537.690504][T30575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1537.700559][T30572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:03:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6000000000000000) 00:03:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x900}, 0x0) 00:03:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x0) 00:03:57 executing program 0: shmget(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) [ 1537.726021][T30571] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1537.866869][T30584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1537.866904][T30584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x0) 00:03:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 1537.905710][T30585] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1537.976565][T30596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1537.976604][T30596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1537.982066][T30597] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1538.002360][ T5633] usb 3-1: device descriptor read/64, error -71 [ 1538.272384][ T5633] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 1538.836584][T30577] Error: Driver 'raw-gadget' is already registered, aborting... [ 1538.836599][T30577] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1538.836617][T30577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xb8c, 0x92, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x7b0f, 0x8, 0x1, {0x22, 0x3e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x4, 0x4d}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x3f, 0x7, 0x40}, 0x12c, &(0x7f0000000380)={0x5, 0xf, 0x12c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "ee9ab577cb8729893852c5fab0098b02"}, @generic={0x8f, 0x10, 0x4, "cedecb2eb1b86409fcd33e3ef20314835c8dab5fc1c367565e87f02aa4152f9a5bbfed22390d2e24cbdfd369588798026b44dd7027e0d5da737948dbcd66555822da5ba3a6a384fa39e0ce7b2be02141f957e52285d097061605bf392217f2bdeb50ea7e3ddaab04ca8499a8f86e30652d2f7eb2c52a99dd17efc37665148fa4e19d5bdd5d5885553d53b5a9"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "f51b683d77f56b1e417b00cedd2c693c"}, @ptm_cap={0x3}, @generic={0x6d, 0x10, 0x4, "493e5bd84481a85299c57b80af79ff8bd9512ce87bf79307316dc11488ba82fbc9d4c2725d944447587a2b55c303ab43078897eac5d82f2b7433e7cfa344bafb4b644e53df33b7618876a2270b07c72e1e11f03f826c6aa559c94523f9f386c64d637f1c192ead135bdd"}]}, 0x5, [{0xc1, &(0x7f00000004c0)=ANY=[@ANYBLOB="c103ebd5d28e48b17c9cb6d299c3c4d3b2ef08a6238f8dfdb39bff2d7117640a66564beac25f5bfaa07f23ac866ba5052e6e6f5a227c80066441c6e638cfa0d79bbc6127daefc75cabf235d869e57cc46aa0e5bc38993782f9b32ad44c2e62b43e7b12f8976c1e09768e5f02e4dd7c33f82c4e954fa18f9362af3db1394dada9e03e628e21b5c4b5e2480815feb368eb7652099c0fba15802243192904427c9b99923973ae00000000000000"]}, {0x32, &(0x7f0000000080)=@string={0x32, 0x3, "f1ea01a2355f25ba6fbb1373365d9bbfdd22108646797b934f7613c9052a8dc445cfbe6dd2dc2b7f1dccfe6677fca757"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41d}}, {0x2a, &(0x7f0000000280)=@string={0x2a, 0x3, "a47ba176ac8a5130d974b0b7b3b21bb53f5d4d53ab2754233429247397dea35b9a5b15263dd452f2"}}]}) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:04:00 executing program 0: shmget(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 00:04:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 00:04:00 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0c0, 0x0) 00:04:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6558000000000000) 00:04:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)={0x22e, 0x77a, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:04:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8901, 0x0) [ 1540.687649][T18397] usb 3-1: USB disconnect, device number 3 00:04:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 00:04:00 executing program 0: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0}, 0x20) 00:04:00 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6800000000000000) 00:04:00 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x300}, 0x0) [ 1541.212336][T18397] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1541.572479][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1541.572509][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.572527][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1541.572542][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1541.572571][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1541.572587][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.574149][T18397] usb 3-1: config 0 descriptor?? 00:04:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0xc374, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 00:04:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011d9344e8f013bcdad3101808f480001e9bf2bff010000ed42ec45b2fca9c217ba29bcf1223d4c6eab28c17f17dc48d414", @ANYRES32=r4], 0x34}}, 0x0) 00:04:01 executing program 0: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000100)=""/198) 00:04:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, 0x1c}}, 0x0) 00:04:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6c00000000000000) [ 1541.831472][T30634] Error: Driver 'raw-gadget' is already registered, aborting... [ 1541.831482][T30634] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1541.831494][T30634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:01 executing program 0: syz_mount_image$msdos(&(0x7f0000002b40), &(0x7f0000002b80)='./file0\x00', 0x0, 0x0, &(0x7f0000002e00), 0x280800b, &(0x7f0000002e80)={[{@fat=@nocase}]}) [ 1541.891732][T30641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55569 sclass=netlink_route_socket pid=30641 comm=syz-executor.1 00:04:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, 0x0, 0x0) 00:04:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7400000000000000) 00:04:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x6800}, 0x0) 00:04:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011d9344e8f013bcdad3101808f480001e9bf2bff010000ed42ec45b2fca9c217ba29bcf1223d4c6eab28c17f17dc48d414", @ANYRES32=r4], 0x34}}, 0x0) [ 1541.922442][T18397] usbhid 3-1:0.0: can't add hid device: -71 [ 1541.922527][T18397] usbhid: probe of 3-1:0.0 failed with error -71 [ 1541.924723][T18397] usb 3-1: USB disconnect, device number 4 00:04:01 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1542.130657][T30657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55569 sclass=netlink_route_socket pid=30657 comm=syz-executor.1 [ 1542.332448][T18397] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1542.692359][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1542.692402][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.692420][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.692435][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1542.692466][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1542.692484][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.693929][T18397] usb 3-1: config 0 descriptor?? [ 1543.174317][T18397] appleir 0003:05AC:8243.00E0: unknown main item tag 0x0 [ 1543.174819][T18397] appleir 0003:05AC:8243.00E0: No inputs registered, leaving [ 1543.180212][T18397] appleir 0003:05AC:8243.00E0: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1544.622315][ T5633] usb 3-1: reset high-speed USB device number 5 using dummy_hcd 00:04:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0xc374, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0xc374, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:04:04 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'macvlan1\x00', {0x2, 0x0, @multicast2}}) 00:04:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) 00:04:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 00:04:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x750c000000000000) 00:04:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011d9344e8f013bcdad3101808f480001e9bf2bff010000ed42ec45b2fca9c217ba29bcf1223d4c6eab28c17f17dc48d414", @ANYRES32=r4], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe2(&(0x7f0000000040), 0x4000) (async) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011d9344e8f013bcdad3101808f480001e9bf2bff010000ed42ec45b2fca9c217ba29bcf1223d4c6eab28c17f17dc48d414", @ANYRES32=r4], 0x34}}, 0x0) (async) 00:04:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0x91) [ 1544.989006][T30669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55569 sclass=netlink_route_socket pid=30669 comm=syz-executor.1 00:04:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x101}, 0x14}}, 0x0) 00:04:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x7400}, 0x0) [ 1545.016716][T30673] __nla_validate_parse: 14 callbacks suppressed [ 1545.016737][T30673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="340100001100ed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x400300}}, 0x0) 00:04:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) [ 1545.016771][T30673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1545.037212][T30683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1545.119359][T30688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1545.119398][T30688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1545.452284][ T5633] usb 3-1: device descriptor read/64, error -71 [ 1545.456488][T30696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1545.456526][T30696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1545.654876][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.654925][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.722376][ T5633] usb 3-1: reset high-speed USB device number 5 using dummy_hcd 00:04:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0xc374, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x760c000000000000) 00:04:06 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setresuid(0x0, 0xee00, 0x0) 00:04:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="340100001100ed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 00:04:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000001f40)='./file1\x00', 0x0, 0x0, &(0x7f0000003180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='dots,showexec,dots,fmask=0']) [ 1546.888302][T30697] Error: Driver 'raw-gadget' is already registered, aborting... [ 1546.888316][T30697] UDC core: USB Raw Gadget: driver registration failed: -16 00:04:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000}, 0x0) [ 1546.888334][T30697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f0000000140)={'sit0\x00', 0x0}) 00:04:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="340100001100ed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="340100001100ed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) 00:04:06 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000015c0)) [ 1546.903824][T24481] usb 3-1: USB disconnect, device number 5 [ 1546.968247][T30707] FAT-fs (loop5): bogus number of reserved sectors 00:04:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7a00000000000000) [ 1546.968267][T30707] FAT-fs (loop5): Can't find a valid FAT filesystem 00:04:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 1546.971341][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1546.971377][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1547.003995][T30711] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1547.028316][ T28] audit: type=1326 audit(1655510646.558:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30704 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ece89109 code=0x7ffc0000 [ 1547.028550][ T28] audit: type=1326 audit(1655510646.558:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30704 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ece89109 code=0x7ffc0000 [ 1547.392501][T24481] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1547.752423][T24481] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1547.752458][T24481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.752480][T24481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.752495][T24481] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1547.752522][T24481] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1547.752560][T24481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.754249][T24481] usb 3-1: config 0 descriptor?? [ 1548.244367][T24481] appleir 0003:05AC:8243.00E1: unknown main item tag 0x0 [ 1548.244854][T24481] appleir 0003:05AC:8243.00E1: No inputs registered, leaving [ 1548.250420][T24481] appleir 0003:05AC:8243.00E1: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1548.444530][T24481] usb 3-1: USB disconnect, device number 6 00:04:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ec69"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:08 executing program 5: syz_clone3(&(0x7f0000000480)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:04:08 executing program 0: openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) 00:04:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 00:04:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x8100000000000000) 00:04:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6}, @jmp={0x5, 0x1, 0xc, 0x8, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}]}, &(0x7f00000000c0)='GPL\x00', 0x80000001, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x1, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x8, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, r1]}, 0x80) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8947, &(0x7f0000000300)={'vxcan0\x00'}) 00:04:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 00:04:08 executing program 5: syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/113, 0x71, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}, 0x58) 00:04:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x88a8ffff00000000) 00:04:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a3, &(0x7f0000000300)={'vxcan0\x00'}) 00:04:08 executing program 5: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) [ 1549.312352][T29465] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1549.682460][T29465] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1549.682505][T29465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.682539][T29465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.682565][T29465] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1549.682604][T29465] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1549.682632][T29465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.684703][T29465] usb 3-1: config 0 descriptor?? [ 1550.164539][T29465] appleir 0003:05AC:8243.00E2: unknown main item tag 0x0 [ 1550.165028][T29465] appleir 0003:05AC:8243.00E2: No inputs registered, leaving [ 1550.170240][T29465] appleir 0003:05AC:8243.00E2: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1551.672366][T18397] usb 3-1: reset high-speed USB device number 7 using dummy_hcd 00:04:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ec69"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ec69"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:04:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6}, @jmp={0x5, 0x1, 0xc, 0x8, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}]}, &(0x7f00000000c0)='GPL\x00', 0x80000001, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x1, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x8, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, r1]}, 0x80) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6}, @jmp={0x5, 0x1, 0xc, 0x8, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}]}, &(0x7f00000000c0)='GPL\x00', 0x80000001, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x1, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x8, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, r1]}, 0x80) (async) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) 00:04:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 00:04:11 executing program 5: openat$thread_pidfd(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:04:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032cbd7000fbdbdf252c"], 0x28}}, 0x0) 00:04:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x90f8fcff00000000) 00:04:11 executing program 5: openat$proc_capi20(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) 00:04:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1552.079512][T30767] __nla_validate_parse: 12 callbacks suppressed [ 1552.079532][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.079566][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:11 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x8}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x2080}, 0x0) [ 1552.090103][T30762] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1552.111654][T30763] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6}, @jmp={0x5, 0x1, 0xc, 0x8, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}]}, &(0x7f00000000c0)='GPL\x00', 0x80000001, 0xd7, &(0x7f0000000340)=""/215, 0x40f00, 0x1, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x8, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, r1]}, 0x80) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x9effffff00000000) 00:04:11 executing program 5: syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x82) [ 1552.208519][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.208562][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.331644][T30785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1552.349408][T30791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1552.412437][T18397] usb 3-1: device descriptor read/64, error -71 [ 1552.682360][T18397] usb 3-1: reset high-speed USB device number 7 using dummy_hcd 00:04:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ec69"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ec69"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:04:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 00:04:13 executing program 0: openat$nullb(0xffffff9c, &(0x7f0000000000), 0x103043, 0x0) 00:04:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x23, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:04:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xa20b000000000000) 00:04:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000110001e90d7d1fc74e1bed42ec45b2fc0917224c48f436b2db48590b19409f56a3803a182e57e7f92825af806a4afcb4017bce92d1ec890c166a481ef4658aa5b4b375316e5ea9f49ed7a62f5a8b7c1e2b98e02f9ebe34ea4739247b97d5806484c160c61bf6dc3b97d3", @ANYRES32=r3], 0x34}}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x80, 0x284401) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000280)=0x1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x501180, 0x1) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_newroute={0x1c, 0x18, 0x400, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x3, 0xff, 0x4, 0xff, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008054) [ 1553.819166][T30794] Error: Driver 'raw-gadget' is already registered, aborting... 00:04:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x0, 0x0, 0x20, 0x0, 0x1}, 0x48) 00:04:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:04:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0xc01812f4, 0x0) [ 1553.819180][T30794] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1553.819200][T30794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.828024][T24481] usb 3-1: USB disconnect, device number 7 00:04:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000110001e90d7d1fc74e1bed42ec45b2fc0917224c48f436b2db48590b19409f56a3803a182e57e7f92825af806a4afcb4017bce92d1ec890c166a481ef4658aa5b4b375316e5ea9f49ed7a62f5a8b7c1e2b98e02f9ebe34ea4739247b97d5806484c160c61bf6dc3b97d3", @ANYRES32=r3], 0x34}}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x80, 0x284401) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000280)=0x1) (async) r5 = open(&(0x7f0000000080)='./file0\x00', 0x501180, 0x1) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_newroute={0x1c, 0x18, 0x400, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x3, 0xff, 0x4, 0xff, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008054) [ 1553.861148][ T28] audit: type=1400 audit(1655510653.388:478): avc: denied { ioctl } for pid=30798 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 00:04:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xad00000000000000) 00:04:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 1553.881548][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1553.881587][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1554.322555][T24481] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1554.686753][T24481] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1554.686783][T24481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.686801][T24481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.686817][T24481] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1554.686841][T24481] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1554.686856][T24481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.688420][T24481] usb 3-1: config 0 descriptor?? [ 1555.164737][T24481] appleir 0003:05AC:8243.00E3: unknown main item tag 0x0 [ 1555.165056][T24481] appleir 0003:05AC:8243.00E3: No inputs registered, leaving [ 1555.167894][T24481] appleir 0003:05AC:8243.00E3: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 00:04:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000e39238000109022400010000000009040000fd03301157d75bc60f090122010009"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0xd2, 0x1f, 0x20, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:15 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)) 00:04:15 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "740571f5308e2ea47a2ae1a49cde022d7e31aa9418a4854147ef0d33fbf105d84f786305bf34ec22404450b338779fe2984df52278eaba7b8eb322f4a8022350"}, 0x48, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 00:04:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 00:04:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xe002000000000000) 00:04:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000110001e90d7d1fc74e1bed42ec45b2fc0917224c48f436b2db48590b19409f56a3803a182e57e7f92825af806a4afcb4017bce92d1ec890c166a481ef4658aa5b4b375316e5ea9f49ed7a62f5a8b7c1e2b98e02f9ebe34ea4739247b97d5806484c160c61bf6dc3b97d3", @ANYRES32=r3], 0x34}}, 0x0) (async) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x80, 0x284401) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000280)=0x1) (async) r5 = open(&(0x7f0000000080)='./file0\x00', 0x501180, 0x1) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_newroute={0x1c, 0x18, 0x400, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x3, 0xff, 0x4, 0xff, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008054) [ 1555.689710][T30824] Error: Driver 'raw-gadget' is already registered, aborting... [ 1555.689723][T30824] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1555.689738][T30824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.702119][T28676] usb 3-1: USB disconnect, device number 8 00:04:15 executing program 0: mq_open(&(0x7f0000000100)='$,\x00', 0x40, 0x0, &(0x7f0000000140)) 00:04:15 executing program 5: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 00:04:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 00:04:15 executing program 0: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:04:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf0ffffff00000000) 00:04:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x4113}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) [ 1556.216102][T28676] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1556.542551][T28676] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1556.692412][T28676] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1556.692450][T28676] usb 