0x3, 0x0) r2 = socket(0x19, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) 19:31:04 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendfile(r0, r1, 0x0, 0xfb5) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) bind$rxrpc(r4, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x81, @remote, 0x7}}, 0x24) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback, @multicast2}, &(0x7f00000003c0)=0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r13, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r13, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r17, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r17, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r21, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r21, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r25}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r22, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r25, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r25, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r29}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r26, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r29, @ANYBLOB="00000000ffffffff0000000009000100686673001000000008df010000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r27, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r29, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r30 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='\b\xec[\r\x00\x00\x05\x02\xcb\x00\x03\x00', 0x2, 0x0) ioctl$int_in(r30, 0x40000000af01, 0x0) r31 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r31) ioctl$VHOST_SET_VRING_ADDR(r30, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r30, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r30, 0x4008af30, &(0x7f0000d7c000)={0x0, r31}) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r35}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r32, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r35, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r33, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r35, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r31, 0x8933, &(0x7f0000000480)={'team0\x00', r35}) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket$netlink(0x10, 0x3, 0x0) r39 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r39, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r38, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r40}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r37, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r40, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r38, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r40, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r41 = socket$nl_route(0x10, 0x3, 0x0) r42 = socket$netlink(0x10, 0x3, 0x0) r43 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r43, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r44}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r41, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r44, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r42, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r44, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r45 = socket$nl_route(0x10, 0x3, 0x0) r46 = socket$netlink(0x10, 0x3, 0x0) r47 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r47, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r46, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r48}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r45, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r48, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r46, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r48, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r49 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r49, 0x40000000af01, 0x0) r50 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r50) ioctl$VHOST_SET_VRING_ADDR(r49, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r49, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r49, 0x4008af30, &(0x7f0000d7c000)={0x0, r50}) getsockopt$inet6_mreq(r50, 0x29, 0xe, &(0x7f0000002cc0)={@loopback, 0x0}, &(0x7f0000002d00)=0x14) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000037c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x108080}, 0xc, &(0x7f0000003780)={&(0x7f0000002d40)={0xa28, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x8c, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xfff, 0x67, 0x8, 0xcb}, {0x5, 0x4, 0x4b, 0x3f}, {0x7b, 0x0, 0x9, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r9}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x87d2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r17}, {0x160, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x27}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r21}, {0x128, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8347}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffff8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x100, 0x1f, 0x7, 0x2}, {0xe568, 0x7, 0x5d}, {0xeeb, 0x6, 0x81, 0x7ff}, {0x100, 0x1, 0x9a}, {0x400, 0x5, 0x4, 0x11f1c893}, {0x3, 0xde, 0x81}, {0x401, 0x4, 0x4, 0x8}, {0x1, 0x4a, 0x81, 0x100}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xff80, 0x7, 0x0, 0x6}]}}}]}}, {{0x8}, {0x288, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r40}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r44}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x6, 0x23, 0x3f, 0x80d}, {0x800, 0x4, 0x7, 0x1}, {0x1, 0x0, 0x0, 0x3}, {0x8, 0x6, 0x8, 0x4}, {0x53, 0x2, 0x3f, 0x772}, {0x6, 0x0, 0x0, 0x8}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x0, 0x9, 0x5}, {0x5, 0x6, 0x4, 0x10001}, {0xf618, 0x6, 0x7, 0x7fff}, {0x401, 0x7, 0x3, 0x81}, {0xf228, 0x3, 0xff, 0x8}, {0x1, 0x6f, 0x5, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x158d}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r48}, {0x130, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r51}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2ef873e3}}}]}}]}, 0xa28}, 0x1, 0x0, 0x0, 0x8410}, 0x4000000) 19:31:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x2034b042, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendfile(0xffffffffffffffff, r2, &(0x7f0000000200), 0x2008000fffffffe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$get_persistent(0x3, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$get_persistent(0x3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x0, r4}, {0x2, 0x1}], {}, [{0x8, 0x4}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dlm-control\x00', 0x1a1200, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00', 0x1000) unshare(0x40000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) [ 811.062513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 811.068716][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 811.146044][ T3932] usb 1-1: USB disconnect, device number 44 [ 811.162747][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 