3-1: can't read configurations, error -61 [ 1556.842440][T28676] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1557.123589][T28676] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1557.243973][T28676] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1557.244011][T28676] usb 3-1: can't read configurations, error -61 [ 1557.244218][T28676] usb usb3-port1: attempt power cycle [ 1557.652303][T28676] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1557.782683][T28676] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1557.924016][T28676] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1557.924038][T28676] usb 3-1: can't read configurations, error -61 [ 1558.082390][T28676] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1558.232422][T28676] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1558.372685][T28676] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1558.372722][T28676] usb 3-1: can't read configurations, error -61 [ 1558.376005][T28676] usb usb3-port1: unable to enumerate USB device 00:04:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000e39238000109022400010000000009040000fd03301157d75bc60f090122010009"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0xd2, 0x1f, 0x20, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:04:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f00000003c0)=[@decrefs], 0x0, 0x0, 0x0}) 00:04:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 00:04:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x4113}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x4113}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) 00:04:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf401000000000000) [ 1558.809792][T30860] __nla_validate_parse: 13 callbacks suppressed [ 1558.809813][T30860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000280)) 00:04:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x14}, {0x6}]}) [ 1558.809845][T30860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1558.848680][T30863] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:04:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xf5ffffff00000000) 00:04:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 1558.878998][T30866] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x4113}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x4113}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) [ 1558.956379][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1558.956499][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1558.996086][ T28] audit: type=1326 audit(1655510658.528:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86ece89109 code=0x0 [ 1559.070836][T30885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1559.070876][T30885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1559.122341][T30884] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1559.158549][T30887] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1559.173346][T24481] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1559.452397][T24481] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1559.572421][T24481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1559.572459][T24481] usb 3-1: can't read configurations, error -61 [ 1559.742410][T24481] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1560.072491][T24481] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1560.222653][T24481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1560.222689][T24481] usb 3-1: can't read configurations, error -61 [ 1560.222880][T24481] usb usb3-port1: attempt power cycle [ 1560.662361][T24481] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1560.832433][T24481] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1560.962460][T24481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1560.962497][T24481] usb 3-1: can't read configurations, error -61 [ 1561.112435][T24481] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1561.242499][T24481] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1561.362410][T24481] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1561.362434][T24481] usb 3-1: can't read configurations, error -61 [ 1561.362563][T24481] usb usb3-port1: unable to enumerate USB device 00:04:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mount$binderfs(0x0, &(0x7f0000000440)='./binderfs\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='max=00000000000000000000005']) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x6, 0x8000) 00:04:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000e39238000109022400010000000009040000fd03301157d75bc60f090122010009"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0xd2, 0x1f, 0x20, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2809}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:21 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000180)=""/101, 0x65) 00:04:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 00:04:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfcffffff00000000) 00:04:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = io_uring_setup(0xea0, &(0x7f0000000040)={0x0, 0x6dd4, 0x4, 0x2, 0x3e4, 0x0, r2}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYRES32=r2, @ANYRES16=r1], 0x34}}, 0x801) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/198, 0xc6}], 0x2) 00:04:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 00:04:21 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "2a038cdf7882af862d8cf765954f04718a308e2555261ba1158e3cdd585f4da33c2beff5299c1065fa76f4d31c2156137f3c9ad23c5bbe972ede5bc9d05a0436"}, 0x48, 0xfffffffffffffffd) 00:04:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001600010000000000000000000a000000", @ANYRES32, @ANYBLOB="040001"], 0x34}}, 0x0) 00:04:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfeffffff00000000) 00:04:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5}) 00:04:21 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 00:04:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) [ 1562.126675][ T28] audit: type=1400 audit(1655510661.658:480): avc: denied { execmem } for pid=30910 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1562.372404][T18396] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1562.692571][T18396] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1562.812404][T18396] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1562.812442][T18396] usb 3-1: can't read configurations, error -61 [ 1562.962315][T18396] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1563.242587][T18396] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1563.362433][T18396] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1563.362474][T18396] usb 3-1: can't read configurations, error -61 [ 1563.362674][T18396] usb usb3-port1: attempt power cycle [ 1563.772340][T18396] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1563.912572][T18396] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1564.042388][T18396] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1564.042424][T18396] usb 3-1: can't read configurations, error -61 [ 1564.192366][T18396] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1564.322457][T18396] usb 3-1: too many configurations: 146, using maximum allowed: 8 [ 1564.452410][T18396] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1564.452447][T18396] usb 3-1: can't read configurations, error -61 [ 1564.452641][T18396] usb usb3-port1: unable to enumerate USB device 00:04:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 00:04:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = io_uring_setup(0xea0, &(0x7f0000000040)={0x0, 0x6dd4, 0x4, 0x2, 0x3e4, 0x0, r2}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYRES32=r2, @ANYRES16=r1], 0x34}}, 0x801) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/198, 0xc6}], 0x2) 00:04:24 executing program 5: syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, 0x1, &(0x7f0000001a40)=[{0x0}], 0x0, &(0x7f0000001b00)={[], [{@fsname={'fsname', 0x3d, 'xt\x00'}}]}) stat(0x0, 0x0) 00:04:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffff7f00000000) 00:04:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12ea000000000040ac054382c0000005000000000000000000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001200)={0x2c, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x46c853b7dd3e2528, 0x20, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0xa1cd, 0xfe, 0x1, {0x22, 0x494}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x4, 0x17}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x8, 0x80, 0x6, 0x10, 0xfe}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x2, [{0x13, &(0x7f0000000380)=@string={0x13, 0x3, "60b5b621cb950f830bf6b04079716e0d75"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}]}) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000000)) 00:04:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5}) 00:04:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) [ 1564.973139][T30926] __nla_validate_parse: 8 callbacks suppressed [ 1564.973157][T30926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1564.973189][T30926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5}) [ 1564.975903][T30927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffffff00000000) [ 1564.976480][T30928] FAT-fs (loop5): Unrecognized mount option "fsname=xt" or missing value 00:04:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 00:04:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = io_uring_setup(0xea0, &(0x7f0000000040)={0x0, 0x6dd4, 0x4, 0x2, 0x3e4, 0x0, r2}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYRES32=r2, @ANYRES16=r1], 0x34}}, 0x801) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/198, 0xc6}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x100}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) io_uring_setup(0xea0, &(0x7f0000000040)={0x0, 0x6dd4, 0x4, 0x2, 0x3e4, 0x0, r2}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYRES32=r2, @ANYRES16=r1], 0x34}}, 0x801) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/198, 0xc6}], 0x2) (async) [ 1565.183199][T30942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1565.183238][T30942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 1565.285844][T30948] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1565.291151][T30951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1565.291187][T30951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xa71fe5d2}, 0x0) 00:04:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffffffff030000) 00:04:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xd2e51fa7}, 0x0) 00:04:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x10}) [ 1565.364149][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1565.364187][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1565.400925][T18396] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1565.571337][ T28] audit: type=1400 audit(1655510665.098:481): avc: denied { write } for pid=30963 comm="syz-executor.1" name="btrfs-control" dev="devtmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1565.596891][T18396] usb 3-1: device descriptor read/64, error 18 [ 1565.864291][T18396] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1566.052306][T18396] usb 3-1: device descriptor read/64, error 18 [ 1566.184894][T18396] usb usb3-port1: attempt power cycle [ 1566.592387][T18396] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1566.762527][T18396] usb 3-1: device descriptor read/8, error -61 [ 1567.032321][T18396] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1567.222395][T18396] usb 3-1: device descriptor read/8, error -61 [ 1567.344302][T18396] usb usb3-port1: unable to enumerate USB device 00:04:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12ea000000000040ac054382c0000005000000000000000000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000001200)={0x2c, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x46c853b7dd3e2528, 0x20, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0xa1cd, 0xfe, 0x1, {0x22, 0x494}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x4, 0x17}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x8, 0x80, 0x6, 0x10, 0xfe}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x2, [{0x13, &(0x7f0000000380)=@string={0x13, 0x3, "60b5b621cb950f830bf6b04079716e0d75"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}]}) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000000)) 00:04:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5}) 00:04:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5}) 00:04:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 00:04:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xfffffffffffff000) 00:04:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x10}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x10}) (async) 00:04:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 00:04:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 00:04:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x6ec5879808c833ed}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6], 0x34}}, 0x24018000) 00:04:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 00:04:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x10}) 00:04:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 1568.462465][T24481] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1568.652393][T24481] usb 3-1: device descriptor read/64, error 18 [ 1568.922394][T24481] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1569.112293][T24481] usb 3-1: device descriptor read/64, error 18 [ 1569.232996][T24481] usb usb3-port1: attempt power cycle [ 1569.642372][T24481] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1569.813933][T24481] usb 3-1: device descriptor read/8, error -61 [ 1570.082289][T24481] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1570.252482][T24481] usb 3-1: device descriptor read/8, error -61 [ 1570.373303][T24481] usb usb3-port1: unable to enumerate USB device 00:04:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12ea000000000040ac054382c0000005000000000000000000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000001200)={0x2c, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x46c853b7dd3e2528, 0x20, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0xa1cd, 0xfe, 0x1, {0x22, 0x494}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x4, 0x17}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x8, 0x80, 0x6, 0x10, 0xfe}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x2, [{0x13, &(0x7f0000000380)=@string={0x13, 0x3, "60b5b621cb950f830bf6b04079716e0d75"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}]}) (async) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000000)) 00:04:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) (rerun: 64) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (async) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x6ec5879808c833ed}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6], 0x34}}, 0x24018000) 00:04:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 00:04:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x100}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@util={0x25, "dd062da2fa1da11c1376398eac7d0e4d"}, 0x18) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) r4 = syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="c928", 0x2, 0x8}, {&(0x7f0000000240), 0x0, 0x2}, {&(0x7f0000000340)="827bcee28e6a8ccd2bb6a4382e970e07726bce6721d7e8065d8abfcdf7e0d8e75c42178d4524049b559157322d1f1757a53efbb16fbb26f86f19276fd24c47c2f3bc0b842e1478ca51e878639754d47c407dd9858cff62c22208ad130a4e9195c34e80d4854b5671bb2fbb043b1e1d986241cd5999580042d5014bd0e7b9d649602d714c6cd9953c061026630ecc", 0x8e, 0x5}], 0x41404, &(0x7f0000000540)={[{@ignore_local_fs}, {@quota_off}, {@upgrade}, {@rgrplvb}, {@statfs_percent={'statfs_percent', 0x3d, 0x101}}, {@statfs_percent={'statfs_percent', 0x3d, 0xcdb}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) fcntl$getflags(r4, 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34ffe40011e501e90d7d1f444e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'macvlan0\x00', @ifru_names='caif0\x00'}}) 00:04:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5}) 00:04:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0, 0x0, 0x5}) 00:04:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x2) [ 1571.122495][T31005] __nla_validate_parse: 17 callbacks suppressed [ 1571.122516][T31005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1571.122549][T31005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1571.178014][T31021] loop1: detected capacity change from 0 to 1 00:04:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='utf8=0,shortname=winnt,shortname=lower,shortname=lower']) 00:04:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x3) [ 1571.301452][T31027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1571.301490][T31027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x100}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@util={0x25, "dd062da2fa1da11c1376398eac7d0e4d"}, 0x18) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) (async) r4 = syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="c928", 0x2, 0x8}, {&(0x7f0000000240), 0x0, 0x2}, {&(0x7f0000000340)="827bcee28e6a8ccd2bb6a4382e970e07726bce6721d7e8065d8abfcdf7e0d8e75c42178d4524049b559157322d1f1757a53efbb16fbb26f86f19276fd24c47c2f3bc0b842e1478ca51e878639754d47c407dd9858cff62c22208ad130a4e9195c34e80d4854b5671bb2fbb043b1e1d986241cd5999580042d5014bd0e7b9d649602d714c6cd9953c061026630ecc", 0x8e, 0x5}], 0x41404, &(0x7f0000000540)={[{@ignore_local_fs}, {@quota_off}, {@upgrade}, {@rgrplvb}, {@statfs_percent={'statfs_percent', 0x3d, 0x101}}, {@statfs_percent={'statfs_percent', 0x3d, 0xcdb}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) fcntl$getflags(r4, 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34ffe40011e501e90d7d1f444e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'macvlan0\x00', @ifru_names='caif0\x00'}}) 00:04:30 executing program 5: clock_gettime(0x0, &(0x7f0000000340)={0x0}) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000300)={0x5}, &(0x7f0000000380)={r0}, 0x0) 00:04:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (async) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x6ec5879808c833ed}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6], 0x34}}, 0x24018000) [ 1571.400960][T31029] FAT-fs (loop0): bogus number of reserved sectors [ 1571.400980][T31029] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1571.542388][T24481] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1571.732341][T24481] usb 3-1: device descriptor read/64, error 18 [ 1572.002434][T24481] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1572.192334][T24481] usb 3-1: device descriptor read/64, error 18 [ 1572.312787][T24481] usb usb3-port1: attempt power cycle [ 1572.722321][T24481] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1572.892400][T24481] usb 3-1: device descriptor read/8, error -61 [ 1573.172453][T24481] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1573.372397][T24481] usb 3-1: device descriptor read/8, error -61 [ 1573.493284][T24481] usb usb3-port1: unable to enumerate USB device 00:04:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="6cdebff95c111699725f405ad4e8d8ef60dba79978843ba4ed989094f7fd388c4c47006a3e7bf7d0524358d2a354c9359db834dc912814f9de60a58c785f44f9cb906325ec21e9773a83e873bf3ebff1a60bc64afcf353ca28caf52a50885066ace00b153f8017ae2ba5d2db6e295cc22a095003c086f79262defa3849f0935f3289c04b5fd7c115e2f6d68827013a8d0c030a953f536d13d9122820a2e4053de4aa65d38115d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, &(0x7f0000000d00)={0x20, 0x11, 0x86, {0x86, 0x9, "ce1b95bb24d9ca376f5228615c6f882a2d720ef9c88a9cd4eb88ab2fa5cf0cd2a3eba43ce64c875c0a19baccf67a4dff9ddc6e8a56c74e5b1915220565a8098161b0cf1874314a73d0c043a845e33e2a798a0bdb981169217c4f2322ea04db514b4df308f299194003d3b30b16de57d71be268b8e47d9be4db2caeb87594a13843e47438"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000dc0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xf00f, 0x5, [0x3f00, 0xc0]}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x5, 0x1, '\r,v}', "b5afaf5b"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x6, 0x26, 0x8, 0x1, 0x5}}}, &(0x7f0000001400)={0x84, &(0x7f0000000ec0)={0x20, 0x3156e9516d9d3206, 0x100, "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"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001180)={0x40, 0xb, 0x2, "5d1a"}, &(0x7f00000011c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001240)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001280)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "d1e3"}, &(0x7f0000001300)={0x40, 0x1a, 0x2}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x88}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0x19, 0x2, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x7, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3f, 0x5, 0x40}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x88, 0x3, 0x1f, 0xff, 0x9}, 0x17, &(0x7f0000000280)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0x1, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3, 0x20, 0x2, 0x5}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0x40, &(0x7f0000000380)=@string={0x40, 0x3, "1ee8c741b1b1cd14b05c290b6522919277e3a096dff13fcb08bf8f7a9f6c84e33d7c712fa374dc08f3b9c6a794d585f1830fa42c0d19a5995959dd21cef9"}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "90a9665b6a1e7293d8186fe3f6711f4fb45a2a0fcf6873b74a02dcbef27309f0c65caf70ad3877efa64173519cc9ae1697e29a0018045d20a6dea30042e61f6d3774b212abfb1776"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x425}}, {0x3b, &(0x7f0000000480)=@string={0x3b, 0x3, "b472fd235fc9bd4f83519a65931de11841d9a13844b3e000a06dbeda01642778354aedca691acad89403e3fc5337ae764e95ec31b4b60623f0"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x0, 0x22, 0x70, {0x70, 0x21, "46ead209aa67548ba3d2ed2237444e360b07742b988662283fd66bb6ea6be7f8322e1a49cfcd81fff4bbabea0e825e280b0ab1b9ec35b687709ae8fd0b2d57dc73d7f46008bb35f55947dfe04c4c8ff87dfd88dece19afe461e22269bedfd5f543959cbe70f8a0d2a24a70800183"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1434bbae2ea8967ce80f90f036790fcd"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x6, 0x9, "b83f55f9", "f45c73ea"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x3, 0x0, 0x0, 0x40, 0x1f}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x0, 0x6, 0x7c, "88c7a3d795a731c2014bd86e52d86ca0882fd2dc3447491a96e7f2e8bf2df9281cdefae92483b670841e083ad0d9635248a45fb7e20c55a8e560cee8256866659e4f14a19524a93b0dd169eda01773115942c01399fcbd72d993c324ff6709aaef32dc2e18181b75d842cbe824b43186e32fd51cdb80dcfc9487099a"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf00f]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xb80}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "6613"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "08f4"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x4}}) 00:04:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) 00:04:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x4) 00:04:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x100}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@util={0x25, "dd062da2fa1da11c1376398eac7d0e4d"}, 0x18) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) r4 = syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="c928", 0x2, 0x8}, {&(0x7f0000000240), 0x0, 0x2}, {&(0x7f0000000340)="827bcee28e6a8ccd2bb6a4382e970e07726bce6721d7e8065d8abfcdf7e0d8e75c42178d4524049b559157322d1f1757a53efbb16fbb26f86f19276fd24c47c2f3bc0b842e1478ca51e878639754d47c407dd9858cff62c22208ad130a4e9195c34e80d4854b5671bb2fbb043b1e1d986241cd5999580042d5014bd0e7b9d649602d714c6cd9953c061026630ecc", 0x8e, 0x5}], 0x41404, &(0x7f0000000540)={[{@ignore_local_fs}, {@quota_off}, {@upgrade}, {@rgrplvb}, {@statfs_percent={'statfs_percent', 0x3d, 0x101}}, {@statfs_percent={'statfs_percent', 0x3d, 0xcdb}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) fcntl$getflags(r4, 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34ffe40011e501e90d7d1f444e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'macvlan0\x00', @ifru_names='caif0\x00'}}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x100}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@util={0x25, "dd062da2fa1da11c1376398eac7d0e4d"}, 0x18) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) (async) syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="c928", 0x2, 0x8}, {&(0x7f0000000240), 0x0, 0x2}, {&(0x7f0000000340)="827bcee28e6a8ccd2bb6a4382e970e07726bce6721d7e8065d8abfcdf7e0d8e75c42178d4524049b559157322d1f1757a53efbb16fbb26f86f19276fd24c47c2f3bc0b842e1478ca51e878639754d47c407dd9858cff62c22208ad130a4e9195c34e80d4854b5671bb2fbb043b1e1d986241cd5999580042d5014bd0e7b9d649602d714c6cd9953c061026630ecc", 0x8e, 0x5}], 0x41404, &(0x7f0000000540)={[{@ignore_local_fs}, {@quota_off}, {@upgrade}, {@rgrplvb}, {@statfs_percent={'statfs_percent', 0x3d, 0x101}}, {@statfs_percent={'statfs_percent', 0x3d, 0xcdb}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) (async) fcntl$getflags(r4, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34ffe40011e501e90d7d1f444e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'macvlan0\x00', @ifru_names='caif0\x00'}}) (async) 00:04:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000022110001e97ac926ad3ec51178111c5d4c0d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000805, 0x0) mmap(&(0x7f000015e000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 00:04:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x5) 00:04:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1574.180494][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1574.180534][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000022110001e97ac926ad3ec51178111c5d4c0d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) [ 1574.234483][T31058] loop1: detected capacity change from 0 to 1 00:04:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110001e90d7d1f074e1b812892dfbc7f9ed9b798c60d83a37ddcdf6641dfc16e0a0d989643046bcd575dcfd29432e5fe1d3fda0c26c6db30f003f940358cda1a67e80243c7515c81a5b1e955f76655f518ffba9aac90cc07ba5e60dcfcbc3dcf2876125c0aff3d289842b1313d017c9bd62fae182fe67dfa0df3852f33a2157229bc783cd26fd6", @ANYRES32=r3], 0x34}}, 0x0) 00:04:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x6) 00:04:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x7) [ 1574.457808][T31080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1574.457840][T31080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1574.459922][T31073] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1574.478078][ T3650] Bluetooth: hci6: sending frame failed (-49) [ 1574.479649][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1574.632598][T24481] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1575.032435][T24481] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1575.032482][T24481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.032512][T24481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.032540][T24481] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1575.032585][T24481] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1575.032615][T24481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.034794][T24481] usb 3-1: config 0 descriptor?? [ 1575.736252][T24481] appleir 0003:05AC:8243.00E4: item fetching failed at offset 0/1 [ 1575.736719][T24481] appleir 0003:05AC:8243.00E4: parse failed [ 1575.736768][T24481] appleir: probe of 0003:05AC:8243.00E4 failed with error -22 [ 1576.137389][T31059] Error: Driver 'raw-gadget' is already registered, aborting... [ 1576.137398][T31059] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1576.137410][T31059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.138319][T18397] usb 3-1: USB disconnect, device number 33 00:04:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x9) 00:04:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110001e90d7d1f074e1b812892dfbc7f9ed9b798c60d83a37ddcdf6641dfc16e0a0d989643046bcd575dcfd29432e5fe1d3fda0c26c6db30f003f940358cda1a67e80243c7515c81a5b1e955f76655f518ffba9aac90cc07ba5e60dcfcbc3dcf2876125c0aff3d289842b1313d017c9bd62fae182fe67dfa0df3852f33a2157229bc783cd26fd6", @ANYRES32=r3], 0x34}}, 0x0) 00:04:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async, rerun: 64) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000022110001e97ac926ad3ec51178111c5d4c0d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 00:04:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 00:04:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="6cdebff95c111699725f405ad4e8d8ef60dba79978843ba4ed989094f7fd388c4c47006a3e7bf7d0524358d2a354c9359db834dc912814f9de60a58c785f44f9cb906325ec21e9773a83e873bf3ebff1a60bc64afcf353ca28caf52a50885066ace00b153f8017ae2ba5d2db6e295cc22a095003c086f79262defa3849f0935f3289c04b5fd7c115e2f6d68827013a8d0c030a953f536d13d9122820a2e4053de4aa65d38115d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, &(0x7f0000000d00)={0x20, 0x11, 0x86, {0x86, 0x9, "ce1b95bb24d9ca376f5228615c6f882a2d720ef9c88a9cd4eb88ab2fa5cf0cd2a3eba43ce64c875c0a19baccf67a4dff9ddc6e8a56c74e5b1915220565a8098161b0cf1874314a73d0c043a845e33e2a798a0bdb981169217c4f2322ea04db514b4df308f299194003d3b30b16de57d71be268b8e47d9be4db2caeb87594a13843e47438"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000dc0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xf00f, 0x5, [0x3f00, 0xc0]}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x5, 0x1, '\r,v}', "b5afaf5b"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x6, 0x26, 0x8, 0x1, 0x5}}}, &(0x7f0000001400)={0x84, &(0x7f0000000ec0)={0x20, 0x3156e9516d9d3206, 0x100, "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"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001180)={0x40, 0xb, 0x2, "5d1a"}, &(0x7f00000011c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001240)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001280)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "d1e3"}, &(0x7f0000001300)={0x40, 0x1a, 0x2}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x88}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0x19, 0x2, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x7, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3f, 0x5, 0x40}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x88, 0x3, 0x1f, 0xff, 0x9}, 0x17, &(0x7f0000000280)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0x1, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3, 0x20, 0x2, 0x5}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0x40, &(0x7f0000000380)=@string={0x40, 0x3, "1ee8c741b1b1cd14b05c290b6522919277e3a096dff13fcb08bf8f7a9f6c84e33d7c712fa374dc08f3b9c6a794d585f1830fa42c0d19a5995959dd21cef9"}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "90a9665b6a1e7293d8186fe3f6711f4fb45a2a0fcf6873b74a02dcbef27309f0c65caf70ad3877efa64173519cc9ae1697e29a0018045d20a6dea30042e61f6d3774b212abfb1776"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x425}}, {0x3b, &(0x7f0000000480)=@string={0x3b, 0x3, "b472fd235fc9bd4f83519a65931de11841d9a13844b3e000a06dbeda01642778354aedca691acad89403e3fc5337ae764e95ec31b4b60623f0"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x0, 0x22, 0x70, {0x70, 0x21, "46ead209aa67548ba3d2ed2237444e360b07742b988662283fd66bb6ea6be7f8322e1a49cfcd81fff4bbabea0e825e280b0ab1b9ec35b687709ae8fd0b2d57dc73d7f46008bb35f55947dfe04c4c8ff87dfd88dece19afe461e22269bedfd5f543959cbe70f8a0d2a24a70800183"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1434bbae2ea8967ce80f90f036790fcd"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x6, 0x9, "b83f55f9", "f45c73ea"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x3, 0x0, 0x0, 0x40, 0x1f}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x0, 0x6, 0x7c, "88c7a3d795a731c2014bd86e52d86ca0882fd2dc3447491a96e7f2e8bf2df9281cdefae92483b670841e083ad0d9635248a45fb7e20c55a8e560cee8256866659e4f14a19524a93b0dd169eda01773115942c01399fcbd72d993c324ff6709aaef32dc2e18181b75d842cbe824b43186e32fd51cdb80dcfc9487099a"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf00f]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xb80}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "6613"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "08f4"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="6cdebff95c111699725f405ad4e8d8ef60dba79978843ba4ed989094f7fd388c4c47006a3e7bf7d0524358d2a354c9359db834dc912814f9de60a58c785f44f9cb906325ec21e9773a83e873bf3ebff1a60bc64afcf353ca28caf52a50885066ace00b153f8017ae2ba5d2db6e295cc22a095003c086f79262defa3849f0935f3289c04b5fd7c115e2f6d68827013a8d0c030a953f536d13d9122820a2e4053de4aa65d38115d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, &(0x7f0000000d00)={0x20, 0x11, 0x86, {0x86, 0x9, "ce1b95bb24d9ca376f5228615c6f882a2d720ef9c88a9cd4eb88ab2fa5cf0cd2a3eba43ce64c875c0a19baccf67a4dff9ddc6e8a56c74e5b1915220565a8098161b0cf1874314a73d0c043a845e33e2a798a0bdb981169217c4f2322ea04db514b4df308f299194003d3b30b16de57d71be268b8e47d9be4db2caeb87594a13843e47438"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000dc0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xf00f, 0x5, [0x3f00, 0xc0]}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x5, 0x1, '\r,v}', "b5afaf5b"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x6, 0x26, 0x8, 0x1, 0x5}}}, &(0x7f0000001400)={0x84, &(0x7f0000000ec0)={0x20, 0x3156e9516d9d3206, 0x100, "3240b9b36f3c5841066f11b447e3f6b9d50c821c3e865f23e48475b0aa7addb8f7ec7c1cdc8af0508b3713c5c9167ffece2d2190569b8586d5f752fa9ee4024ad824503e165b59cd505748460d7fba1adbda8f37ccfd5872b228b992fa8ea433bfa841f23fab2baf9f3cad5151fb4d597c986be5c77c4082480707f81f30098568bb89de814250b6f6cd7a79b6a0604c5dab4f5f7b8a36ec6f7430d59fa0206f12fd140d829de18e3cade587cfca4a6b9f095bf21cdd6f52347e67292ea2ac3eb3dacc906721feb6c3360c91cd36785cd4d12f2acbf6b0ba050debc9f01924aee1695fc35b2c6f5a6060f19ba051acf0e0e7254e15958654e01ca7650f6c6a1b"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001180)={0x40, 0xb, 0x2, "5d1a"}, &(0x7f00000011c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001240)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001280)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "d1e3"}, &(0x7f0000001300)={0x40, 0x1a, 0x2}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x88}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0x1}}) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0x19, 0x2, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x7, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3f, 0x5, 0x40}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x88, 0x3, 0x1f, 0xff, 0x9}, 0x17, &(0x7f0000000280)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0x1, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3, 0x20, 0x2, 0x5}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0x40, &(0x7f0000000380)=@string={0x40, 0x3, "1ee8c741b1b1cd14b05c290b6522919277e3a096dff13fcb08bf8f7a9f6c84e33d7c712fa374dc08f3b9c6a794d585f1830fa42c0d19a5995959dd21cef9"}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "90a9665b6a1e7293d8186fe3f6711f4fb45a2a0fcf6873b74a02dcbef27309f0c65caf70ad3877efa64173519cc9ae1697e29a0018045d20a6dea30042e61f6d3774b212abfb1776"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x425}}, {0x3b, &(0x7f0000000480)=@string={0x3b, 0x3, "b472fd235fc9bd4f83519a65931de11841d9a13844b3e000a06dbeda01642778354aedca691acad89403e3fc5337ae764e95ec31b4b60623f0"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44f}}]}) (async) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x0, 0x22, 0x70, {0x70, 0x21, "46ead209aa67548ba3d2ed2237444e360b07742b988662283fd66bb6ea6be7f8322e1a49cfcd81fff4bbabea0e825e280b0ab1b9ec35b687709ae8fd0b2d57dc73d7f46008bb35f55947dfe04c4c8ff87dfd88dece19afe461e22269bedfd5f543959cbe70f8a0d2a24a70800183"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1434bbae2ea8967ce80f90f036790fcd"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x6, 0x9, "b83f55f9", "f45c73ea"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x3, 0x0, 0x0, 0x40, 0x1f}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x0, 0x6, 0x7c, "88c7a3d795a731c2014bd86e52d86ca0882fd2dc3447491a96e7f2e8bf2df9281cdefae92483b670841e083ad0d9635248a45fb7e20c55a8e560cee8256866659e4f14a19524a93b0dd169eda01773115942c01399fcbd72d993c324ff6709aaef32dc2e18181b75d842cbe824b43186e32fd51cdb80dcfc9487099a"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf00f]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xb80}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "6613"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "08f4"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x4}}) (async) 00:04:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0xf) [ 1576.723473][ T3650] Bluetooth: hci6: sending frame failed (-49) [ 1576.724911][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -49 00:04:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x48) 00:04:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1576.733586][ T42] Bluetooth: hci7: Frame reassembly failed (-84) [ 1576.750965][T31090] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:04:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x4c) 00:04:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110001e90d7d1f074e1b812892dfbc7f9ed9b798c60d83a37ddcdf6641dfc16e0a0d989643046bcd575dcfd29432e5fe1d3fda0c26c6db30f003f940358cda1a67e80243c7515c81a5b1e955f76655f518ffba9aac90cc07ba5e60dcfcbc3dcf2876125c0aff3d289842b1313d017c9bd62fae182fe67dfa0df3852f33a2157229bc783cd26fd6", @ANYRES32=r3], 0x34}}, 0x0) [ 1576.836492][T31104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900080027bd7000fedbdf250a100006fd420004002d00000500140003000000"], 0x24}}, 0x8000) 00:04:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x68) [ 1576.836529][T31104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1576.903499][T31107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1576.903536][T31107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1576.951098][T31110] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1576.955459][T31079] Bluetooth: hci6: sending frame failed (-49) [ 1576.957005][ T3650] Bluetooth: hci6: Opcode 0x1003 failed: -49 00:04:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 00:04:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x6c) [ 1577.031446][T31116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1577.031482][T31116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1577.032067][T31114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1577.094448][ T5632] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1577.139154][T30296] Bluetooth: hci6: Frame reassembly failed (-84) [ 1577.164802][T31121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1577.522415][ T5632] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1577.522464][ T5632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.522498][ T5632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.522526][ T5632] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1577.522572][ T5632] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1577.522601][ T5632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.524367][ T5632] usb 3-1: config 0 descriptor?? [ 1578.204440][ T5632] appleir 0003:05AC:8243.00E5: item fetching failed at offset 0/1 [ 1578.204889][ T5632] appleir 0003:05AC:8243.00E5: parse failed [ 1578.204938][ T5632] appleir: probe of 0003:05AC:8243.00E5 failed with error -22 [ 1578.613875][T31099] Error: Driver 'raw-gadget' is already registered, aborting... [ 1578.613890][T31099] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1578.613909][T31099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.619286][T31099] Error: Driver 'raw-gadget' is already registered, aborting... [ 1578.619305][T31099] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1578.619324][T31099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.633383][ T3695] usb 3-1: USB disconnect, device number 34 00:04:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 00:04:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41a640, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x448502, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6000}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @local, @random="7af541c29de6", @remote}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r2, 0x409, 0x600c1a97e7f28733) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3400000011009dbbe7ade07d7609ed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:04:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900080027bd7000fedbdf250a100006fd420004002d00000500140003000000"], 0x24}}, 0x8000) 00:04:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x74) 00:04:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="6cdebff95c111699725f405ad4e8d8ef60dba79978843ba4ed989094f7fd388c4c47006a3e7bf7d0524358d2a354c9359db834dc912814f9de60a58c785f44f9cb906325ec21e9773a83e873bf3ebff1a60bc64afcf353ca28caf52a50885066ace00b153f8017ae2ba5d2db6e295cc22a095003c086f79262defa3849f0935f3289c04b5fd7c115e2f6d68827013a8d0c030a953f536d13d9122820a2e4053de4aa65d38115d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, &(0x7f0000000d00)={0x20, 0x11, 0x86, {0x86, 0x9, "ce1b95bb24d9ca376f5228615c6f882a2d720ef9c88a9cd4eb88ab2fa5cf0cd2a3eba43ce64c875c0a19baccf67a4dff9ddc6e8a56c74e5b1915220565a8098161b0cf1874314a73d0c043a845e33e2a798a0bdb981169217c4f2322ea04db514b4df308f299194003d3b30b16de57d71be268b8e47d9be4db2caeb87594a13843e47438"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000dc0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xf00f, 0x5, [0x3f00, 0xc0]}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x5, 0x1, '\r,v}', "b5afaf5b"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x6, 0x26, 0x8, 0x1, 0x5}}}, &(0x7f0000001400)={0x84, &(0x7f0000000ec0)={0x20, 0x3156e9516d9d3206, 0x100, "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"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001180)={0x40, 0xb, 0x2, "5d1a"}, &(0x7f00000011c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001240)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001280)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "d1e3"}, &(0x7f0000001300)={0x40, 0x1a, 0x2}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x88}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0x19, 0x2, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x7, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3f, 0x5, 0x40}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x88, 0x3, 0x1f, 0xff, 0x9}, 0x17, &(0x7f0000000280)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0x1, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3, 0x20, 0x2, 0x5}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0x40, &(0x7f0000000380)=@string={0x40, 0x3, "1ee8c741b1b1cd14b05c290b6522919277e3a096dff13fcb08bf8f7a9f6c84e33d7c712fa374dc08f3b9c6a794d585f1830fa42c0d19a5995959dd21cef9"}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "90a9665b6a1e7293d8186fe3f6711f4fb45a2a0fcf6873b74a02dcbef27309f0c65caf70ad3877efa64173519cc9ae1697e29a0018045d20a6dea30042e61f6d3774b212abfb1776"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x425}}, {0x3b, &(0x7f0000000480)=@string={0x3b, 0x3, "b472fd235fc9bd4f83519a65931de11841d9a13844b3e000a06dbeda01642778354aedca691acad89403e3fc5337ae764e95ec31b4b60623f0"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x0, 0x22, 0x70, {0x70, 0x21, "46ead209aa67548ba3d2ed2237444e360b07742b988662283fd66bb6ea6be7f8322e1a49cfcd81fff4bbabea0e825e280b0ab1b9ec35b687709ae8fd0b2d57dc73d7f46008bb35f55947dfe04c4c8ff87dfd88dece19afe461e22269bedfd5f543959cbe70f8a0d2a24a70800183"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1434bbae2ea8967ce80f90f036790fcd"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x6, 0x9, "b83f55f9", "f45c73ea"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x3, 0x0, 0x0, 0x40, 0x1f}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x0, 0x6, 0x7c, "88c7a3d795a731c2014bd86e52d86ca0882fd2dc3447491a96e7f2e8bf2df9281cdefae92483b670841e083ad0d9635248a45fb7e20c55a8e560cee8256866659e4f14a19524a93b0dd169eda01773115942c01399fcbd72d993c324ff6709aaef32dc2e18181b75d842cbe824b43186e32fd51cdb80dcfc9487099a"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf00f]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xb80}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "6613"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "08f4"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x4}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="6cdebff95c111699725f405ad4e8d8ef60dba79978843ba4ed989094f7fd388c4c47006a3e7bf7d0524358d2a354c9359db834dc912814f9de60a58c785f44f9cb906325ec21e9773a83e873bf3ebff1a60bc64afcf353ca28caf52a50885066ace00b153f8017ae2ba5d2db6e295cc22a095003c086f79262defa3849f0935f3289c04b5fd7c115e2f6d68827013a8d0c030a953f536d13d9122820a2e4053de4aa65d38115d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, &(0x7f0000000d00)={0x20, 0x11, 0x86, {0x86, 0x9, "ce1b95bb24d9ca376f5228615c6f882a2d720ef9c88a9cd4eb88ab2fa5cf0cd2a3eba43ce64c875c0a19baccf67a4dff9ddc6e8a56c74e5b1915220565a8098161b0cf1874314a73d0c043a845e33e2a798a0bdb981169217c4f2322ea04db514b4df308f299194003d3b30b16de57d71be268b8e47d9be4db2caeb87594a13843e47438"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000dc0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xf00f, 0x5, [0x3f00, 0xc0]}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x5, 0x1, '\r,v}', "b5afaf5b"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x6, 0x26, 0x8, 0x1, 0x5}}}, &(0x7f0000001400)={0x84, &(0x7f0000000ec0)={0x20, 0x3156e9516d9d3206, 0x100, "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"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001180)={0x40, 0xb, 0x2, "5d1a"}, &(0x7f00000011c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001240)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001280)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "d1e3"}, &(0x7f0000001300)={0x40, 0x1a, 0x2}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x88}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0x1}}) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0x19, 0x2, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x7, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3f, 0x5, 0x40}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x88, 0x3, 0x1f, 0xff, 0x9}, 0x17, &(0x7f0000000280)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0x1, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x3, 0x20, 0x2, 0x5}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0x40, &(0x7f0000000380)=@string={0x40, 0x3, "1ee8c741b1b1cd14b05c290b6522919277e3a096dff13fcb08bf8f7a9f6c84e33d7c712fa374dc08f3b9c6a794d585f1830fa42c0d19a5995959dd21cef9"}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "90a9665b6a1e7293d8186fe3f6711f4fb45a2a0fcf6873b74a02dcbef27309f0c65caf70ad3877efa64173519cc9ae1697e29a0018045d20a6dea30042e61f6d3774b212abfb1776"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x425}}, {0x3b, &(0x7f0000000480)=@string={0x3b, 0x3, "b472fd235fc9bd4f83519a65931de11841d9a13844b3e000a06dbeda01642778354aedca691acad89403e3fc5337ae764e95ec31b4b60623f0"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44f}}]}) (async) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x0, 0x22, 0x70, {0x70, 0x21, "46ead209aa67548ba3d2ed2237444e360b07742b988662283fd66bb6ea6be7f8322e1a49cfcd81fff4bbabea0e825e280b0ab1b9ec35b687709ae8fd0b2d57dc73d7f46008bb35f55947dfe04c4c8ff87dfd88dece19afe461e22269bedfd5f543959cbe70f8a0d2a24a70800183"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1434bbae2ea8967ce80f90f036790fcd"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x6, 0x9, "b83f55f9", "f45c73ea"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x3, 0x0, 0x0, 0x40, 0x1f}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x0, 0x6, 0x7c, "88c7a3d795a731c2014bd86e52d86ca0882fd2dc3447491a96e7f2e8bf2df9281cdefae92483b670841e083ad0d9635248a45fb7e20c55a8e560cee8256866659e4f14a19524a93b0dd169eda01773115942c01399fcbd72d993c324ff6709aaef32dc2e18181b75d842cbe824b43186e32fd51cdb80dcfc9487099a"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0xe0, 0x0, [0xf00f]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xb80}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "6613"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "08f4"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x4}}) (async) [ 1578.762528][ T3656] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1578.762558][T28676] Bluetooth: hci7: command 0x1003 tx timeout 00:04:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x7a) 00:04:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900080027bd7000fedbdf250a100006fd420004002d00000500140003000000"], 0x24}}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900080027bd7000fedbdf250a100006fd420004002d00000500140003000000"], 0x24}}, 0x8000) (async) [ 1578.871382][T31079] Bluetooth: hci7: sending frame failed (-49) [ 1578.883095][ T3656] Bluetooth: hci7: Opcode 0x1003 failed: -49 00:04:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 00:04:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0xf0) 00:04:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41a640, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x448502, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6000}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @local, @random="7af541c29de6", @remote}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r2, 0x409, 0x600c1a97e7f28733) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3400000011009dbbe7ade07d7609ed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41a640, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x448502, 0x0) (async) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6000}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @local, @random="7af541c29de6", @remote}}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) fcntl$addseals(r2, 0x409, 0x600c1a97e7f28733) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3400000011009dbbe7ade07d7609ed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) (async) [ 1579.044858][T31079] Bluetooth: hci7: sending frame failed (-49) [ 1579.045736][ T3656] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1579.162508][ T5632] Bluetooth: hci6: command 0x1003 tx timeout [ 1579.162855][ T3650] Bluetooth: hci6: Opcode 0x1003 failed: -110 00:04:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x300) 00:04:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001050d7d1bed42ec45b2fc000000a40130871f5423d06d6e3a997b823c5a5cbf088a53e10e4f5893aab238bf3f730dbf019529009167b9a58906861a1d9d17bb1654fb2240822c8c58a6d610bcbad3b1b6fe31187d8102f139b349428e5ed340b165db05c897c5ec864ea58b9d9a4bef94795259a383e284faa85c535cf21a78632e0baacd9529dd3fb85ec2260fd1a675bfe1ab7f5e2f", @ANYRES32=r3], 0x34}}, 0x0) 00:04:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) 00:04:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41a640, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x448502, 0x0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6000}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @local, @random="7af541c29de6", @remote}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r2, 0x409, 0x600c1a97e7f28733) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3400000011009dbbe7ade07d7609ed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:04:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000680)=[{0x0, 0x8dffffff00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 00:04:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x500) [ 1579.262418][ T3695] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1579.676164][ T3695] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1579.676213][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.676246][ T3695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.676274][ T3695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1579.676319][ T3695] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1579.676348][ T3695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.693891][ T3695] usb 3-1: config 0 descriptor?? [ 1580.374264][ T3695] appleir 0003:05AC:8243.00E6: item fetching failed at offset 0/1 [ 1580.374699][ T3695] appleir 0003:05AC:8243.00E6: parse failed [ 1580.374747][ T3695] appleir: probe of 0003:05AC:8243.00E6 failed with error -22 00:04:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x9b, 0x4c, &(0x7f0000000700)="59d287ceb019abf700821c564a2f75c639d2b1e0dde2b76cf27490cef5422f0a6fed75d838469ed2d0d73674c1e9c1bc5dbb2caa77a8a99ce466b7437b9db627fb448b24c9e4fef1e222d194") syz_usb_connect$cdc_ecm(0x2, 0x6d, &(0x7f0000000000)={{0x12, 0x1, 0x240, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x7f, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, '(n'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x9, 0x2603, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x7f, 0x4, [0x7f, 0x9, 0xc8, 0x7ff, 0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xbb, 0x6, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5c, 0xf7, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x40, 0x80, 0xff, 0x3f}, 0x20, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x81, 0x6d, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4, 0x5652}]}, 0x9, [{0x6, &(0x7f0000000100)=@string={0x6, 0x3, "a4452f9b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x406}}, {0xb4, &(0x7f0000000380)=@string={0xb4, 0x3, "318674d2451de6f69ae3aaaf9b932a1fbc86fdb8bdc6f195d1fde71cde0f44ff657d07184052a7cb7f9442fd9cf376fff1cc82537dc53009d711b4c6bf321eba3bbf278a6b7573350c1f636ad50814bdb7bec88ec5576ce3e85d5159088621d6bf003f52b106709e14c0d1549d86d6ee86c1dc7a00267283bf5fa0fd1aff5b8e12ddcd9b45ddec57255ff2d941ba5703aa2c403ce5d62c75ea3180113d84dc86d0d89657ec5bd5b69ff687fc9e336de77447"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "1d73c89c3d54fb48d3431dd803663febb3146420b323335b690f9b792ef50f1e538ca99c7f1389b9c7a6ad6865527a4319067b1366d2a23a31683f2fe31714fa9d2084f559985a7264342f82c93b053645c3478590545ea8dc4c2df563b648ac124912d286bebd90c8dfec98df08b677d537b36d2f280d8a2fcf80de75f06248b4639eb9ea7b3d8935c3af7da855690e405622912c7709c47c878716714e578b9ad27ddd00295901f3fe3b2858feadc33b5b37bbd989cec370f336aa9a00f0f96e4ed77928849c9d1e34921f6270f0b17577bf892deee2ae8a4e6a69e2451a05da220036b29cb78d20597a"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x5c, &(0x7f0000000580)=@string={0x5c, 0x3, "2c6f5ef0289d6ff04adb87e505d3e02122a3c0bc7a1bc7503cff715032b66f7aa948044d279395b7f769575663685aedc55b50f3539b8f12f1eaffb85f263f1aa3bad59892f413f6021e82e5b24a194b748bb8507822fbdf803b"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3401}}]}) 00:04:40 executing program 0: r0 = socket$inet6_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x891c, 0x0) 00:04:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001050d7d1bed42ec45b2fc000000a40130871f5423d06d6e3a997b823c5a5cbf088a53e10e4f5893aab238bf3f730dbf019529009167b9a58906861a1d9d17bb1654fb2240822c8c58a6d610bcbad3b1b6fe31187d8102f139b349428e5ed340b165db05c897c5ec864ea58b9d9a4bef94795259a383e284faa85c535cf21a78632e0baacd9529dd3fb85ec2260fd1a675bfe1ab7f5e2f", @ANYRES32=r3], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001050d7d1bed42ec45b2fc000000a40130871f5423d06d6e3a997b823c5a5cbf088a53e10e4f5893aab238bf3f730dbf019529009167b9a58906861a1d9d17bb1654fb2240822c8c58a6d610bcbad3b1b6fe31187d8102f139b349428e5ed340b165db05c897c5ec864ea58b9d9a4bef94795259a383e284faa85c535cf21a78632e0baacd9529dd3fb85ec2260fd1a675bfe1ab7f5e2f", @ANYRES32=r3], 0x34}}, 0x0) (async) 00:04:40 executing program 5: socketpair(0x22, 0x0, 0x4, &(0x7f0000000880)) 00:04:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x600) 00:04:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYBLOB="5e4acd88a45082fd62ba780c7ccd3a1247d59deccb69c9e7f37460a4aa6b1172a8f6ff63881a435f065aa4268ff11743bf119a38aa33cff7a7ca5bea97532a15145aa9ca99386f6d37fb81377273a3724523cfb8c248f08cf12d29ff477b89c1a0a07145a78fbc6cb90d6bdc166fdaf4ad189358ee6d82d6f6b69509eea834b6cb775f4fbe95cf76e417a8f6fa0aaa9c445201ed4777766a96972edf612cdc8473e86baa42ec73fbb1f6d6ece93c8fca5201c346d3dc3ef0c08fa88b25b2ae590c13f677988e2f5917b22230b3afa2d26336381466871e1b74c546de1454e437a929de"], 0x34}}, 0x4011) [ 1580.779728][T31136] Error: Driver 'raw-gadget' is already registered, aborting... [ 1580.779738][T31136] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1580.779750][T31136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.780731][T31136] Error: Driver 'raw-gadget' is already registered, aborting... [ 1580.780744][T31136] UDC core: USB Raw Gadget: driver registration failed: -16 00:04:40 executing program 5: r0 = socket$inet6_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000980)={@ipv4={'\x00', '\xff\xff', @dev}, @loopback, @private2}) 00:04:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001050d7d1bed42ec45b2fc000000a40130871f5423d06d6e3a997b823c5a5cbf088a53e10e4f5893aab238bf3f730dbf019529009167b9a58906861a1d9d17bb1654fb2240822c8c58a6d610bcbad3b1b6fe31187d8102f139b349428e5ed340b165db05c897c5ec864ea58b9d9a4bef94795259a383e284faa85c535cf21a78632e0baacd9529dd3fb85ec2260fd1a675bfe1ab7f5e2f", @ANYRES32=r3], 0x34}}, 0x0) 00:04:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x700) [ 1580.780763][T31136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.792536][T18397] usb 3-1: USB disconnect, device number 35 00:04:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x900) 00:04:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYBLOB="5e4acd88a45082fd62ba780c7ccd3a1247d59deccb69c9e7f37460a4aa6b1172a8f6ff63881a435f065aa4268ff11743bf119a38aa33cff7a7ca5bea97532a15145aa9ca99386f6d37fb81377273a3724523cfb8c248f08cf12d29ff477b89c1a0a07145a78fbc6cb90d6bdc166fdaf4ad189358ee6d82d6f6b69509eea834b6cb775f4fbe95cf76e417a8f6fa0aaa9c445201ed4777766a96972edf612cdc8473e86baa42ec73fbb1f6d6ece93c8fca5201c346d3dc3ef0c08fa88b25b2ae590c13f677988e2f5917b22230b3afa2d26336381466871e1b74c546de1454e437a929de"], 0x34}}, 0x4011) 00:04:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900080027bd7000fedbdf250a100006fd420004002d00000500140003000000"], 0x24}}, 0x8000) [ 1581.352381][T18397] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1581.732408][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1581.732473][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.732507][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.732533][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1581.732578][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1581.732607][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.734854][T18397] usb 3-1: config 0 descriptor?? [ 1582.194299][T18397] appleir 0003:05AC:8243.00E7: unknown main item tag 0x0 [ 1582.194812][T18397] appleir 0003:05AC:8243.00E7: No inputs registered, leaving [ 1582.200189][T18397] appleir 0003:05AC:8243.00E7: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1582.716398][T31219] Error: Driver 'raw-gadget' is already registered, aborting... [ 1582.716408][T31219] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1582.716421][T31219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.717124][T31219] Error: Driver 'raw-gadget' is already registered, aborting... [ 1582.717132][T31219] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1582.717143][T31219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.652367][ T5632] usb 3-1: reset high-speed USB device number 36 using dummy_hcd 00:04:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) (rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_write(r2, 0x9b, 0x4c, &(0x7f0000000700)="59d287ceb019abf700821c564a2f75c639d2b1e0dde2b76cf27490cef5422f0a6fed75d838469ed2d0d73674c1e9c1bc5dbb2caa77a8a99ce466b7437b9db627fb448b24c9e4fef1e222d194") (rerun: 32) syz_usb_connect$cdc_ecm(0x2, 0x6d, &(0x7f0000000000)={{0x12, 0x1, 0x240, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x7f, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, '(n'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x9, 0x2603, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x7f, 0x4, [0x7f, 0x9, 0xc8, 0x7ff, 0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xbb, 0x6, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5c, 0xf7, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x40, 0x80, 0xff, 0x3f}, 0x20, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x81, 0x6d, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4, 0x5652}]}, 0x9, [{0x6, &(0x7f0000000100)=@string={0x6, 0x3, "a4452f9b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x406}}, {0xb4, &(0x7f0000000380)=@string={0xb4, 0x3, "318674d2451de6f69ae3aaaf9b932a1fbc86fdb8bdc6f195d1fde71cde0f44ff657d07184052a7cb7f9442fd9cf376fff1cc82537dc53009d711b4c6bf321eba3bbf278a6b7573350c1f636ad50814bdb7bec88ec5576ce3e85d5159088621d6bf003f52b106709e14c0d1549d86d6ee86c1dc7a00267283bf5fa0fd1aff5b8e12ddcd9b45ddec57255ff2d941ba5703aa2c403ce5d62c75ea3180113d84dc86d0d89657ec5bd5b69ff687fc9e336de77447"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "1d73c89c3d54fb48d3431dd803663febb3146420b323335b690f9b792ef50f1e538ca99c7f1389b9c7a6ad6865527a4319067b1366d2a23a31683f2fe31714fa9d2084f559985a7264342f82c93b053645c3478590545ea8dc4c2df563b648ac124912d286bebd90c8dfec98df08b677d537b36d2f280d8a2fcf80de75f06248b4639eb9ea7b3d8935c3af7da855690e405622912c7709c47c878716714e578b9ad27ddd00295901f3fe3b2858feadc33b5b37bbd989cec370f336aa9a00f0f96e4ed77928849c9d1e34921f6270f0b17577bf892deee2ae8a4e6a69e2451a05da220036b29cb78d20597a"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x5c, &(0x7f0000000580)=@string={0x5c, 0x3, "2c6f5ef0289d6ff04adb87e505d3e02122a3c0bc7a1bc7503cff715032b66f7aa948044d279395b7f769575663685aedc55b50f3539b8f12f1eaffb85f263f1aa3bad59892f413f6021e82e5b24a194b748bb8507822fbdf803b"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3401}}]}) 00:04:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001050d7d1bed42ec45b2fc000000a40130871f5423d06d6e3a997b823c5a5cbf088a53e10e4f5893aab238bf3f730dbf019529009167b9a58906861a1d9d17bb1654fb2240822c8c58a6d610bcbad3b1b6fe31187d8102f139b349428e5ed340b165db05c897c5ec864ea58b9d9a4bef94795259a383e284faa85c535cf21a78632e0baacd9529dd3fb85ec2260fd1a675bfe1ab7f5e2f", @ANYRES32=r3], 0x34}}, 0x0) 00:04:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x6ec5879808c833ed}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6], 0x34}}, 0x24018000) 00:04:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0xf00) 00:04:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYBLOB="5e4acd88a45082fd62ba780c7ccd3a1247d59deccb69c9e7f37460a4aa6b1172a8f6ff63881a435f065aa4268ff11743bf119a38aa33cff7a7ca5bea97532a15145aa9ca99386f6d37fb81377273a3724523cfb8c248f08cf12d29ff477b89c1a0a07145a78fbc6cb90d6bdc166fdaf4ad189358ee6d82d6f6b69509eea834b6cb775f4fbe95cf76e417a8f6fa0aaa9c445201ed4777766a96972edf612cdc8473e86baa42ec73fbb1f6d6ece93c8fca5201c346d3dc3ef0c08fa88b25b2ae590c13f677988e2f5917b22230b3afa2d26336381466871e1b74c546de1454e437a929de"], 0x34}}, 0x4011) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYBLOB="5e4acd88a45082fd62ba780c7ccd3a1247d59deccb69c9e7f37460a4aa6b1172a8f6ff63881a435f065aa4268ff11743bf119a38aa33cff7a7ca5bea97532a15145aa9ca99386f6d37fb81377273a3724523cfb8c248f08cf12d29ff477b89c1a0a07145a78fbc6cb90d6bdc166fdaf4ad189358ee6d82d6f6b69509eea834b6cb775f4fbe95cf76e417a8f6fa0aaa9c445201ed4777766a96972edf612cdc8473e86baa42ec73fbb1f6d6ece93c8fca5201c346d3dc3ef0c08fa88b25b2ae590c13f677988e2f5917b22230b3afa2d26336381466871e1b74c546de1454e437a929de"], 0x34}}, 0x4011) (async) 00:04:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0xffffffffff030000) 00:04:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x3f00) [ 1583.942502][T31226] __nla_validate_parse: 23 callbacks suppressed [ 1583.942529][T31226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1583.942561][T31226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1583.980092][T31225] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d9d1fde4e1bf4e2ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x4800) 00:04:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x2000}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000001007d1fc7091bed42ec45b2fc601acfc67477a413b08ad0627e6e3d40ae16dd754e5d325aae76454535b04c55cc4834c20ada6d360de95e8fcd9fb2e9b0abbac643ffc2ff8d648536b61ce3023faa2da484acb47f85bfb46740860946e351a282a90b5842e8bc830cfdecd401a09ec28b9082f4ffb32fd2dc5e7e93ae275571c5bdb3a388483dd4d77992c2d5ece250a3702b8f98a48c9dd35284bdb4311b9b288925a3da56eea33a818f603328793c5800"/195, @ANYRES32=r5], 0x34}}, 0x0) [ 1584.044968][T31239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.045013][T31239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 00:04:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x750c000000000000) [ 1584.134534][T31242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.134573][T31242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.206321][T31249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1584.206358][T31249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1584.216267][T31247] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1584.283434][ T5632] usb 3-1: device descriptor read/64, error -71 [ 1584.552379][ T5632] usb 3-1: reset high-speed USB device number 36 using dummy_hcd 00:04:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x9b, 0x4c, &(0x7f0000000700)="59d287ceb019abf700821c564a2f75c639d2b1e0dde2b76cf27490cef5422f0a6fed75d838469ed2d0d73674c1e9c1bc5dbb2caa77a8a99ce466b7437b9db627fb448b24c9e4fef1e222d194") (async) syz_usb_connect$cdc_ecm(0x2, 0x6d, &(0x7f0000000000)={{0x12, 0x1, 0x240, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x7f, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, '(n'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x9, 0x2603, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x7f, 0x4, [0x7f, 0x9, 0xc8, 0x7ff, 0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xbb, 0x6, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5c, 0xf7, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x40, 0x80, 0xff, 0x3f}, 0x20, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x81, 0x6d, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x4, 0x5652}]}, 0x9, [{0x6, &(0x7f0000000100)=@string={0x6, 0x3, "a4452f9b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x406}}, {0xb4, &(0x7f0000000380)=@string={0xb4, 0x3, "318674d2451de6f69ae3aaaf9b932a1fbc86fdb8bdc6f195d1fde71cde0f44ff657d07184052a7cb7f9442fd9cf376fff1cc82537dc53009d711b4c6bf321eba3bbf278a6b7573350c1f636ad50814bdb7bec88ec5576ce3e85d5159088621d6bf003f52b106709e14c0d1549d86d6ee86c1dc7a00267283bf5fa0fd1aff5b8e12ddcd9b45ddec57255ff2d941ba5703aa2c403ce5d62c75ea3180113d84dc86d0d89657ec5bd5b69ff687fc9e336de77447"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "1d73c89c3d54fb48d3431dd803663febb3146420b323335b690f9b792ef50f1e538ca99c7f1389b9c7a6ad6865527a4319067b1366d2a23a31683f2fe31714fa9d2084f559985a7264342f82c93b053645c3478590545ea8dc4c2df563b648ac124912d286bebd90c8dfec98df08b677d537b36d2f280d8a2fcf80de75f06248b4639eb9ea7b3d8935c3af7da855690e405622912c7709c47c878716714e578b9ad27ddd00295901f3fe3b2858feadc33b5b37bbd989cec370f336aa9a00f0f96e4ed77928849c9d1e34921f6270f0b17577bf892deee2ae8a4e6a69e2451a05da220036b29cb78d20597a"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x5c, &(0x7f0000000580)=@string={0x5c, 0x3, "2c6f5ef0289d6ff04adb87e505d3e02122a3c0bc7a1bc7503cff715032b66f7aa948044d279395b7f769575663685aedc55b50f3539b8f12f1eaffb85f263f1aa3bad59892f413f6021e82e5b24a194b748bb8507822fbdf803b"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3401}}]}) 00:04:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x4c00) 00:04:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x2000}) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000001007d1fc7091bed42ec45b2fc601acfc67477a413b08ad0627e6e3d40ae16dd754e5d325aae76454535b04c55cc4834c20ada6d360de95e8fcd9fb2e9b0abbac643ffc2ff8d648536b61ce3023faa2da484acb47f85bfb46740860946e351a282a90b5842e8bc830cfdecd401a09ec28b9082f4ffb32fd2dc5e7e93ae275571c5bdb3a388483dd4d77992c2d5ece250a3702b8f98a48c9dd35284bdb4311b9b288925a3da56eea33a818f603328793c5800"/195, @ANYRES32=r5], 0x34}}, 0x0) 00:04:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x7400}, 0x0) 00:04:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d9d1fde4e1bf4e2ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x7400000000000000) [ 1585.238197][T18397] usb 3-1: USB disconnect, device number 36 00:04:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x6800) 00:04:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x6c00000000000000) 00:04:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4c00000000000000) 00:04:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x6c00) 00:04:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x7400) 00:04:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x2000}) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000001007d1fc7091bed42ec45b2fc601acfc67477a413b08ad0627e6e3d40ae16dd754e5d325aae76454535b04c55cc4834c20ada6d360de95e8fcd9fb2e9b0abbac643ffc2ff8d648536b61ce3023faa2da484acb47f85bfb46740860946e351a282a90b5842e8bc830cfdecd401a09ec28b9082f4ffb32fd2dc5e7e93ae275571c5bdb3a388483dd4d77992c2d5ece250a3702b8f98a48c9dd35284bdb4311b9b288925a3da56eea33a818f603328793c5800"/195, @ANYRES32=r5], 0x34}}, 0x0) [ 1585.722532][T18397] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1586.092345][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1586.092375][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.092393][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.092408][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1586.092433][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1586.092448][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.093943][T18397] usb 3-1: config 0 descriptor?? 00:04:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xc1, {0xc1, 0x5, "2c8e644ba36039196ba735aa0069a307efc2e969fc3ac2bfa378301da3cac69106cf78ca8bd19b7b1d56b75ea6defa24f144c6fe8631d960cf2134a4888270e05a9d349357fd766c5afa8b5e3f5ca172142b634657b51bd643df4215ab532a0c53c2b539d1ac03db125efa4c96f7bc09ab9c9b1a9df4cadb08893c967c851253f1bce51db927cc84f5943abdc9af65f3e83cf898d3a4a070ef9179e1e846641e01f271ee75b4d4c3677990ff030d451c29bd11d068ac2142055d1ff841f54a"}}, &(0x7f0000000380)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "1853fe6715ed3141084ef0c8cfa400eb893e47cf79bb8e40f73d3309fc68ae78e4701186fe056cf2e61471312711528db1315efeac204a4b1f94cad90229c2408990b125f84ac64327a1118c09fdaed3a1799697dcef924da20abf517efccabff881aabd4a14cffc72cec6ccbf11b379fac57cb4e768acb1716c82bba05749321184c051ce80d45192584d7c40d859d31ed9f88d7b62df5e664b6c40d4feb75c3da5de06896f9e1593c4187198a808e75deb37f75b2867cdfcba17d4883670b2aa8cb93d33e3f8d54c6eec5d85b42aa5aad2316bcdd525ce6ef2b2234885cbe62a0cd9fcb97760ea8d8f6200252ef6188aee"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "2eca6f7a"}, @main=@item_4={0x3, 0x0, 0xa, "9f3ffadb"}, @local=@item_4={0x3, 0x2, 0x4, "00f122f9"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2e4c, 0x2b, 0x1, {0x22, 0x496}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0xdd, "9af21b5c674cf5c2c73d66be69e106bb2747d8213dd6ea0d0ba0026e2bce42bc046612b40a91b309df215fc0bed87f021bfd370829a18e4353282d210f66ce0636281266fc0ba1cdb0dc5c28d66abfd07b8bc62671389f4251bf7a0aa424fc3458f36434b10ce0c80a525c02bd67b3970065817fb98d41df5a551e40107393b8f867554e12860dabf6de08184f34f7e383ed895e68878157bc4f47fbba4882a2213e8c665933652b0f64c74fabcc239b46e21ddcfb8d0b3eb89bb6c3da68c8c48ecaf86f6f2814d0558efd8f3848686344e493d12d9bcac90b8591fcdf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc5, "d729a49f822e55b482f7f6916d606f3142eb079486eb7e527049dc0113ceb07371ddf8787b608eea0d3f2127d974f95aba8e5cc6537ede39fdd470a76f17588103d4dfce424b89f13ce81dc76e37bdef13a2fc3c751b88a3b4854f3e739c18ff6534d532b0482a35978ade85ea17f45082a08311ecb5604053ddc978b977c675caefd054c7ffafeb875bd158cc7d603541bdb0954eb5ff10a6271530f48a6e5934ad4ebdfac3f87a2eb17f606281457ba3d4bc0933b919d9a5388f1f548d675c9baebaef45"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x3f}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)={0x22e, 0x77a, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:04:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d9d1fde4e1bf4e2ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:04:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x7a00) 00:04:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x4000000000000000) 00:04:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = dup3(r2, r2, 0x0) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x2}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000dd688388bc2584cd000045f03e04b1110001e90de1ea3be51bed42ec45b2fc00", @ANYRES32=r3], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) syncfs(r0) 00:04:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0xf000) 00:04:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) r4 = dup3(r2, r2, 0x0) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x2}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000dd688388bc2584cd000045f03e04b1110001e90de1ea3be51bed42ec45b2fc00", @ANYRES32=r3], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) syncfs(r0) 00:04:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x30000) [ 1586.442526][T18397] usbhid 3-1:0.0: can't add hid device: -71 [ 1586.442611][T18397] usbhid: probe of 3-1:0.0 failed with error -71 [ 1586.449803][T18397] usb 3-1: USB disconnect, device number 37 00:04:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffc, 0x1, 0xbe, 0x80000001, 0xb], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x9402}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed46ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) socket$packet(0x11, 0x0, 0x300) 00:04:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x34000) [ 1586.822355][T18397] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1587.183293][T18397] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1587.183323][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.183342][T18397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.183356][T18397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1587.183382][T18397] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1587.183397][T18397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.184939][T18397] usb 3-1: config 0 descriptor?? [ 1587.644304][T18397] appleir 0003:05AC:8243.00E8: unknown main item tag 0x0 [ 1587.644824][T18397] appleir 0003:05AC:8243.00E8: No inputs registered, leaving [ 1587.649327][T18397] appleir 0003:05AC:8243.00E8: hiddev0,hidraw0: USB HID v0.0e Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 1589.122373][ T5633] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 1589.312286][ T5633] usb 3-1: device descriptor read/64, error 64 [ 1589.582356][ T5633] usb 3-1: reset high-speed USB device number 38 using dummy_hcd 00:04:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xc1, {0xc1, 0x5, "2c8e644ba36039196ba735aa0069a307efc2e969fc3ac2bfa378301da3cac69106cf78ca8bd19b7b1d56b75ea6defa24f144c6fe8631d960cf2134a4888270e05a9d349357fd766c5afa8b5e3f5ca172142b634657b51bd643df4215ab532a0c53c2b539d1ac03db125efa4c96f7bc09ab9c9b1a9df4cadb08893c967c851253f1bce51db927cc84f5943abdc9af65f3e83cf898d3a4a070ef9179e1e846641e01f271ee75b4d4c3677990ff030d451c29bd11d068ac2142055d1ff841f54a"}}, &(0x7f0000000380)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "1853fe6715ed3141084ef0c8cfa400eb893e47cf79bb8e40f73d3309fc68ae78e4701186fe056cf2e61471312711528db1315efeac204a4b1f94cad90229c2408990b125f84ac64327a1118c09fdaed3a1799697dcef924da20abf517efccabff881aabd4a14cffc72cec6ccbf11b379fac57cb4e768acb1716c82bba05749321184c051ce80d45192584d7c40d859d31ed9f88d7b62df5e664b6c40d4feb75c3da5de06896f9e1593c4187198a808e75deb37f75b2867cdfcba17d4883670b2aa8cb93d33e3f8d54c6eec5d85b42aa5aad2316bcdd525ce6ef2b2234885cbe62a0cd9fcb97760ea8d8f6200252ef6188aee"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "2eca6f7a"}, @main=@item_4={0x3, 0x0, 0xa, "9f3ffadb"}, @local=@item_4={0x3, 0x2, 0x4, "00f122f9"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2e4c, 0x2b, 0x1, {0x22, 0x496}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0xdd, "9af21b5c674cf5c2c73d66be69e106bb2747d8213dd6ea0d0ba0026e2bce42bc046612b40a91b309df215fc0bed87f021bfd370829a18e4353282d210f66ce0636281266fc0ba1cdb0dc5c28d66abfd07b8bc62671389f4251bf7a0aa424fc3458f36434b10ce0c80a525c02bd67b3970065817fb98d41df5a551e40107393b8f867554e12860dabf6de08184f34f7e383ed895e68878157bc4f47fbba4882a2213e8c665933652b0f64c74fabcc239b46e21ddcfb8d0b3eb89bb6c3da68c8c48ecaf86f6f2814d0558efd8f3848686344e493d12d9bcac90b8591fcdf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc5, "d729a49f822e55b482f7f6916d606f3142eb079486eb7e527049dc0113ceb07371ddf8787b608eea0d3f2127d974f95aba8e5cc6537ede39fdd470a76f17588103d4dfce424b89f13ce81dc76e37bdef13a2fc3c751b88a3b4854f3e739c18ff6534d532b0482a35978ade85ea17f45082a08311ecb5604053ddc978b977c675caefd054c7ffafeb875bd158cc7d603541bdb0954eb5ff10a6271530f48a6e5934ad4ebdfac3f87a2eb17f606281457ba3d4bc0933b919d9a5388f1f548d675c9baebaef45"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x3f}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 00:04:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x400300) 00:04:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) r4 = dup3(r2, r2, 0x0) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x2}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000dd688388bc2584cd000045f03e04b1110001e90de1ea3be51bed42ec45b2fc00", @ANYRES32=r3], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) syncfs(r0) 00:04:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffc, 0x1, 0xbe, 0x80000001, 0xb], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x9402}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed46ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) socket$packet(0x11, 0x0, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffc, 0x1, 0xbe, 0x80000001, 0xb], 0x5, 0x80000}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x9402}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed46ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) 00:04:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xc1, {0xc1, 0x5, "2c8e644ba36039196ba735aa0069a307efc2e969fc3ac2bfa378301da3cac69106cf78ca8bd19b7b1d56b75ea6defa24f144c6fe8631d960cf2134a4888270e05a9d349357fd766c5afa8b5e3f5ca172142b634657b51bd643df4215ab532a0c53c2b539d1ac03db125efa4c96f7bc09ab9c9b1a9df4cadb08893c967c851253f1bce51db927cc84f5943abdc9af65f3e83cf898d3a4a070ef9179e1e846641e01f271ee75b4d4c3677990ff030d451c29bd11d068ac2142055d1ff841f54a"}}, &(0x7f0000000380)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "1853fe6715ed3141084ef0c8cfa400eb893e47cf79bb8e40f73d3309fc68ae78e4701186fe056cf2e61471312711528db1315efeac204a4b1f94cad90229c2408990b125f84ac64327a1118c09fdaed3a1799697dcef924da20abf517efccabff881aabd4a14cffc72cec6ccbf11b379fac57cb4e768acb1716c82bba05749321184c051ce80d45192584d7c40d859d31ed9f88d7b62df5e664b6c40d4feb75c3da5de06896f9e1593c4187198a808e75deb37f75b2867cdfcba17d4883670b2aa8cb93d33e3f8d54c6eec5d85b42aa5aad2316bcdd525ce6ef2b2234885cbe62a0cd9fcb97760ea8d8f6200252ef6188aee"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "2eca6f7a"}, @main=@item_4={0x3, 0x0, 0xa, "9f3ffadb"}, @local=@item_4={0x3, 0x2, 0x4, "00f122f9"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2e4c, 0x2b, 0x1, {0x22, 0x496}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0xdd, "9af21b5c674cf5c2c73d66be69e106bb2747d8213dd6ea0d0ba0026e2bce42bc046612b40a91b309df215fc0bed87f021bfd370829a18e4353282d210f66ce0636281266fc0ba1cdb0dc5c28d66abfd07b8bc62671389f4251bf7a0aa424fc3458f36434b10ce0c80a525c02bd67b3970065817fb98d41df5a551e40107393b8f867554e12860dabf6de08184f34f7e383ed895e68878157bc4f47fbba4882a2213e8c665933652b0f64c74fabcc239b46e21ddcfb8d0b3eb89bb6c3da68c8c48ecaf86f6f2814d0558efd8f3848686344e493d12d9bcac90b8591fcdf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc5, "d729a49f822e55b482f7f6916d606f3142eb079486eb7e527049dc0113ceb07371ddf8787b608eea0d3f2127d974f95aba8e5cc6537ede39fdd470a76f17588103d4dfce424b89f13ce81dc76e37bdef13a2fc3c751b88a3b4854f3e739c18ff6534d532b0482a35978ade85ea17f45082a08311ecb5604053ddc978b977c675caefd054c7ffafeb875bd158cc7d603541bdb0954eb5ff10a6271530f48a6e5934ad4ebdfac3f87a2eb17f606281457ba3d4bc0933b919d9a5388f1f548d675c9baebaef45"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x3f}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0xf0ffff) [ 1590.429406][T31330] __nla_validate_parse: 26 callbacks suppressed [ 1590.429426][T31330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffffc, 0x1, 0xbe, 0x80000001, 0xb], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x9402}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed46ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) (async, rerun: 32) socket$packet(0x11, 0x0, 0x300) [ 1590.429457][T31330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) [ 1590.490017][T31339] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1590.575496][T31350] Error: Driver 'raw-gadget' is already registered, aborting... [ 1590.575513][T31350] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1590.575534][T31350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.646904][T31355] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1590.668639][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1590.668797][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1590.668947][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1590.669090][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1590.669235][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1590.669378][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1590.763380][ T5633] usb 3-1: device descriptor read/64, error -71 [ 1591.032370][ T5633] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 1592.752383][ T5633] usb 3-1: reset high-speed USB device number 38 using dummy_hcd 00:04:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xc1, {0xc1, 0x5, "2c8e644ba36039196ba735aa0069a307efc2e969fc3ac2bfa378301da3cac69106cf78ca8bd19b7b1d56b75ea6defa24f144c6fe8631d960cf2134a4888270e05a9d349357fd766c5afa8b5e3f5ca172142b634657b51bd643df4215ab532a0c53c2b539d1ac03db125efa4c96f7bc09ab9c9b1a9df4cadb08893c967c851253f1bce51db927cc84f5943abdc9af65f3e83cf898d3a4a070ef9179e1e846641e01f271ee75b4d4c3677990ff030d451c29bd11d068ac2142055d1ff841f54a"}}, &(0x7f0000000380)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "1853fe6715ed3141084ef0c8cfa400eb893e47cf79bb8e40f73d3309fc68ae78e4701186fe056cf2e61471312711528db1315efeac204a4b1f94cad90229c2408990b125f84ac64327a1118c09fdaed3a1799697dcef924da20abf517efccabff881aabd4a14cffc72cec6ccbf11b379fac57cb4e768acb1716c82bba05749321184c051ce80d45192584d7c40d859d31ed9f88d7b62df5e664b6c40d4feb75c3da5de06896f9e1593c4187198a808e75deb37f75b2867cdfcba17d4883670b2aa8cb93d33e3f8d54c6eec5d85b42aa5aad2316bcdd525ce6ef2b2234885cbe62a0cd9fcb97760ea8d8f6200252ef6188aee"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "2eca6f7a"}, @main=@item_4={0x3, 0x0, 0xa, "9f3ffadb"}, @local=@item_4={0x3, 0x2, 0x4, "00f122f9"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2e4c, 0x2b, 0x1, {0x22, 0x496}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0xdd, "9af21b5c674cf5c2c73d66be69e106bb2747d8213dd6ea0d0ba0026e2bce42bc046612b40a91b309df215fc0bed87f021bfd370829a18e4353282d210f66ce0636281266fc0ba1cdb0dc5c28d66abfd07b8bc62671389f4251bf7a0aa424fc3458f36434b10ce0c80a525c02bd67b3970065817fb98d41df5a551e40107393b8f867554e12860dabf6de08184f34f7e383ed895e68878157bc4f47fbba4882a2213e8c665933652b0f64c74fabcc239b46e21ddcfb8d0b3eb89bb6c3da68c8c48ecaf86f6f2814d0558efd8f3848686344e493d12d9bcac90b8591fcdf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc5, "d729a49f822e55b482f7f6916d606f3142eb079486eb7e527049dc0113ceb07371ddf8787b608eea0d3f2127d974f95aba8e5cc6537ede39fdd470a76f17588103d4dfce424b89f13ce81dc76e37bdef13a2fc3c751b88a3b4854f3e739c18ff6534d532b0482a35978ade85ea17f45082a08311ecb5604053ddc978b977c675caefd054c7ffafeb875bd158cc7d603541bdb0954eb5ff10a6271530f48a6e5934ad4ebdfac3f87a2eb17f606281457ba3d4bc0933b919d9a5388f1f548d675c9baebaef45"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x3f}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xc1, {0xc1, 0x5, "2c8e644ba36039196ba735aa0069a307efc2e969fc3ac2bfa378301da3cac69106cf78ca8bd19b7b1d56b75ea6defa24f144c6fe8631d960cf2134a4888270e05a9d349357fd766c5afa8b5e3f5ca172142b634657b51bd643df4215ab532a0c53c2b539d1ac03db125efa4c96f7bc09ab9c9b1a9df4cadb08893c967c851253f1bce51db927cc84f5943abdc9af65f3e83cf898d3a4a070ef9179e1e846641e01f271ee75b4d4c3677990ff030d451c29bd11d068ac2142055d1ff841f54a"}}, &(0x7f0000000380)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "1853fe6715ed3141084ef0c8cfa400eb893e47cf79bb8e40f73d3309fc68ae78e4701186fe056cf2e61471312711528db1315efeac204a4b1f94cad90229c2408990b125f84ac64327a1118c09fdaed3a1799697dcef924da20abf517efccabff881aabd4a14cffc72cec6ccbf11b379fac57cb4e768acb1716c82bba05749321184c051ce80d45192584d7c40d859d31ed9f88d7b62df5e664b6c40d4feb75c3da5de06896f9e1593c4187198a808e75deb37f75b2867cdfcba17d4883670b2aa8cb93d33e3f8d54c6eec5d85b42aa5aad2316bcdd525ce6ef2b2234885cbe62a0cd9fcb97760ea8d8f6200252ef6188aee"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "2eca6f7a"}, @main=@item_4={0x3, 0x0, 0xa, "9f3ffadb"}, @local=@item_4={0x3, 0x2, 0x4, "00f122f9"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2e4c, 0x2b, 0x1, {0x22, 0x496}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0xdd, "9af21b5c674cf5c2c73d66be69e106bb2747d8213dd6ea0d0ba0026e2bce42bc046612b40a91b309df215fc0bed87f021bfd370829a18e4353282d210f66ce0636281266fc0ba1cdb0dc5c28d66abfd07b8bc62671389f4251bf7a0aa424fc3458f36434b10ce0c80a525c02bd67b3970065817fb98d41df5a551e40107393b8f867554e12860dabf6de08184f34f7e383ed895e68878157bc4f47fbba4882a2213e8c665933652b0f64c74fabcc239b46e21ddcfb8d0b3eb89bb6c3da68c8c48ecaf86f6f2814d0558efd8f3848686344e493d12d9bcac90b8591fcdf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc5, "d729a49f822e55b482f7f6916d606f3142eb079486eb7e527049dc0113ceb07371ddf8787b608eea0d3f2127d974f95aba8e5cc6537ede39fdd470a76f17588103d4dfce424b89f13ce81dc76e37bdef13a2fc3c751b88a3b4854f3e739c18ff6534d532b0482a35978ade85ea17f45082a08311ecb5604053ddc978b977c675caefd054c7ffafeb875bd158cc7d603541bdb0954eb5ff10a6271530f48a6e5934ad4ebdfac3f87a2eb17f606281457ba3d4bc0933b919d9a5388f1f548d675c9baebaef45"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x3f}}) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:04:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x1000000) 00:04:52 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x1}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x0, 0x30, 0x61, 0x2e, 0x61]}}, &(0x7f00000001c0)=""/1, 0x4f, 0x1}, 0x20) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={{r2}, 0x43, 0x3, 0x88c}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x9, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@deltclass={0x5c, 0x29, 0x21, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x8, 0xb}, {0x9, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x18, 0x800}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8054}, 0x8004) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x1, 0x8, 0x80, 0x1}, {0x81, 0x20, 0x1, 0x400}, {0x1, 0x3, 0x1, 0xbd53}, {0x5, 0x40, 0x6, 0x800}, {0x0, 0xff, 0x0, 0x6}, {0x43f0, 0x4, 0xff, 0x4}, {0x0, 0x7, 0x80}]}) socket$packet(0x11, 0x2, 0x300) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'pim6reg\x00', 0x0}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x7) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r7], 0x34}}, 0x0) 00:04:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x400}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) 00:04:52 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x2000000) 00:04:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xc1, {0xc1, 0x5, "2c8e644ba36039196ba735aa0069a307efc2e969fc3ac2bfa378301da3cac69106cf78ca8bd19b7b1d56b75ea6defa24f144c6fe8631d960cf2134a4888270e05a9d349357fd766c5afa8b5e3f5ca172142b634657b51bd643df4215ab532a0c53c2b539d1ac03db125efa4c96f7bc09ab9c9b1a9df4cadb08893c967c851253f1bce51db927cc84f5943abdc9af65f3e83cf898d3a4a070ef9179e1e846641e01f271ee75b4d4c3677990ff030d451c29bd11d068ac2142055d1ff841f54a"}}, &(0x7f0000000380)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "1853fe6715ed3141084ef0c8cfa400eb893e47cf79bb8e40f73d3309fc68ae78e4701186fe056cf2e61471312711528db1315efeac204a4b1f94cad90229c2408990b125f84ac64327a1118c09fdaed3a1799697dcef924da20abf517efccabff881aabd4a14cffc72cec6ccbf11b379fac57cb4e768acb1716c82bba05749321184c051ce80d45192584d7c40d859d31ed9f88d7b62df5e664b6c40d4feb75c3da5de06896f9e1593c4187198a808e75deb37f75b2867cdfcba17d4883670b2aa8cb93d33e3f8d54c6eec5d85b42aa5aad2316bcdd525ce6ef2b2234885cbe62a0cd9fcb97760ea8d8f6200252ef6188aee"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "2eca6f7a"}, @main=@item_4={0x3, 0x0, 0xa, "9f3ffadb"}, @local=@item_4={0x3, 0x2, 0x4, "00f122f9"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2e4c, 0x2b, 0x1, {0x22, 0x496}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0xdd, "9af21b5c674cf5c2c73d66be69e106bb2747d8213dd6ea0d0ba0026e2bce42bc046612b40a91b309df215fc0bed87f021bfd370829a18e4353282d210f66ce0636281266fc0ba1cdb0dc5c28d66abfd07b8bc62671389f4251bf7a0aa424fc3458f36434b10ce0c80a525c02bd67b3970065817fb98d41df5a551e40107393b8f867554e12860dabf6de08184f34f7e383ed895e68878157bc4f47fbba4882a2213e8c665933652b0f64c74fabcc239b46e21ddcfb8d0b3eb89bb6c3da68c8c48ecaf86f6f2814d0558efd8f3848686344e493d12d9bcac90b8591fcdf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc5, "d729a49f822e55b482f7f6916d606f3142eb079486eb7e527049dc0113ceb07371ddf8787b608eea0d3f2127d974f95aba8e5cc6537ede39fdd470a76f17588103d4dfce424b89f13ce81dc76e37bdef13a2fc3c751b88a3b4854f3e739c18ff6534d532b0482a35978ade85ea17f45082a08311ecb5604053ddc978b977c675caefd054c7ffafeb875bd158cc7d603541bdb0954eb5ff10a6271530f48a6e5934ad4ebdfac3f87a2eb17f606281457ba3d4bc0933b919d9a5388f1f548d675c9baebaef45"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x3f}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:53 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x3000000) [ 1593.609380][T31381] Error: Driver 'raw-gadget' is already registered, aborting... [ 1593.609395][T31381] UDC core: USB Raw Gadget: driver registration failed: -16 00:04:53 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x4000000) [ 1593.609416][T31381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:53 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x1}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x0, 0x30, 0x61, 0x2e, 0x61]}}, &(0x7f00000001c0)=""/1, 0x4f, 0x1}, 0x20) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={{r2}, 0x43, 0x3, 0x88c}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x9, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@deltclass={0x5c, 0x29, 0x21, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x8, 0xb}, {0x9, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x18, 0x800}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8054}, 0x8004) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x1, 0x8, 0x80, 0x1}, {0x81, 0x20, 0x1, 0x400}, {0x1, 0x3, 0x1, 0xbd53}, {0x5, 0x40, 0x6, 0x800}, {0x0, 0xff, 0x0, 0x6}, {0x43f0, 0x4, 0xff, 0x4}, {0x0, 0x7, 0x80}]}) socket$packet(0x11, 0x2, 0x300) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'pim6reg\x00', 0x0}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x7) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r7], 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x1}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x0, 0x30, 0x61, 0x2e, 0x61]}}, &(0x7f00000001c0)=""/1, 0x4f, 0x1}, 0x20) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={{r2}, 0x43, 0x3, 0x88c}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x9, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@deltclass={0x5c, 0x29, 0x21, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x8, 0xb}, {0x9, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x18, 0x800}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8054}, 0x8004) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x1, 0x8, 0x80, 0x1}, {0x81, 0x20, 0x1, 0x400}, {0x1, 0x3, 0x1, 0xbd53}, {0x5, 0x40, 0x6, 0x800}, {0x0, 0xff, 0x0, 0x6}, {0x43f0, 0x4, 0xff, 0x4}, {0x0, 0x7, 0x80}]}) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'pim6reg\x00'}) (async) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x7) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r7], 0x34}}, 0x0) (async) [ 1593.832521][ T5633] usb 3-1: device descriptor read/64, error -71 [ 1594.102303][ T5633] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 1595.092373][ T5633] usb 3-1: reset high-speed USB device number 38 using dummy_hcd 00:04:54 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x400}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r4], 0x34}}, 0x0) (async) 00:04:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x5000000) 00:04:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x99b, &(0x7f0000001240)={{0x12, 0x1, 0x250, 0xb2, 0xfe, 0x57, 0x20, 0xbb4, 0xa9e, 0x3c9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x989, 0x3, 0x1b, 0xb1, 0x0, 0x9, [{{0x9, 0x4, 0xca, 0x4, 0x3, 0x34, 0x5, 0x7e, 0xd9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x174, 0x7ff, 0xea91, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xa7, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x7f, 0x2, [0x5, 0x7fff]}]}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1, 0x9, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa7, 0x4}]}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x3, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x40}, @generic={0xac, 0x31, "2cb789bc901ad6a2498e9029c5b03b09fa3ffe5a441628619207c1cedc0dd20a431f05a98d206e6024ff8969f26539d597c4f7c30d9db49a67f6d697faabcb93a36355336f8937033270c45402cce28dab487fc704220cadf018d02e6343b392c74ec1ac3c810486eb1a5ca0bf431879bf3317e72e22533042208c44800a3cf079ef1dcf2f232bed8485ca8809c3bfecf502d2b00e76445533ebfc26c40cb43993dd2b06263fcfec2aa2"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x5, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffb}]}}]}}, {{0x9, 0x4, 0x48, 0x6, 0x10, 0x9f, 0x97, 0xc0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x6, 0x0, 0x5, 0x4, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x5, 0x80, "0318885c7b49"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x6, 0x7f, "fdb665c4dc"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x4, 0x4, 0x44}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x1, 0x0, 0x401, 0x2, 0x3}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x40, "e1f8c6"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "1d7af07ebd55"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2000000, 0x2, 0x1, 0x1d}, {0x6, 0x24, 0x1a, 0x3}, [@mdlm_detail={0x5, 0x24, 0x13, 0x40, "c3"}]}], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0xe2, 0x0, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x45, 0xf7, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff}]}}, {{0x9, 0x5, 0xd, 0xb1f5eaad23a578bd, 0x8, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x1e, 0x1, [@generic={0xea, 0x2, "20a12762d6c2a30bd3b7cf10d3f2c81ed0cbaad53f21b6b8c31ef5748e825d8e70cbb58c632ab2d7d106910474070542c86e64b2bc48ae55b2977a73eefc840075d4cd181e69af47a1d7f01176c37284e1eb91ad2050e489f862e3c447a96b7ef57fdfe9a61a85ba2d8e0435ab9aa791dab8b538bd019f60e23a4a584cdf9e1f8f411ede7103f8b3dfb411123b568bd22b9143403c5585f95ed7ddbaf81a0b6213eabcee32d0ec73cc930dc02e800b1135092957c45bf306d0ddd150577cb0594e5d29dc1319b6232ce62ae892a6287d06b66c75c5c956aa509069126c5064df88a38c9cea48550a"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x7f, 0x1, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1f, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0x7, 0x1, [@generic={0x48, 0x22, "a96be3ab415de20f5eeb5ca5420d44c38168c24d501333f2c6b2c24509e3df547e6cdf574d11737395ed07c9cedd1506dcd0203ec79e0a4153e01fba0c8df60c69fda3485151"}, @generic={0x1c, 0x8, "fd574c51b63773e43fb75fa6874cb457af85910cf06dfbf2d314"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x9, 0x0, 0xb5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xac82}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x4, 0x5, [@generic={0xe9, 0x22, "3fc492b59de5f849f39274844864f2415e4c2a6afcfba385d0da46acc3470b51c3b2bff0933d62f7a9f11b24ee5f20cdff2a21fd351f0da08f2692e60d96a0f6e69eb99a62739706eb952c9470e3303042272b663f357d8437c1c21e494ee0fb92923bb4156ee4ff9d9bf2e3fbc2a7fd4af3fb62b4db823f292151317ba6ae1b97e14427440a6779a6069d676862408d87dceba0cd51c787cd1c77e6229b8dd5475dc779a9f7c62b480cc7d7303d4f116855549ad979e852f3224432034057ad5703d93355548afb10b36574052a61ff1c58a5e9bb114b6fb77f658422ca58f7736abc104aa4ba"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x1, 0x81, 0x0, [@generic={0xf0, 0x23, "dfd192790259f245a00f036d979cbad51e0f5572c5068445dc647af975688384bb503d0fe28bda239f45f96720b010036badb0cc8fd870758e2b662010ef74741f54009afb8f2c3fd86ffef4dc5682777977e29f6cfca1d3d2284cf9021c048be52829cc798718d3aeeb133ffe900221aca1c5a8484d62fb36160517abeaf96b872dfdaf61257229c2baf4665f0e3d09aa178dddea8cdd0a52d1bb1092ce7e48aca2ab4ded7e40faec120f1847337d7741a0d25f96dedc2f6e7202fc36cbfdc0a1f73b6e114fc835f2b9702022a4482aa130f4895b1978ace996287153000e844d771cf24f8c3538bb0cd14e4a6c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3b7, 0x4, 0x2c, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3ff}, @generic={0xd7, 0x21, "fad78f58626e3c9fde1b50a320cb6a72eb9bb60a469f0842670cb5449716edbdf8c1876cc6024726891b47366d08aeaab9bc81b335e42fbbbb0e145caf34e38e8fa6fa3648ee1224d1c7627a3498e635480b08d562f1a179bebf8672dc8828cfee4e93620edcc17aaa617d2d8c17a0922b67b8be34df14c29f86ab39d83de47997d7d44289bea7e9606e4803f5df6c3f1c1555fdf56a0210a44b28bab5a326408419d47883bb56631e26f1054542af7a6abf4c28fca170e6519ac3a02379cfa0329477242dc2320a10691f16034654af7a1c876076"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x0, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0xbdd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x20, 0x9b, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x5, 0x7, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x800}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x9, 0x1, 0x7f, [@generic={0xc, 0x7, "030305ca73df84853c9b"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x81, 0x2, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x22, 0x4, 0x1, [@generic={0x12, 0xe, "3a6a1bc72ee90197f49c9f7cb28e9b49"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x8a, 0x3}]}}]}}, {{0x9, 0x4, 0xe2, 0x4, 0x8, 0xa9, 0xe1, 0x16, 0xdb, [@generic={0x12, 0x9, "fb14f0269f04a449494f2979625c404d"}, @generic={0xd6, 0x30, "5b5146843426d026a6e5f7095c3a54bc7fa70d98c639f1c3ea0a9bff634ea40bfef3dc9c7ef2bbcf78c2de296bcac8c28ad3366e3fa7fbf779d751430f9d513a02e6dea6adac326caea4059a6f629cc6a5a23842087cae6483f8fff62417680345390c73713bb837335dd29763783f14e7781a6c9614e2424a4ecd10d10b985dbfe8321306cf0f3f70e58f555b5db2fd4ce13853e6a05a10031542c3de4b9bca36ff0444b59b65c3c3858ea84a346dff92eb5bab33a10406bf92b5d5f0f9f96754da2a535ea3290b23ebe871abddc0d7c3314be5"}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x40}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x36, 0x3}, @generic={0x9c, 0x5, "2fa0572384185b27aa1cf7fed3dd84bf8996faf4d07120cd58d7e1b21bce42983ae711c30fc89dd2cca21282f66a59d70e3b214baaaf1f81927aada4e07495a7aafd894273329e1d6627e40ed07e08dd0368a59d96c62a3f5ff47736190005a9d973f56587b3f84168832c2104d36ef227b2273a57eaa62484e299c8007ad716a2ca5b7d5d662388bd1d048e508747a28f41da862e07a250def0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x8, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7150}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x7, 0x2a, 0x3f, [@generic={0x9c, 0x31, "7a184dfaafd38b4b50b600a3c5370c0483e4484bf2daedf06d7d3305a1320d25bb563b9a4296037726ce0eb30f5d5011bee943da015584df289dea816c46eae0ef43b8c3ab6fbd4a26d97f1cd3e7859c73098c2e7911f28580939a869907342f0116e0455150d9994093b03ad6e54592bda417b13786d46b3b088fb819a311b91fa6e56d1e9b84a19a139460f530b7064f291d83d9bee0697d1d"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x4, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0x17dfa0b83560d6, 0xee, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0x9caf5cb779ad0215, 0x0, 0x200, 0x93, 0x1f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x37, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xfb, 0x5, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x100}, @generic={0x44, 0x11, "34f2aa1e1f9056ab32d744242d5d58ca29ab2ea756655f167bf9635354160476efa17b296bae8ceb48f8f01405dd79a84fb6aba0dfd687e2a3ca27ba337510271ad9"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0x4, 0x4, 0x40, 0x1}, 0x32, &(0x7f0000000080)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x6, 0xf000, 0x0, [0xc7, 0xff0f, 0x3f, 0x3f3f, 0xff3f3f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x6, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0xd3, &(0x7f0000000380)=@string={0xd3, 0x3, "dbc11d7bbc8f14bc625ce5d011421b3481f8331a9eac1033fe9630af10b5d624b744dae69246756d489b542b677d39087fb8144ea3f17c4ee8327db4eef75ce766095bf244aef467ae5f2cb6f8c5239e303d53e013101ddb1a3fb309abaeb4e025e1006e144bcf1a771f26a31eda6da68dd7f569685b199db68605992326af654d52b857f368fc001bd1e9e6d8154962b70de3f9bdab333c52ff496c7f04a97be1de31aa0b66e25ab9387a283f5d790d70d2ecd78c1ebe6b36411bdca2a6e391597ebaf89f506f23473694430afacd93cd"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x9f, &(0x7f0000000280)=@string={0x9f, 0x3, "2c5fb13c648aa69a61dde9e50ad95eb9f23794f9e7e42fe0b376698094c50201a9993a9545844fa81f964295b847715ab194f77b955bbfab86e8d764d6a3106b46b9b8f3090eb712253790cfd0bceafb4c9c93515f68c35f2a3800e15c30b5c3ec0864f72879e49c7ab5525960b922c1c409fcd1c0c38ac877ef572d8505fcc871cb0cf439164e6693b4fe6d21c39e4c1c633d9e58d200b538aca0eb8f"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000640)={0x24, &(0x7f0000000480)={0x20, 0x31, 0xe3, {0xe3, 0x4, "cd8a7b89c4a2d8d1fbdfa3a0eb581106f84a92358ec0ea428e94c59c88d3ed6fc710708658f55c7a38133728d6046840c9a61abf00a6bd45352395b9a301d935c8d5897165e27c2a0a8cb5d604e89f711a7b49983cfbd4279db5bd63fe47caed990c82cb60652c1cfac0370adc97b2b757dea40231cea8871acd25320b29eb4cbcd7786be536f6aceb0ffbdaea799d4e1359e5b2e21f2e4d5248b286a6399b1bcfc9d8b216690756860ce7e9127c088b98cef6efdd39a2876e1f82c5778d6bae7b31cb5b1495bda20c563229237de4c4f5912528f9719c85a744337e6ce9e862e2"}}, &(0x7f0000000580)={0x0, 0x3, 0x38, @string={0x38, 0x3, "bb0e828032610fa12059cefc2c1913c30f16db9ccbf31659d8909c00de6f07d387cd1141dafd61b0a89e6e827973e6ac08e12cee2352"}}, &(0x7f00000005c0)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xa, "27956ea8"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x1, 0x1, 0x2, "f0"}, @main=@item_4={0x3, 0x0, 0xc, "943b9f8b"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x887}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x0, 0x30, 0xa2, "69963a99ca36058b8675db460b4ea4cb9dec3750eb327f1d027b3f3f7a73f25a44f076602d67987a1f4f76907466e3af4c4a0dc1d4e35763df8076ec42e25bca87bac78479472f7a1417a010a2b863f5cdf3ebdbc27ed062efd7c269823ae489025a3d906c57156b61a199e466c2a298c7e26aef3f758a89a1bd5531470b901b98550ffa54a99b50761736e0ce34b9100132cc8b1ba66b8f7e797b866f40139cac4f"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xcd}, &(0x7f00000007c0)={0x20, 0x1, 0xa2, "6963787e4a34aa36d1591b4551d89a4fcee2febc3891707b58bb4a6d15f77d033a48860d5a770d38d07627471312ec3851ff583b8ffe42a227cb4784edb03e3286ebb7ecbc52fa9b2bae86026c76e50afcbbed36e21fcce14176cf33fb3d83aa61daa68ce47cd1567f1e85cda2a2547719914d3e1ea83984759e09abfe45caac2802f10adf02cba19a011cbab334e97fdc4f2cefa0da549d89f7a0bec9cf85b41d86"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x4}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:54 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x1}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x0, 0x30, 0x61, 0x2e, 0x61]}}, &(0x7f00000001c0)=""/1, 0x4f, 0x1}, 0x20) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={{r2}, 0x43, 0x3, 0x88c}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x9, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@deltclass={0x5c, 0x29, 0x21, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x8, 0xb}, {0x9, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x18, 0x800}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8054}, 0x8004) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x1, 0x8, 0x80, 0x1}, {0x81, 0x20, 0x1, 0x400}, {0x1, 0x3, 0x1, 0xbd53}, {0x5, 0x40, 0x6, 0x800}, {0x0, 0xff, 0x0, 0x6}, {0x43f0, 0x4, 0xff, 0x4}, {0x0, 0x7, 0x80}]}) (async) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'pim6reg\x00', 0x0}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x7) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r7], 0x34}}, 0x0) (rerun: 32) [ 1595.399966][T31399] Error: Driver 'raw-gadget' is already registered, aborting... [ 1595.399981][T31399] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1595.399999][T31399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1595.464729][T31408] __nla_validate_parse: 12 callbacks suppressed [ 1595.464749][T31408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.464779][T31408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.467644][T31406] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1595.862289][ T5633] usb 3-1: device descriptor read/64, error -71 [ 1596.132428][ T5633] usb 3-1: reset high-speed USB device number 38 using dummy_hcd 00:04:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@remote]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000100)={0x9, 0x13}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r5], 0x34}}, 0x0) 00:04:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x6000000) 00:04:56 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:04:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt(r4, 0x2, 0x80000001, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x20000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x400}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f5ff000cd005c46f000000", @ANYRES32=r3], 0x34}}, 0x0) 00:04:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xc1, {0xc1, 0x5, "2c8e644ba36039196ba735aa0069a307efc2e969fc3ac2bfa378301da3cac69106cf78ca8bd19b7b1d56b75ea6defa24f144c6fe8631d960cf2134a4888270e05a9d349357fd766c5afa8b5e3f5ca172142b634657b51bd643df4215ab532a0c53c2b539d1ac03db125efa4c96f7bc09ab9c9b1a9df4cadb08893c967c851253f1bce51db927cc84f5943abdc9af65f3e83cf898d3a4a070ef9179e1e846641e01f271ee75b4d4c3677990ff030d451c29bd11d068ac2142055d1ff841f54a"}}, &(0x7f0000000380)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "1853fe6715ed3141084ef0c8cfa400eb893e47cf79bb8e40f73d3309fc68ae78e4701186fe056cf2e61471312711528db1315efeac204a4b1f94cad90229c2408990b125f84ac64327a1118c09fdaed3a1799697dcef924da20abf517efccabff881aabd4a14cffc72cec6ccbf11b379fac57cb4e768acb1716c82bba05749321184c051ce80d45192584d7c40d859d31ed9f88d7b62df5e664b6c40d4feb75c3da5de06896f9e1593c4187198a808e75deb37f75b2867cdfcba17d4883670b2aa8cb93d33e3f8d54c6eec5d85b42aa5aad2316bcdd525ce6ef2b2234885cbe62a0cd9fcb97760ea8d8f6200252ef6188aee"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x1, "2eca6f7a"}, @main=@item_4={0x3, 0x0, 0xa, "9f3ffadb"}, @local=@item_4={0x3, 0x2, 0x4, "00f122f9"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2e4c, 0x2b, 0x1, {0x22, 0x496}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0xdd, "9af21b5c674cf5c2c73d66be69e106bb2747d8213dd6ea0d0ba0026e2bce42bc046612b40a91b309df215fc0bed87f021bfd370829a18e4353282d210f66ce0636281266fc0ba1cdb0dc5c28d66abfd07b8bc62671389f4251bf7a0aa424fc3458f36434b10ce0c80a525c02bd67b3970065817fb98d41df5a551e40107393b8f867554e12860dabf6de08184f34f7e383ed895e68878157bc4f47fbba4882a2213e8c665933652b0f64c74fabcc239b46e21ddcfb8d0b3eb89bb6c3da68c8c48ecaf86f6f2814d0558efd8f3848686344e493d12d9bcac90b8591fcdf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0xc5, "d729a49f822e55b482f7f6916d606f3142eb079486eb7e527049dc0113ceb07371ddf8787b608eea0d3f2127d974f95aba8e5cc6537ede39fdd470a76f17588103d4dfce424b89f13ce81dc76e37bdef13a2fc3c751b88a3b4854f3e739c18ff6534d532b0482a35978ade85ea17f45082a08311ecb5604053ddc978b977c675caefd054c7ffafeb875bd158cc7d603541bdb0954eb5ff10a6271530f48a6e5934ad4ebdfac3f87a2eb17f606281457ba3d4bc0933b919d9a5388f1f548d675c9baebaef45"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x3f}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 00:04:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x7000000) [ 1596.641533][T31426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1596.659258][T31428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (rerun: 32) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@remote]}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000100)={0x9, 0x13}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r5], 0x34}}, 0x0) 00:04:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x9000000) [ 1596.659304][T31428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1596.675159][T31430] Error: Driver 'raw-gadget' is already registered, aborting... [ 1596.675174][T31430] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1596.675194][T31430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.701253][T31412] Error: Driver 'raw-gadget' is already registered, aborting... [ 1596.701277][T31412] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1596.701297][T31412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.751326][T31434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1596.751485][T31434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1596.861232][T31441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1596.861279][T31441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x3, 0x99b, &(0x7f0000001240)={{0x12, 0x1, 0x250, 0xb2, 0xfe, 0x57, 0x20, 0xbb4, 0xa9e, 0x3c9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x989, 0x3, 0x1b, 0xb1, 0x0, 0x9, [{{0x9, 0x4, 0xca, 0x4, 0x3, 0x34, 0x5, 0x7e, 0xd9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x174, 0x7ff, 0xea91, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xa7, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x7f, 0x2, [0x5, 0x7fff]}]}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1, 0x9, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa7, 0x4}]}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x3, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x40}, @generic={0xac, 0x31, "2cb789bc901ad6a2498e9029c5b03b09fa3ffe5a441628619207c1cedc0dd20a431f05a98d206e6024ff8969f26539d597c4f7c30d9db49a67f6d697faabcb93a36355336f8937033270c45402cce28dab487fc704220cadf018d02e6343b392c74ec1ac3c810486eb1a5ca0bf431879bf3317e72e22533042208c44800a3cf079ef1dcf2f232bed8485ca8809c3bfecf502d2b00e76445533ebfc26c40cb43993dd2b06263fcfec2aa2"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x5, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffb}]}}]}}, {{0x9, 0x4, 0x48, 0x6, 0x10, 0x9f, 0x97, 0xc0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x6, 0x0, 0x5, 0x4, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x5, 0x80, "0318885c7b49"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x6, 0x7f, "fdb665c4dc"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x4, 0x4, 0x44}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x1, 0x0, 0x401, 0x2, 0x3}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x40, "e1f8c6"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "1d7af07ebd55"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2000000, 0x2, 0x1, 0x1d}, {0x6, 0x24, 0x1a, 0x3}, [@mdlm_detail={0x5, 0x24, 0x13, 0x40, "c3"}]}], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0xe2, 0x0, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x45, 0xf7, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff}]}}, {{0x9, 0x5, 0xd, 0xb1f5eaad23a578bd, 0x8, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x1e, 0x1, [@generic={0xea, 0x2, "20a12762d6c2a30bd3b7cf10d3f2c81ed0cbaad53f21b6b8c31ef5748e825d8e70cbb58c632ab2d7d106910474070542c86e64b2bc48ae55b2977a73eefc840075d4cd181e69af47a1d7f01176c37284e1eb91ad2050e489f862e3c447a96b7ef57fdfe9a61a85ba2d8e0435ab9aa791dab8b538bd019f60e23a4a584cdf9e1f8f411ede7103f8b3dfb411123b568bd22b9143403c5585f95ed7ddbaf81a0b6213eabcee32d0ec73cc930dc02e800b1135092957c45bf306d0ddd150577cb0594e5d29dc1319b6232ce62ae892a6287d06b66c75c5c956aa509069126c5064df88a38c9cea48550a"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x7f, 0x1, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1f, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0x7, 0x1, [@generic={0x48, 0x22, "a96be3ab415de20f5eeb5ca5420d44c38168c24d501333f2c6b2c24509e3df547e6cdf574d11737395ed07c9cedd1506dcd0203ec79e0a4153e01fba0c8df60c69fda3485151"}, @generic={0x1c, 0x8, "fd574c51b63773e43fb75fa6874cb457af85910cf06dfbf2d314"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x9, 0x0, 0xb5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xac82}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x4, 0x5, [@generic={0xe9, 0x22, "3fc492b59de5f849f39274844864f2415e4c2a6afcfba385d0da46acc3470b51c3b2bff0933d62f7a9f11b24ee5f20cdff2a21fd351f0da08f2692e60d96a0f6e69eb99a62739706eb952c9470e3303042272b663f357d8437c1c21e494ee0fb92923bb4156ee4ff9d9bf2e3fbc2a7fd4af3fb62b4db823f292151317ba6ae1b97e14427440a6779a6069d676862408d87dceba0cd51c787cd1c77e6229b8dd5475dc779a9f7c62b480cc7d7303d4f116855549ad979e852f3224432034057ad5703d93355548afb10b36574052a61ff1c58a5e9bb114b6fb77f658422ca58f7736abc104aa4ba"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x1, 0x81, 0x0, [@generic={0xf0, 0x23, "dfd192790259f245a00f036d979cbad51e0f5572c5068445dc647af975688384bb503d0fe28bda239f45f96720b010036badb0cc8fd870758e2b662010ef74741f54009afb8f2c3fd86ffef4dc5682777977e29f6cfca1d3d2284cf9021c048be52829cc798718d3aeeb133ffe900221aca1c5a8484d62fb36160517abeaf96b872dfdaf61257229c2baf4665f0e3d09aa178dddea8cdd0a52d1bb1092ce7e48aca2ab4ded7e40faec120f1847337d7741a0d25f96dedc2f6e7202fc36cbfdc0a1f73b6e114fc835f2b9702022a4482aa130f4895b1978ace996287153000e844d771cf24f8c3538bb0cd14e4a6c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3b7, 0x4, 0x2c, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3ff}, @generic={0xd7, 0x21, "fad78f58626e3c9fde1b50a320cb6a72eb9bb60a469f0842670cb5449716edbdf8c1876cc6024726891b47366d08aeaab9bc81b335e42fbbbb0e145caf34e38e8fa6fa3648ee1224d1c7627a3498e635480b08d562f1a179bebf8672dc8828cfee4e93620edcc17aaa617d2d8c17a0922b67b8be34df14c29f86ab39d83de47997d7d44289bea7e9606e4803f5df6c3f1c1555fdf56a0210a44b28bab5a326408419d47883bb56631e26f1054542af7a6abf4c28fca170e6519ac3a02379cfa0329477242dc2320a10691f16034654af7a1c876076"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x0, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0xbdd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x20, 0x9b, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x5, 0x7, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x800}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x9, 0x1, 0x7f, [@generic={0xc, 0x7, "030305ca73df84853c9b"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x81, 0x2, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x22, 0x4, 0x1, [@generic={0x12, 0xe, "3a6a1bc72ee90197f49c9f7cb28e9b49"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x8a, 0x3}]}}]}}, {{0x9, 0x4, 0xe2, 0x4, 0x8, 0xa9, 0xe1, 0x16, 0xdb, [@generic={0x12, 0x9, "fb14f0269f04a449494f2979625c404d"}, @generic={0xd6, 0x30, "5b5146843426d026a6e5f7095c3a54bc7fa70d98c639f1c3ea0a9bff634ea40bfef3dc9c7ef2bbcf78c2de296bcac8c28ad3366e3fa7fbf779d751430f9d513a02e6dea6adac326caea4059a6f629cc6a5a23842087cae6483f8fff62417680345390c73713bb837335dd29763783f14e7781a6c9614e2424a4ecd10d10b985dbfe8321306cf0f3f70e58f555b5db2fd4ce13853e6a05a10031542c3de4b9bca36ff0444b59b65c3c3858ea84a346dff92eb5bab33a10406bf92b5d5f0f9f96754da2a535ea3290b23ebe871abddc0d7c3314be5"}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x40}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x36, 0x3}, @generic={0x9c, 0x5, "2fa0572384185b27aa1cf7fed3dd84bf8996faf4d07120cd58d7e1b21bce42983ae711c30fc89dd2cca21282f66a59d70e3b214baaaf1f81927aada4e07495a7aafd894273329e1d6627e40ed07e08dd0368a59d96c62a3f5ff47736190005a9d973f56587b3f84168832c2104d36ef227b2273a57eaa62484e299c8007ad716a2ca5b7d5d662388bd1d048e508747a28f41da862e07a250def0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x8, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7150}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x7, 0x2a, 0x3f, [@generic={0x9c, 0x31, "7a184dfaafd38b4b50b600a3c5370c0483e4484bf2daedf06d7d3305a1320d25bb563b9a4296037726ce0eb30f5d5011bee943da015584df289dea816c46eae0ef43b8c3ab6fbd4a26d97f1cd3e7859c73098c2e7911f28580939a869907342f0116e0455150d9994093b03ad6e54592bda417b13786d46b3b088fb819a311b91fa6e56d1e9b84a19a139460f530b7064f291d83d9bee0697d1d"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x4, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0x17dfa0b83560d6, 0xee, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0x9caf5cb779ad0215, 0x0, 0x200, 0x93, 0x1f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x37, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xfb, 0x5, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x100}, @generic={0x44, 0x11, "34f2aa1e1f9056ab32d744242d5d58ca29ab2ea756655f167bf9635354160476efa17b296bae8ceb48f8f01405dd79a84fb6aba0dfd687e2a3ca27ba337510271ad9"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0x4, 0x4, 0x40, 0x1}, 0x32, &(0x7f0000000080)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x6, 0xf000, 0x0, [0xc7, 0xff0f, 0x3f, 0x3f3f, 0xff3f3f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x6, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0xd3, &(0x7f0000000380)=@string={0xd3, 0x3, "dbc11d7bbc8f14bc625ce5d011421b3481f8331a9eac1033fe9630af10b5d624b744dae69246756d489b542b677d39087fb8144ea3f17c4ee8327db4eef75ce766095bf244aef467ae5f2cb6f8c5239e303d53e013101ddb1a3fb309abaeb4e025e1006e144bcf1a771f26a31eda6da68dd7f569685b199db68605992326af654d52b857f368fc001bd1e9e6d8154962b70de3f9bdab333c52ff496c7f04a97be1de31aa0b66e25ab9387a283f5d790d70d2ecd78c1ebe6b36411bdca2a6e391597ebaf89f506f23473694430afacd93cd"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x9f, &(0x7f0000000280)=@string={0x9f, 0x3, "2c5fb13c648aa69a61dde9e50ad95eb9f23794f9e7e42fe0b376698094c50201a9993a9545844fa81f964295b847715ab194f77b955bbfab86e8d764d6a3106b46b9b8f3090eb712253790cfd0bceafb4c9c93515f68c35f2a3800e15c30b5c3ec0864f72879e49c7ab5525960b922c1c409fcd1c0c38ac877ef572d8505fcc871cb0cf439164e6693b4fe6d21c39e4c1c633d9e58d200b538aca0eb8f"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000640)={0x24, &(0x7f0000000480)={0x20, 0x31, 0xe3, {0xe3, 0x4, "cd8a7b89c4a2d8d1fbdfa3a0eb581106f84a92358ec0ea428e94c59c88d3ed6fc710708658f55c7a38133728d6046840c9a61abf00a6bd45352395b9a301d935c8d5897165e27c2a0a8cb5d604e89f711a7b49983cfbd4279db5bd63fe47caed990c82cb60652c1cfac0370adc97b2b757dea40231cea8871acd25320b29eb4cbcd7786be536f6aceb0ffbdaea799d4e1359e5b2e21f2e4d5248b286a6399b1bcfc9d8b216690756860ce7e9127c088b98cef6efdd39a2876e1f82c5778d6bae7b31cb5b1495bda20c563229237de4c4f5912528f9719c85a744337e6ce9e862e2"}}, &(0x7f0000000580)={0x0, 0x3, 0x38, @string={0x38, 0x3, "bb0e828032610fa12059cefc2c1913c30f16db9ccbf31659d8909c00de6f07d387cd1141dafd61b0a89e6e827973e6ac08e12cee2352"}}, &(0x7f00000005c0)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xa, "27956ea8"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x1, 0x1, 0x2, "f0"}, @main=@item_4={0x3, 0x0, 0xc, "943b9f8b"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x887}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x0, 0x30, 0xa2, "69963a99ca36058b8675db460b4ea4cb9dec3750eb327f1d027b3f3f7a73f25a44f076602d67987a1f4f76907466e3af4c4a0dc1d4e35763df8076ec42e25bca87bac78479472f7a1417a010a2b863f5cdf3ebdbc27ed062efd7c269823ae489025a3d906c57156b61a199e466c2a298c7e26aef3f758a89a1bd5531470b901b98550ffa54a99b50761736e0ce34b9100132cc8b1ba66b8f7e797b866f40139cac4f"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xcd}, &(0x7f00000007c0)={0x20, 0x1, 0xa2, "6963787e4a34aa36d1591b4551d89a4fcee2febc3891707b58bb4a6d15f77d033a48860d5a770d38d07627471312ec3851ff583b8ffe42a227cb4784edb03e3286ebb7ecbc52fa9b2bae86026c76e50afcbbed36e21fcce14176cf33fb3d83aa61daa68ce47cd1567f1e85cda2a2547719914d3e1ea83984759e09abfe45caac2802f10adf02cba19a011cbab334e97fdc4f2cefa0da549d89f7a0bec9cf85b41d86"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x4}}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:04:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 00:04:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt(r4, 0x2, 0x80000001, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x20000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x400}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f5ff000cd005c46f000000", @ANYRES32=r3], 0x34}}, 0x0) (rerun: 32) [ 1598.496315][T18396] usb 3-1: USB disconnect, device number 38 [ 1598.952358][T18396] usb 3-1: new high-speed USB device number 39 using dummy_hcd 00:04:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@remote]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000100)={0x9, 0x13}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r5], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) sendfile(r4, r3, &(0x7f00000000c0)=0x2f, 0x8) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@remote]}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000100)={0x9, 0x13}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r5], 0x34}}, 0x0) (async) 00:04:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt(r4, 0x2, 0x80000001, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x20000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x400}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f5ff000cd005c46f000000", @ANYRES32=r3], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) getsockopt(r4, 0x2, 0x80000001, &(0x7f0000000540)=""/4096, &(0x7f00000000c0)=0x1000) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x20000) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x400}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f5ff000cd005c46f000000", @ANYRES32=r3], 0x34}}, 0x0) (async) 00:04:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0xf000000) 00:04:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 00:04:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x7000000) 00:04:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 00:04:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x3f000000) 00:04:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x800000000000000) 00:04:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 1599.352442][T18396] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1599.352490][T18396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.352524][T18396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.352552][T18396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1599.352595][T18396] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1599.352625][T18396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.354657][T18396] usb 3-1: config 0 descriptor?? [ 1599.601851][T31489] Error: Driver 'raw-gadget' is already registered, aborting... [ 1599.601861][T31489] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1599.601873][T31489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.112409][T18396] usbhid 3-1:0.0: can't add hid device: -71 [ 1600.112497][T18396] usbhid: probe of 3-1:0.0 failed with error -71 [ 1600.119946][T18396] usb 3-1: USB disconnect, device number 39 00:05:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x99b, &(0x7f0000001240)={{0x12, 0x1, 0x250, 0xb2, 0xfe, 0x57, 0x20, 0xbb4, 0xa9e, 0x3c9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x989, 0x3, 0x1b, 0xb1, 0x0, 0x9, [{{0x9, 0x4, 0xca, 0x4, 0x3, 0x34, 0x5, 0x7e, 0xd9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x174, 0x7ff, 0xea91, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xa7, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x7f, 0x2, [0x5, 0x7fff]}]}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1, 0x9, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa7, 0x4}]}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x3, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x40}, @generic={0xac, 0x31, "2cb789bc901ad6a2498e9029c5b03b09fa3ffe5a441628619207c1cedc0dd20a431f05a98d206e6024ff8969f26539d597c4f7c30d9db49a67f6d697faabcb93a36355336f8937033270c45402cce28dab487fc704220cadf018d02e6343b392c74ec1ac3c810486eb1a5ca0bf431879bf3317e72e22533042208c44800a3cf079ef1dcf2f232bed8485ca8809c3bfecf502d2b00e76445533ebfc26c40cb43993dd2b06263fcfec2aa2"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x5, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffb}]}}]}}, {{0x9, 0x4, 0x48, 0x6, 0x10, 0x9f, 0x97, 0xc0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x6, 0x0, 0x5, 0x4, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x5, 0x80, "0318885c7b49"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x6, 0x7f, "fdb665c4dc"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x4, 0x4, 0x44}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x1, 0x0, 0x401, 0x2, 0x3}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x40, "e1f8c6"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "1d7af07ebd55"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2000000, 0x2, 0x1, 0x1d}, {0x6, 0x24, 0x1a, 0x3}, [@mdlm_detail={0x5, 0x24, 0x13, 0x40, "c3"}]}], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0xe2, 0x0, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x45, 0xf7, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff}]}}, {{0x9, 0x5, 0xd, 0xb1f5eaad23a578bd, 0x8, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x1e, 0x1, [@generic={0xea, 0x2, "20a12762d6c2a30bd3b7cf10d3f2c81ed0cbaad53f21b6b8c31ef5748e825d8e70cbb58c632ab2d7d106910474070542c86e64b2bc48ae55b2977a73eefc840075d4cd181e69af47a1d7f01176c37284e1eb91ad2050e489f862e3c447a96b7ef57fdfe9a61a85ba2d8e0435ab9aa791dab8b538bd019f60e23a4a584cdf9e1f8f411ede7103f8b3dfb411123b568bd22b9143403c5585f95ed7ddbaf81a0b6213eabcee32d0ec73cc930dc02e800b1135092957c45bf306d0ddd150577cb0594e5d29dc1319b6232ce62ae892a6287d06b66c75c5c956aa509069126c5064df88a38c9cea48550a"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x7f, 0x1, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1f, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0x7, 0x1, [@generic={0x48, 0x22, "a96be3ab415de20f5eeb5ca5420d44c38168c24d501333f2c6b2c24509e3df547e6cdf574d11737395ed07c9cedd1506dcd0203ec79e0a4153e01fba0c8df60c69fda3485151"}, @generic={0x1c, 0x8, "fd574c51b63773e43fb75fa6874cb457af85910cf06dfbf2d314"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x9, 0x0, 0xb5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xac82}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x4, 0x5, [@generic={0xe9, 0x22, "3fc492b59de5f849f39274844864f2415e4c2a6afcfba385d0da46acc3470b51c3b2bff0933d62f7a9f11b24ee5f20cdff2a21fd351f0da08f2692e60d96a0f6e69eb99a62739706eb952c9470e3303042272b663f357d8437c1c21e494ee0fb92923bb4156ee4ff9d9bf2e3fbc2a7fd4af3fb62b4db823f292151317ba6ae1b97e14427440a6779a6069d676862408d87dceba0cd51c787cd1c77e6229b8dd5475dc779a9f7c62b480cc7d7303d4f116855549ad979e852f3224432034057ad5703d93355548afb10b36574052a61ff1c58a5e9bb114b6fb77f658422ca58f7736abc104aa4ba"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x1, 0x81, 0x0, [@generic={0xf0, 0x23, "dfd192790259f245a00f036d979cbad51e0f5572c5068445dc647af975688384bb503d0fe28bda239f45f96720b010036badb0cc8fd870758e2b662010ef74741f54009afb8f2c3fd86ffef4dc5682777977e29f6cfca1d3d2284cf9021c048be52829cc798718d3aeeb133ffe900221aca1c5a8484d62fb36160517abeaf96b872dfdaf61257229c2baf4665f0e3d09aa178dddea8cdd0a52d1bb1092ce7e48aca2ab4ded7e40faec120f1847337d7741a0d25f96dedc2f6e7202fc36cbfdc0a1f73b6e114fc835f2b9702022a4482aa130f4895b1978ace996287153000e844d771cf24f8c3538bb0cd14e4a6c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3b7, 0x4, 0x2c, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3ff}, @generic={0xd7, 0x21, "fad78f58626e3c9fde1b50a320cb6a72eb9bb60a469f0842670cb5449716edbdf8c1876cc6024726891b47366d08aeaab9bc81b335e42fbbbb0e145caf34e38e8fa6fa3648ee1224d1c7627a3498e635480b08d562f1a179bebf8672dc8828cfee4e93620edcc17aaa617d2d8c17a0922b67b8be34df14c29f86ab39d83de47997d7d44289bea7e9606e4803f5df6c3f1c1555fdf56a0210a44b28bab5a326408419d47883bb56631e26f1054542af7a6abf4c28fca170e6519ac3a02379cfa0329477242dc2320a10691f16034654af7a1c876076"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x0, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0xbdd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x20, 0x9b, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x5, 0x7, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x800}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x9, 0x1, 0x7f, [@generic={0xc, 0x7, "030305ca73df84853c9b"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x81, 0x2, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x22, 0x4, 0x1, [@generic={0x12, 0xe, "3a6a1bc72ee90197f49c9f7cb28e9b49"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x8a, 0x3}]}}]}}, {{0x9, 0x4, 0xe2, 0x4, 0x8, 0xa9, 0xe1, 0x16, 0xdb, [@generic={0x12, 0x9, "fb14f0269f04a449494f2979625c404d"}, @generic={0xd6, 0x30, "5b5146843426d026a6e5f7095c3a54bc7fa70d98c639f1c3ea0a9bff634ea40bfef3dc9c7ef2bbcf78c2de296bcac8c28ad3366e3fa7fbf779d751430f9d513a02e6dea6adac326caea4059a6f629cc6a5a23842087cae6483f8fff62417680345390c73713bb837335dd29763783f14e7781a6c9614e2424a4ecd10d10b985dbfe8321306cf0f3f70e58f555b5db2fd4ce13853e6a05a10031542c3de4b9bca36ff0444b59b65c3c3858ea84a346dff92eb5bab33a10406bf92b5d5f0f9f96754da2a535ea3290b23ebe871abddc0d7c3314be5"}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x40}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x36, 0x3}, @generic={0x9c, 0x5, "2fa0572384185b27aa1cf7fed3dd84bf8996faf4d07120cd58d7e1b21bce42983ae711c30fc89dd2cca21282f66a59d70e3b214baaaf1f81927aada4e07495a7aafd894273329e1d6627e40ed07e08dd0368a59d96c62a3f5ff47736190005a9d973f56587b3f84168832c2104d36ef227b2273a57eaa62484e299c8007ad716a2ca5b7d5d662388bd1d048e508747a28f41da862e07a250def0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x8, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7150}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x7, 0x2a, 0x3f, [@generic={0x9c, 0x31, "7a184dfaafd38b4b50b600a3c5370c0483e4484bf2daedf06d7d3305a1320d25bb563b9a4296037726ce0eb30f5d5011bee943da015584df289dea816c46eae0ef43b8c3ab6fbd4a26d97f1cd3e7859c73098c2e7911f28580939a869907342f0116e0455150d9994093b03ad6e54592bda417b13786d46b3b088fb819a311b91fa6e56d1e9b84a19a139460f530b7064f291d83d9bee0697d1d"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x4, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0x17dfa0b83560d6, 0xee, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0x9caf5cb779ad0215, 0x0, 0x200, 0x93, 0x1f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x37, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xfb, 0x5, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x100}, @generic={0x44, 0x11, "34f2aa1e1f9056ab32d744242d5d58ca29ab2ea756655f167bf9635354160476efa17b296bae8ceb48f8f01405dd79a84fb6aba0dfd687e2a3ca27ba337510271ad9"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0x4, 0x4, 0x40, 0x1}, 0x32, &(0x7f0000000080)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x6, 0xf000, 0x0, [0xc7, 0xff0f, 0x3f, 0x3f3f, 0xff3f3f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x6, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0xd3, &(0x7f0000000380)=@string={0xd3, 0x3, "dbc11d7bbc8f14bc625ce5d011421b3481f8331a9eac1033fe9630af10b5d624b744dae69246756d489b542b677d39087fb8144ea3f17c4ee8327db4eef75ce766095bf244aef467ae5f2cb6f8c5239e303d53e013101ddb1a3fb309abaeb4e025e1006e144bcf1a771f26a31eda6da68dd7f569685b199db68605992326af654d52b857f368fc001bd1e9e6d8154962b70de3f9bdab333c52ff496c7f04a97be1de31aa0b66e25ab9387a283f5d790d70d2ecd78c1ebe6b36411bdca2a6e391597ebaf89f506f23473694430afacd93cd"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x9f, &(0x7f0000000280)=@string={0x9f, 0x3, "2c5fb13c648aa69a61dde9e50ad95eb9f23794f9e7e42fe0b376698094c50201a9993a9545844fa81f964295b847715ab194f77b955bbfab86e8d764d6a3106b46b9b8f3090eb712253790cfd0bceafb4c9c93515f68c35f2a3800e15c30b5c3ec0864f72879e49c7ab5525960b922c1c409fcd1c0c38ac877ef572d8505fcc871cb0cf439164e6693b4fe6d21c39e4c1c633d9e58d200b538aca0eb8f"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000640)={0x24, &(0x7f0000000480)={0x20, 0x31, 0xe3, {0xe3, 0x4, "cd8a7b89c4a2d8d1fbdfa3a0eb581106f84a92358ec0ea428e94c59c88d3ed6fc710708658f55c7a38133728d6046840c9a61abf00a6bd45352395b9a301d935c8d5897165e27c2a0a8cb5d604e89f711a7b49983cfbd4279db5bd63fe47caed990c82cb60652c1cfac0370adc97b2b757dea40231cea8871acd25320b29eb4cbcd7786be536f6aceb0ffbdaea799d4e1359e5b2e21f2e4d5248b286a6399b1bcfc9d8b216690756860ce7e9127c088b98cef6efdd39a2876e1f82c5778d6bae7b31cb5b1495bda20c563229237de4c4f5912528f9719c85a744337e6ce9e862e2"}}, &(0x7f0000000580)={0x0, 0x3, 0x38, @string={0x38, 0x3, "bb0e828032610fa12059cefc2c1913c30f16db9ccbf31659d8909c00de6f07d387cd1141dafd61b0a89e6e827973e6ac08e12cee2352"}}, &(0x7f00000005c0)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xa, "27956ea8"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x1, 0x1, 0x2, "f0"}, @main=@item_4={0x3, 0x0, 0xc, "943b9f8b"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x887}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x0, 0x30, 0xa2, "69963a99ca36058b8675db460b4ea4cb9dec3750eb327f1d027b3f3f7a73f25a44f076602d67987a1f4f76907466e3af4c4a0dc1d4e35763df8076ec42e25bca87bac78479472f7a1417a010a2b863f5cdf3ebdbc27ed062efd7c269823ae489025a3d906c57156b61a199e466c2a298c7e26aef3f758a89a1bd5531470b901b98550ffa54a99b50761736e0ce34b9100132cc8b1ba66b8f7e797b866f40139cac4f"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xcd}, &(0x7f00000007c0)={0x20, 0x1, 0xa2, "6963787e4a34aa36d1591b4551d89a4fcee2febc3891707b58bb4a6d15f77d033a48860d5a770d38d07627471312ec3851ff583b8ffe42a227cb4784edb03e3286ebb7ecbc52fa9b2bae86026c76e50afcbbed36e21fcce14176cf33fb3d83aa61daa68ce47cd1567f1e85cda2a2547719914d3e1ea83984759e09abfe45caac2802f10adf02cba19a011cbab334e97fdc4f2cefa0da549d89f7a0bec9cf85b41d86"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x4}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x99b, &(0x7f0000001240)={{0x12, 0x1, 0x250, 0xb2, 0xfe, 0x57, 0x20, 0xbb4, 0xa9e, 0x3c9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x989, 0x3, 0x1b, 0xb1, 0x0, 0x9, [{{0x9, 0x4, 0xca, 0x4, 0x3, 0x34, 0x5, 0x7e, 0xd9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x174, 0x7ff, 0xea91, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xa7, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x7f, 0x2, [0x5, 0x7fff]}]}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x1, 0x9, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa7, 0x4}]}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x3, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x40}, @generic={0xac, 0x31, "2cb789bc901ad6a2498e9029c5b03b09fa3ffe5a441628619207c1cedc0dd20a431f05a98d206e6024ff8969f26539d597c4f7c30d9db49a67f6d697faabcb93a36355336f8937033270c45402cce28dab487fc704220cadf018d02e6343b392c74ec1ac3c810486eb1a5ca0bf431879bf3317e72e22533042208c44800a3cf079ef1dcf2f232bed8485ca8809c3bfecf502d2b00e76445533ebfc26c40cb43993dd2b06263fcfec2aa2"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x5, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffb}]}}]}}, {{0x9, 0x4, 0x48, 0x6, 0x10, 0x9f, 0x97, 0xc0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x6, 0x0, 0x5, 0x4, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x5, 0x80, "0318885c7b49"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x6, 0x7f, "fdb665c4dc"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x4, 0x4, 0x44}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x1, 0x0, 0x401, 0x2, 0x3}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x40, "e1f8c6"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "1d7af07ebd55"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2000000, 0x2, 0x1, 0x1d}, {0x6, 0x24, 0x1a, 0x3}, [@mdlm_detail={0x5, 0x24, 0x13, 0x40, "c3"}]}], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0xe2, 0x0, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x45, 0xf7, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff}]}}, {{0x9, 0x5, 0xd, 0xb1f5eaad23a578bd, 0x8, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x1e, 0x1, [@generic={0xea, 0x2, "20a12762d6c2a30bd3b7cf10d3f2c81ed0cbaad53f21b6b8c31ef5748e825d8e70cbb58c632ab2d7d106910474070542c86e64b2bc48ae55b2977a73eefc840075d4cd181e69af47a1d7f01176c37284e1eb91ad2050e489f862e3c447a96b7ef57fdfe9a61a85ba2d8e0435ab9aa791dab8b538bd019f60e23a4a584cdf9e1f8f411ede7103f8b3dfb411123b568bd22b9143403c5585f95ed7ddbaf81a0b6213eabcee32d0ec73cc930dc02e800b1135092957c45bf306d0ddd150577cb0594e5d29dc1319b6232ce62ae892a6287d06b66c75c5c956aa509069126c5064df88a38c9cea48550a"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x7f, 0x1, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1f, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0x7, 0x1, [@generic={0x48, 0x22, "a96be3ab415de20f5eeb5ca5420d44c38168c24d501333f2c6b2c24509e3df547e6cdf574d11737395ed07c9cedd1506dcd0203ec79e0a4153e01fba0c8df60c69fda3485151"}, @generic={0x1c, 0x8, "fd574c51b63773e43fb75fa6874cb457af85910cf06dfbf2d314"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x9, 0x0, 0xb5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xac82}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0x4, 0x5, [@generic={0xe9, 0x22, "3fc492b59de5f849f39274844864f2415e4c2a6afcfba385d0da46acc3470b51c3b2bff0933d62f7a9f11b24ee5f20cdff2a21fd351f0da08f2692e60d96a0f6e69eb99a62739706eb952c9470e3303042272b663f357d8437c1c21e494ee0fb92923bb4156ee4ff9d9bf2e3fbc2a7fd4af3fb62b4db823f292151317ba6ae1b97e14427440a6779a6069d676862408d87dceba0cd51c787cd1c77e6229b8dd5475dc779a9f7c62b480cc7d7303d4f116855549ad979e852f3224432034057ad5703d93355548afb10b36574052a61ff1c58a5e9bb114b6fb77f658422ca58f7736abc104aa4ba"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x1, 0x81, 0x0, [@generic={0xf0, 0x23, "dfd192790259f245a00f036d979cbad51e0f5572c5068445dc647af975688384bb503d0fe28bda239f45f96720b010036badb0cc8fd870758e2b662010ef74741f54009afb8f2c3fd86ffef4dc5682777977e29f6cfca1d3d2284cf9021c048be52829cc798718d3aeeb133ffe900221aca1c5a8484d62fb36160517abeaf96b872dfdaf61257229c2baf4665f0e3d09aa178dddea8cdd0a52d1bb1092ce7e48aca2ab4ded7e40faec120f1847337d7741a0d25f96dedc2f6e7202fc36cbfdc0a1f73b6e114fc835f2b9702022a4482aa130f4895b1978ace996287153000e844d771cf24f8c3538bb0cd14e4a6c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3b7, 0x4, 0x2c, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3ff}, @generic={0xd7, 0x21, "fad78f58626e3c9fde1b50a320cb6a72eb9bb60a469f0842670cb5449716edbdf8c1876cc6024726891b47366d08aeaab9bc81b335e42fbbbb0e145caf34e38e8fa6fa3648ee1224d1c7627a3498e635480b08d562f1a179bebf8672dc8828cfee4e93620edcc17aaa617d2d8c17a0922b67b8be34df14c29f86ab39d83de47997d7d44289bea7e9606e4803f5df6c3f1c1555fdf56a0210a44b28bab5a326408419d47883bb56631e26f1054542af7a6abf4c28fca170e6519ac3a02379cfa0329477242dc2320a10691f16034654af7a1c876076"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x0, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0xbdd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x20, 0x9b, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x5, 0x7, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x800}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x9, 0x1, 0x7f, [@generic={0xc, 0x7, "030305ca73df84853c9b"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x81, 0x2, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x22, 0x4, 0x1, [@generic={0x12, 0xe, "3a6a1bc72ee90197f49c9f7cb28e9b49"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x8a, 0x3}]}}]}}, {{0x9, 0x4, 0xe2, 0x4, 0x8, 0xa9, 0xe1, 0x16, 0xdb, [@generic={0x12, 0x9, "fb14f0269f04a449494f2979625c404d"}, @generic={0xd6, 0x30, "5b5146843426d026a6e5f7095c3a54bc7fa70d98c639f1c3ea0a9bff634ea40bfef3dc9c7ef2bbcf78c2de296bcac8c28ad3366e3fa7fbf779d751430f9d513a02e6dea6adac326caea4059a6f629cc6a5a23842087cae6483f8fff62417680345390c73713bb837335dd29763783f14e7781a6c9614e2424a4ecd10d10b985dbfe8321306cf0f3f70e58f555b5db2fd4ce13853e6a05a10031542c3de4b9bca36ff0444b59b65c3c3858ea84a346dff92eb5bab33a10406bf92b5d5f0f9f96754da2a535ea3290b23ebe871abddc0d7c3314be5"}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x40}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x36, 0x3}, @generic={0x9c, 0x5, "2fa0572384185b27aa1cf7fed3dd84bf8996faf4d07120cd58d7e1b21bce42983ae711c30fc89dd2cca21282f66a59d70e3b214baaaf1f81927aada4e07495a7aafd894273329e1d6627e40ed07e08dd0368a59d96c62a3f5ff47736190005a9d973f56587b3f84168832c2104d36ef227b2273a57eaa62484e299c8007ad716a2ca5b7d5d662388bd1d048e508747a28f41da862e07a250def0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x8, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7150}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x7, 0x2a, 0x3f, [@generic={0x9c, 0x31, "7a184dfaafd38b4b50b600a3c5370c0483e4484bf2daedf06d7d3305a1320d25bb563b9a4296037726ce0eb30f5d5011bee943da015584df289dea816c46eae0ef43b8c3ab6fbd4a26d97f1cd3e7859c73098c2e7911f28580939a869907342f0116e0455150d9994093b03ad6e54592bda417b13786d46b3b088fb819a311b91fa6e56d1e9b84a19a139460f530b7064f291d83d9bee0697d1d"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x4, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x6, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0x17dfa0b83560d6, 0xee, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0x9caf5cb779ad0215, 0x0, 0x200, 0x93, 0x1f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x37, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xfb, 0x5, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x100}, @generic={0x44, 0x11, "34f2aa1e1f9056ab32d744242d5d58ca29ab2ea756655f167bf9635354160476efa17b296bae8ceb48f8f01405dd79a84fb6aba0dfd687e2a3ca27ba337510271ad9"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0x4, 0x4, 0x40, 0x1}, 0x32, &(0x7f0000000080)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x6, 0xf000, 0x0, [0xc7, 0xff0f, 0x3f, 0x3f3f, 0xff3f3f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x6, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0xd3, &(0x7f0000000380)=@string={0xd3, 0x3, "dbc11d7bbc8f14bc625ce5d011421b3481f8331a9eac1033fe9630af10b5d624b744dae69246756d489b542b677d39087fb8144ea3f17c4ee8327db4eef75ce766095bf244aef467ae5f2cb6f8c5239e303d53e013101ddb1a3fb309abaeb4e025e1006e144bcf1a771f26a31eda6da68dd7f569685b199db68605992326af654d52b857f368fc001bd1e9e6d8154962b70de3f9bdab333c52ff496c7f04a97be1de31aa0b66e25ab9387a283f5d790d70d2ecd78c1ebe6b36411bdca2a6e391597ebaf89f506f23473694430afacd93cd"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x9f, &(0x7f0000000280)=@string={0x9f, 0x3, "2c5fb13c648aa69a61dde9e50ad95eb9f23794f9e7e42fe0b376698094c50201a9993a9545844fa81f964295b847715ab194f77b955bbfab86e8d764d6a3106b46b9b8f3090eb712253790cfd0bceafb4c9c93515f68c35f2a3800e15c30b5c3ec0864f72879e49c7ab5525960b922c1c409fcd1c0c38ac877ef572d8505fcc871cb0cf439164e6693b4fe6d21c39e4c1c633d9e58d200b538aca0eb8f"}}]}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000640)={0x24, &(0x7f0000000480)={0x20, 0x31, 0xe3, {0xe3, 0x4, "cd8a7b89c4a2d8d1fbdfa3a0eb581106f84a92358ec0ea428e94c59c88d3ed6fc710708658f55c7a38133728d6046840c9a61abf00a6bd45352395b9a301d935c8d5897165e27c2a0a8cb5d604e89f711a7b49983cfbd4279db5bd63fe47caed990c82cb60652c1cfac0370adc97b2b757dea40231cea8871acd25320b29eb4cbcd7786be536f6aceb0ffbdaea799d4e1359e5b2e21f2e4d5248b286a6399b1bcfc9d8b216690756860ce7e9127c088b98cef6efdd39a2876e1f82c5778d6bae7b31cb5b1495bda20c563229237de4c4f5912528f9719c85a744337e6ce9e862e2"}}, &(0x7f0000000580)={0x0, 0x3, 0x38, @string={0x38, 0x3, "bb0e828032610fa12059cefc2c1913c30f16db9ccbf31659d8909c00de6f07d387cd1141dafd61b0a89e6e827973e6ac08e12cee2352"}}, &(0x7f00000005c0)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xa, "27956ea8"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x1, 0x1, 0x2, "f0"}, @main=@item_4={0x3, 0x0, 0xc, "943b9f8b"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x887}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x0, 0x30, 0xa2, "69963a99ca36058b8675db460b4ea4cb9dec3750eb327f1d027b3f3f7a73f25a44f076602d67987a1f4f76907466e3af4c4a0dc1d4e35763df8076ec42e25bca87bac78479472f7a1417a010a2b863f5cdf3ebdbc27ed062efd7c269823ae489025a3d906c57156b61a199e466c2a298c7e26aef3f758a89a1bd5531470b901b98550ffa54a99b50761736e0ce34b9100132cc8b1ba66b8f7e797b866f40139cac4f"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xcd}, &(0x7f00000007c0)={0x20, 0x1, 0xa2, "6963787e4a34aa36d1591b4551d89a4fcee2febc3891707b58bb4a6d15f77d033a48860d5a770d38d07627471312ec3851ff583b8ffe42a227cb4784edb03e3286ebb7ecbc52fa9b2bae86026c76e50afcbbed36e21fcce14176cf33fb3d83aa61daa68ce47cd1567f1e85cda2a2547719914d3e1ea83984759e09abfe45caac2802f10adf02cba19a011cbab334e97fdc4f2cefa0da549d89f7a0bec9cf85b41d86"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x4}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r2) (async) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) (async) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) 00:05:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x48000000) 00:05:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:05:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 00:05:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4f) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'veth1_vlan\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[], 0x34}}, 0x0) 00:05:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x700000000000000) 00:05:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4f) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'veth1_vlan\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1\x00'}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4f) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'veth1_vlan\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[], 0x34}}, 0x0) (async) 00:05:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 1600.632398][T31500] __nla_validate_parse: 9 callbacks suppressed [ 1600.632417][T31500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:05:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x4c000000) 00:05:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 1600.632447][T31500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1600.676473][T31497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1600.748263][T31504] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:05:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x600000000000000) 00:05:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x112}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1\x00'}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4f) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'veth1_vlan\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[], 0x34}}, 0x0) [ 1600.832095][T31516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1600.832132][T31516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1600.926931][T31522] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1600.944467][ T5633] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1601.303754][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1601.303790][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.303809][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.303823][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1601.303849][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1601.303864][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.305533][ T5633] usb 3-1: config 0 descriptor?? [ 1601.757532][T31503] Error: Driver 'raw-gadget' is already registered, aborting... [ 1601.757542][T31503] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1601.757554][T31503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:05:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382c0000000000109022400010000000009040000fd0301000009210e00000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x40, 0x0, 0xc2, {0xc2, 0x21, "b902985a3d6bc0eba2838fbd17c2d1f12aca1d814e67df1e8d66da1ca3237d3a5824e99d5b6cb71b03f48fc2d91439baf48acd48007a6b5423c47a7af0b7b143dec8fb89a078bcd02fdd158d9ab13ac0fd3167650ce5614c7ffed8edab7cb618d7d237749f211d8723146d421a5e6cea7cd451dec84262850fb469a645e69d59dda108642bd2685bdcc719d1d997bf7d563dabfe45900f11f377af1fa5ed602bb0cc3196c5c71c960fd1264607c5921edcde8757426cc5dccec01429fa7e3efe"}}, &(0x7f00000012c0)=ANY=[@ANYBLOB="0003e2ff00000403100865aa94f956d0d6780b0505fac7d84086cf273ef322cf563747e8e9f6ccb5d22894072c5739cd2fca6c7cfc76516c5de2fcb305043304106aab5c4fb8c325050e8b35db39951fd62fb12e5d65e0c53879fdbd2c99d1323c75c6101e70d1e557e4594ba6247e41af0ab89567495fcc56210f970adfe1134ba9c9c640a22f460ef993e1c34b5aadd323cba7432a6f44a7dedb13c72519b2cd08cc6e98cb026ef36d75345c40df"], &(0x7f0000000280)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0xa, "8bd13f8d"}, @global=@item_4={0x3, 0x1, 0x5, "eb231251"}, @main=@item_012={0x2, 0x0, 0x8, "09b4"}, @main=@item_4={0x3, 0x0, 0xa, "bc76aba5"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x0, "03559d5a"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x1e, 0x1, {0x22, 0xd49}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x17, 0xd1, "4c8d322f219e3ed818c53352c9274ca039a9a21350bae5661342d322a0825453842a5eceed173a6d3025efc03514a7cdb7db241b411bb3b7e9eedd4942337e3dc6f2189da3f6642709ee69a47b86f979b7b45fc31aa9587bfdd9a30170c2401a87ae5f7d9e2c35e35f22b1320e4b393c6836d6008b69aec11d359c6b6366f8533ff03cd4556786f86e5a1ab2cb70db37c2e740ae68049a079916abbd7084159f77b7f526465d480affedb073c23315c81386ab9d20cfad77536646d9aeca2991aff6cd400c406e917dd030ae80ce2322f1"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)={0x20, 0x1, 0xe9, "9ff29b68c20dc76ed73eb010dfa4ca4a9c14127f3626259d2314563f73f13df47210a9c6fa233638a24d3db28b9df9c7e04bb178a5ef9ef0acf179dc166b1c2189403a582030a3e3968453dca31aae90f0eb4a7071a7f884f3f6e1ebff32281c1fba42a9a8f5d05b0c6c18a1661d1c9833aa34a0988526001e282399065441793120b4e6de24d36bb58ae6e039becabb006b30ac7c41c27e115d722f40b39e494d97237f89429b6c9aecb442359d6df2610ec4f769d4c812ccc6042ea0c1b9000549c6be1c6d404c80b4049b128d7aca4a2050020e771ae396ac2dca00df140da496bd91977fcc1c41"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) syz_usb_connect$cdc_ecm(0x5, 0x5b, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x5, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x6f, 0x2, 0x2, 0x6, 0x0, 0x99, {{0x7, 0x24, 0x6, 0x0, 0x0, "a58e"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3f, 0xffc0, 0x7f}, [@network_terminal={0x7, 0x24, 0xa, 0xf7, 0xe1, 0x80, 0x1f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0xfe, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x6, 0x7}}}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x3, 0x7f, 0x6, 0x8}, 0x38, &(0x7f0000000f80)={0x5, 0xf, 0x38, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x6, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x8, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "70e8e895cf2db260dc32e98bdda91f3a"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xf0, 0x40, 0xe66, 0x2}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x2707108c713a142c}}, {0x12, &(0x7f0000001000)=@string={0x12, 0x3, "85fb746ff3432279e73b5992aeea9472"}}, {0xeb, &(0x7f0000001040)=@string={0xeb, 0x3, "434ce867b26a0e590f0e40cea18d230cf66034923c0087f9f9d60af042a35c846179ccfb0f9e5d7d2b3351d57c4b050c51473f2ad27c1d0b01681ef0ec1aa122ba43218d440b28107862e2480b16c1206580743d3eefbfd6c6e62899e4f32264e778d179b160ad802f3ad05abce29d196f371cd7eb66ae3218c15831f37984b1dcbd32c9742241d4c903e1468039637e62eb64338a306de68a15a1fed801c1872ebfce51994ebfb0174c404a254ec0ad28f8d529352bd59d8ad7a74fd0dfe6945fb81db951b11fb2115797673b6c7e8e13d4b8cd55afcd8904d76a53070c2c9b7d12b24845b1ea4521"}}, {0x40, &(0x7f0000001140)=@string={0x40, 0x3, "262ca7191d00877d9d4e5e8a9483f0ccaf3454f1f32682e345dbc1a9559c5276285d28537a0dc4cea7e404813b201c63a7a65d0437f4998b03848a7954c1"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="93ece9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000014c0)={0x24, &(0x7f0000001380)={0x10, 0x4, 0xf1, {0xf1, 0x7, "04e66b83b5a5a6739729ba0c68a47c6e641cbf5818f9c60813a9e3627a90d4741bcf29e99a5d8b14f9e96a4b2423e0d27807737739cbb8f6574b4474849342d2eb39bd541326f9b033617cc28217a73ab412584efa8d3b6fcfd32d77d12a1dfdec6c189447e5500ffac924c2e58b2dbacbb16c5d3bbeee72e7a0b965ab413548dcd74191da9974afa6a9bc8b1418926292189d025242ff5698bc578d7e8a392ba39271dd8aab055a73f1cb1e94d265191b272fc1373d602480894315851af3fa03bd4874fa3efb8617a7321ba27ffe693e172a5e013928775f4c56e3be155c9162b78b31874a506b36277eaa1d36f6"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f00000011c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f4567a10"}, @global=@item_012={0x1, 0x1, 0x3, 'M'}, @local=@item_4={0x3, 0x2, 0x1, "429e5cbc"}, @local=@item_012={0x2, 0x2, 0xa, "0994"}]}}, &(0x7f0000001480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff, 0x2, 0x1, {0x22, 0x2f2}}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001500)={0x20, 0xe, 0xc9, "c77678e550a606775c01bd4055f1a4340647c82e4dee81accfe33d4578f5e5ae44073e201cc06f5665939d12f50410e207775232437a355c8a257c741c6bc33112311b06349ee0db4df019810cab4829979fa47857eebcc33c36246be06677e9249e42a20fa0d7d8e63971c2a4ea124899c252af5099226566582816a035f2a9a328f9c1af6514b991f2fcc2417bb66615e7e1fbd6f90b2fe26ecf7bb56e8186cc6a67f9264f00621741103061b2019bc3ec9edb2def4c448de4e442fb1a8faa9fae0fac2d8b740bce"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001680)={0x20, 0x1, 0x29, "5a92ff2e2715b93b8f273d8a5d22adcd40673720c8696cff9b5698c4462916ae6f29baa05c2c449e2c"}, &(0x7f00000016c0)={0x20, 0x3, 0x1, 0x8}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xe0, 0x9, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x378}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x7, 0xcd}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x7f, 0x2, 0x6, 0xff, 0x9}, 0xd7, &(0x7f0000000700)={0x5, 0xf, 0xd7, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x6, 0x0, 0xfeff, [0xff0000, 0x30, 0xc0]}, @generic={0xa2, 0x10, 0x2, "69d93e33412b8a4ae32ee8c172645f0afeb1ba5b90deb67b71428b2819786e5fc8647016976a19f08125c7db2c14282ac7bf7c38f1d73d95c9bb79033d484ae4a421263f599c01b9ac29d882ce3bb0944b68cbd6d6d50eb3f52fbf66971861a50b0aaff02021d86b5e586d123fb7297b4290817ff6be7cb27051a920b3d0ce01b9fd71f69eaaf876ccd548cfbc46fa5ca5361166632723f5412cd0f2ab2f38"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x78, 0x1, 0x9, 0x8000, 0x3f}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x7f, 0x3}]}, 0xa, [{0xfa, &(0x7f0000000800)=@string={0xfa, 0x3, "4d08b601c7172b559c91a06f28cd9a92b4cd83e31d33e0633ecaefdf6e65df4fbe92b9ff298934b0138134039d38f762849506dd0b980a3e9e4a408291fcde9f0a48df6a92aa8e14af4394e90220a4d6625e85a6e714945b733bbefb70e89b08f8fb2ca18695e20724ab69dbc536ed6eef5f75efc09cbe5843d29f9fe8a2d5b824cf8120971dab6bc9261c306ca18d6ff96bfa8c0a0249cb459ef99ada5529df3a528935c17464bf4a95f0c2bbebbee85651438f13bd0dc0f514781bfd6a8744cc8c266d108dda97f3254507badf2b18c70e73d539081422c4a6e9e4cd3fbd6266232396996390a0aa7826314be14cd053e756402b5266a0"}}, {0xf4, &(0x7f0000000900)=@string={0xf4, 0x3, "3d1409fe57900f8f37ff3f28108d5bc159025b9a1c04e20db968949da066f51dd2f5223b2ecb9acc6c0579dc341af11dc5e32b9b1c8c84beabb1dfb303f3fabc8f54bd77fbf07086d5fbd6117dbbde6ec56dd0eaefee6c55aeeeff847b88cbff41f8ce3f96ebc89b01e3eda35b2531e3deba2e90cf09971bf4ffbb4657ed946610191c56b0d2d94fcb9a70129e627e56641417434ce8fa8ef7e510dce0bd874a5d23b236d5970fb534c909487d90d0d8701ee4593d8fd180a51886e68aee8dc47497e8c1d81f7f40a709758ccceb4e2ab05fb60432233eceb698e547e44566e0253e8486da4d2bffb44ba5a4439da86080af"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xd7, &(0x7f0000000b40)=@string={0xd7, 0x3, "71590a39ba5321f47a34041e5f23b77ba41c0c945370c9c0a7ee338510bb7b7f24498f3d44077800b8737916df85df156762ad3c314f65b4c3b1e2864736c7e01bfeff4c472c6bd4f1006983858553bb5b7a22620b6314b2086d9537ef8066572e488090439ddd78fd8a60ea6195bc9867c95b68220264d1bce8ab04735cb2b65a4748edb12aa620e124244acd005e124d2314c8324175c6accb08ec7f02d307f9c12f0ac9a8d63ae8e06b9450ac1f0c77df6a78ce70ad9cea6340c5874219e4ce282efa5ed45515db78cdbe7b9f3afc4abbbb7ae7"}}, {0x88, &(0x7f0000000d00)=@string={0x88, 0x3, "a70cd7de83ff6eec15a12bf81908838ebc10db685d477500f54256d18458597aeec9954dce8eded22f581630751719221bea99a2cd13b26c2f1cb6753290b9e805ef0e4e900c29921c9010db3cc9029fbc721cfc831680073633986a385cdf73a109e6e81cfb0a671df3941fe3ccc4ddce39361a1016abb66f12eaaaaac1380517add06e7fe1"}}, {0x66, &(0x7f0000000c40)=@string={0x66, 0x3, "c9ea5e0f2c1fcb0c87901c8cf751c90ed36eb6e91b6eb928f0673c3e805041f31190284654d06cdc93dbf25e64bdd4ba9c79d0d141db297df13f2dc9e5085bac77a855eceb4f8ec6cc2ed3bc4567d34e675037ba98ef781b279f84a7946d7c19e540d65e"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x455}}]}) r2 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 00:05:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:05:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x68000000) 00:05:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'xfrm0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) 00:05:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) 00:05:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x500000000000000) [ 1602.186072][T31503] Error: Driver 'raw-gadget' is already registered, aborting... [ 1602.186087][T31503] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1602.186105][T31503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:05:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x6c000000) 00:05:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1602.186971][T31526] Error: Driver 'raw-gadget' is already registered, aborting... [ 1602.187072][T31526] UDC core: USB Raw Gadget: driver registration failed: -16 [ 1602.187091][T31526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.237682][ T5633] usbhid 3-1:0.0: can't add hid device: -71 00:05:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) (async) 00:05:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x2, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0xc, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x74000000) 00:05:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'dvmrp1\x00', 0x400}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) [ 1602.237780][ T5633] usbhid: probe of 3-1:0.0 failed with error -71 00:05:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e90d7d1fc74e1bed42ec45b2fc", @ANYRES32=r3], 0x34}}, 0x0) [ 1602.239852][ T5633] usb 3-1: USB disconnect, device number 40 [ 1602.256010][T31538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1602.256047][T31538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1602.280719][T31535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1602.607505][T31566] ------------[ cut here ]------------ [ 1602.607516][T31566] WARNING: CPU: 0 PID: 31566 at net/core/dev.c:6357 netif_napi_add_weight+0x7e8/0x9e0 [ 1602.635304][T31566] Modules linked in: [ 1602.639388][T31566] CPU: 0 PID: 31566 Comm: syz-executor.4 Not tainted 5.19.0-rc2-syzkaller-00147-gf0ec9c65a8d6 #0 [ 1602.652495][T31566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.663345][T31566] RIP: 0010:netif_napi_add_weight+0x7e8/0x9e0 [ 1602.669587][T31566] Code: b6 04 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 a4 00 00 00 48 8b 04 24 80 a0 b1 0b 00 00 fd e9 6c fd ff ff e8 88 a4 26 fa <0f> 0b e9 60 fd ff ff e8 8c c9 72 fa e9 4c fe ff ff e8 72 c9 72 fa [ 1602.690167][T31566] RSP: 0018:ffffc9000b697b18 EFLAGS: 00010293 [ 1602.692525][ T5633] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1602.696916][T31566] RAX: 0000000000000000 RBX: ffff88802cdde001 RCX: 0000000000000000 [ 1602.712526][T31566] RDX: ffff888030638100 RSI: ffffffff8752ff28 RDI: 0000000000000001 [ 1602.720592][T31566] RBP: ffff88802cdde5d8 R08: 0000000000000001 R09: 0000000000000000 [ 1602.729411][T31566] R10: 0000000000000001 R11: 000000000008a07a R12: ffff88802cdde5e8 [ 1602.739378][T31566] R13: ffff88802cdde5d8 R14: ffff88802a988c80 R15: 0000000000000000 [ 1602.748098][T31566] FS: 00007f65703bc700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 1602.757390][T31566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1602.765260][T31566] CR2: 00007f699c8a0e18 CR3: 000000001cbb4000 CR4: 00000000003506f0 [ 1602.773703][T31566] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1602.781802][T31566] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1602.790239][T31566] Call Trace: [ 1602.794116][T31566] [ 1602.797078][T31566] ? owner_show+0x130/0x130 [ 1602.801725][T31566] ? __xdp_rxq_info_reg+0x189/0x340 [ 1602.807705][T31566] tun_attach.isra.0+0x1096/0x16c0 [ 1602.813236][T31566] tun_net_init+0x45e/0x660 [ 1602.817777][T31566] ? tun_attach.isra.0+0x16c0/0x16c0 [ 1602.823582][T31566] register_netdevice+0x57d/0x15b0 [ 1602.828800][T31566] ? netdev_change_features+0xb0/0xb0 [ 1602.834378][T31566] ? dev_addr_mod+0x2c9/0x3f0 [ 1602.839307][T31566] __tun_chr_ioctl+0x2a19/0x3da0 [ 1602.847108][T31566] ? tun_chr_read_iter+0x270/0x270 [ 1602.852404][T31566] ? p4_pmu_init+0x383/0x679 [ 1602.857276][T31566] ? tun_chr_compat_ioctl+0x30/0x30 [ 1602.862783][T31566] __x64_sys_ioctl+0x193/0x200 [ 1602.867585][T31566] do_syscall_64+0x35/0xb0 [ 1602.872039][T31566] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1602.878916][T31566] RIP: 0033:0x7f6571489109 [ 1602.883480][T31566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1602.903480][T31566] RSP: 002b:00007f65703bc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1602.911933][T31566] RAX: ffffffffffffffda RBX: 00007f657159c100 RCX: 00007f6571489109 [ 1602.920039][T31566] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 1602.928682][T31566] RBP: 00007f65714e305d R08: 0000000000000000 R09: 0000000000000000 [ 1602.937028][T31566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.945352][T31566] R13: 00007ffdddf7d21f R14: 00007f65703bc300 R15: 0000000000022000 [ 1602.956192][T31566] [ 1602.959370][T31566] Kernel panic - not syncing: panic_on_warn set ... [ 1602.965959][T31566] CPU: 0 PID: 31566 Comm: syz-executor.4 Not tainted 5.19.0-rc2-syzkaller-00147-gf0ec9c65a8d6 #0 [ 1602.976460][T31566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.986524][T31566] Call Trace: [ 1602.989797][T31566] [ 1602.992735][T31566] dump_stack_lvl+0xcd/0x134 [ 1602.997358][T31566] panic+0x2d7/0x636 [ 1603.001287][T31566] ? panic_print_sys_info.part.0+0x10b/0x10b [ 1603.007283][T31566] ? __warn.cold+0x1d9/0x2cd [ 1603.011911][T31566] ? netif_napi_add_weight+0x7e8/0x9e0 [ 1603.017468][T31566] __warn.cold+0x1ea/0x2cd [ 1603.021913][T31566] ? netif_napi_add_weight+0x7e8/0x9e0 [ 1603.027419][T31566] report_bug+0x1bc/0x210 [ 1603.031784][T31566] handle_bug+0x3c/0x60 [ 1603.036044][T31566] exc_invalid_op+0x14/0x40 [ 1603.040562][T31566] asm_exc_invalid_op+0x1b/0x20 [ 1603.045411][T31566] RIP: 0010:netif_napi_add_weight+0x7e8/0x9e0 [ 1603.051488][T31566] Code: b6 04 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 a4 00 00 00 48 8b 04 24 80 a0 b1 0b 00 00 fd e9 6c fd ff ff e8 88 a4 26 fa <0f> 0b e9 60 fd ff ff e8 8c c9 72 fa e9 4c fe ff ff e8 72 c9 72 fa [ 1603.062770][ T5633] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1603.062913][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.062947][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.062976][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1603.063020][ T5633] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.c0 [ 1603.063049][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.088682][ T5633] usb 3-1: config 0 descriptor?? [ 1603.137236][T31566] RSP: 0018:ffffc9000b697b18 EFLAGS: 00010293 [ 1603.143362][T31566] RAX: 0000000000000000 RBX: ffff88802cdde001 RCX: 0000000000000000 [ 1603.151355][T31566] RDX: ffff888030638100 RSI: ffffffff8752ff28 RDI: 0000000000000001 [ 1603.159332][T31566] RBP: ffff88802cdde5d8 R08: 0000000000000001 R09: 0000000000000000 [ 1603.167312][T31566] R10: 0000000000000001 R11: 000000000008a07a R12: ffff88802cdde5e8 [ 1603.175299][T31566] R13: ffff88802cdde5d8 R14: ffff88802a988c80 R15: 0000000000000000 [ 1603.183301][T31566] ? netif_napi_add_weight+0x7e8/0x9e0 [ 1603.188808][T31566] ? netif_napi_add_weight+0x7e8/0x9e0 [ 1603.194306][T31566] ? owner_show+0x130/0x130 [ 1603.198832][T31566] ? __xdp_rxq_info_reg+0x189/0x340 [ 1603.204038][T31566] tun_attach.isra.0+0x1096/0x16c0 [ 1603.209275][T31566] tun_net_init+0x45e/0x660 [ 1603.213790][T31566] ? tun_attach.isra.0+0x16c0/0x16c0 [ 1603.219123][T31566] register_netdevice+0x57d/0x15b0 [ 1603.224243][T31566] ? netdev_change_features+0xb0/0xb0 [ 1603.229634][T31566] ? dev_addr_mod+0x2c9/0x3f0 [ 1603.234320][T31566] __tun_chr_ioctl+0x2a19/0x3da0 [ 1603.239297][T31566] ? tun_chr_read_iter+0x270/0x270 [ 1603.244426][T31566] ? p4_pmu_init+0x383/0x679 [ 1603.249034][T31566] ? tun_chr_compat_ioctl+0x30/0x30 [ 1603.254242][T31566] __x64_sys_ioctl+0x193/0x200 [ 1603.259084][T31566] do_syscall_64+0x35/0xb0 [ 1603.263531][T31566] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1603.269452][T31566] RIP: 0033:0x7f6571489109 [ 1603.273872][T31566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1603.293516][T31566] RSP: 002b:00007f65703bc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1603.301956][T31566] RAX: ffffffffffffffda RBX: 00007f657159c100 RCX: 00007f6571489109 [ 1603.309937][T31566] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 1603.317907][T31566] RBP: 00007f65714e305d R08: 0000000000000000 R09: 0000000000000000 [ 1603.325883][T31566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.333874][T31566] R13: 00007ffdddf7d21f R14: 00007f65703bc300 R15: 0000000000022000 [ 1603.341877][T31566] [ 1603.345066][T31566] Kernel Offset: disabled [ 1603.349563][T31566] Rebooting in 86400 seconds..