811.169106][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 811.185232][T24839] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 811.209615][ T5] usb 3-1: USB disconnect, device number 127 [ 811.279728][T24834] IPVS: ftp: loaded support on port[0] = 21 19:31:04 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x440001, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000000109025c0001010000000904000001020d0000052406000105240200000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00000905e1c465d2ec84520833ef788d82020000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffffc) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0xac, &(0x7f00000002c0)={0x0, 0x0, 0x3, "d6f3b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x100000, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @empty}, @ib={0x1b, 0x3, 0x3, {"6330a17cd583efb07f4e58632a8dcd0a"}, 0x2, 0xfffffffffffffffa, 0x5}}}, 0x118) 19:31:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x5421, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x8001, 0x806) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="0000888e0287090009008100030047fc109400670005022e907800000000ffffffff94060000000301004e224e22", @ANYRES32=0x41424344, @ANYRES32=r6, @ANYBLOB="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"], 0x10a2) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000100)={0x10001, 0xd8d}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0xa, 0x801, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xffffffff) listen(r0, 0x80) accept4(r8, 0x0, 0x0, 0x0) close(r8) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/def/kvm\x00', 0x1000, 0x0) [ 811.537354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 811.544724][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 811.582188][T12779] usb 5-1: device descriptor read/64, error 18 19:31:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="a9", 0x1}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000140)="7093f58c56a0f4eb3ce7476c1cce59afa7151011650dc6deb268f3a13b1487d58bfd2503241625ca4da0715a26ee9f2ab1fca12c1c3d666c5c895d303636e3c0954fed81d4c636986fa42abb6cbfd2b795f0043a91c1fcb4bc41026b136899f492f451635fa8ee8078d5c424d8b68b9d14db3b7d3296eaeba3485c525dcdfee74a6ab3b35a44cf84a9eaeb4c51f74cae18d7500753b4d1a5c1d62e10e85ec5ed35bba67b46bce38a488243c2a45b73e8f4bc954d3f1c2b0711f5") splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000058000000580000000700000000000000000000030000000503000a37e03d779d83c5000003000000010400000200000000000002020000000100000000000007000000000b0000000000000e01000000010000000f00000001007f00000000000e00000002000000000200"], &(0x7f0000000000)=""/22, 0x77, 0x16}, 0x20) [ 811.826100][T24845] IPVS: ftp: loaded support on port[0] = 21 [ 811.857770][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:31:05 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="c5d325f662ebaaaaaaaaaaaa86dd6076605100403a00fe8001580000000000030200000000ffff02000000ff00000000000000000001030090780000000060b66cb8000088000000000000000000000000000000000031e8015c1c5d7206a0d80000000000f2ffffff0000000000013a000100000000"], 0x0) 19:31:05 executing program 3: socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = dup3(r2, r0, 0x80000) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$sock_ifreq(r0, 0x2000089a2, &(0x7f0000000000)={'bridge0\x00\x00\f4\xbd\x19\n\x00', @ifru_addrs=@nl=@proc}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090069000007a2e407edab0080581000000046008107a277001419000a0010000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) [ 812.002200][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 812.086076][T24878] bridge0: port 3(team0) entered blocking state [ 812.092686][T24878] bridge0: port 3(team0) entered disabled state [ 812.100888][T24878] device team0 entered promiscuous mode [ 812.106617][T24878] device team_slave_0 entered promiscuous mode [ 812.113303][T24878] device team_slave_1 entered promiscuous mode [ 812.124368][T24878] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 812.133339][T24878] device team0 left promiscuous mode [ 812.138646][T24878] device team_slave_0 left promiscuous mode [ 812.144921][T24878] device team_slave_1 left promiscuous mode [ 812.151349][T24878] bridge0: port 3(team0) entered disabled state 19:31:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600202e0a"], 0x3e80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x2080080000005008, 0x0) [ 812.202188][ T840] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 812.210276][T24878] team0: Cannot enslave team device to itself [ 812.433368][ T5] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 812.441533][ T5] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 812.449765][ T5] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 812.457161][ T5] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 812.466306][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.477388][ T5] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xE1, skipping [ 812.488067][ T5] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.501029][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.510242][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.520219][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 812.652789][ T840] usb 1-1: config 1 has an invalid descriptor of length 193, skipping remainder of the config [ 814.227902][T24894] bridge0: port 3(team0) entered blocking state [ 814.234613][T24894] bridge0: port 3(team0) entered disabled state [ 814.242675][T24894] device team0 entered promiscuous mode [ 814.248330][T24894] device team_slave_0 entered promiscuous mode [ 814.255075][T24894] device team_slave_1 entered promiscuous mode [ 814.287091][T24882] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 814.295500][T24882] device team0 left promiscuous mode [ 814.300830][T24882] device team_slave_0 left promiscuous mode [ 814.308049][T24882] device team_slave_1 left promiscuous mode [ 814.315074][T24882] bridge0: port 3(team0) entered disabled state [ 814.352452][ T840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 814.361615][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.369709][ T840] usb 1-1: Product: syz [ 814.377960][T24882] team0: Cannot enslave team device to itself [ 814.392066][ T840] usb 1-1: can't set config #1, error -71 19:31:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xfffffffffffffecf) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000040)={0x7b5, 0xfffff96b}) dup(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0x7) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/232) 19:31:07 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) fchmod(r1, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x0, 0x0, 0x32315559}}) 19:31:07 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000000)={0x4, 0xcc, "6ec8fa91157d8c959f3f48cb1aadbc898b4a4195bea3bcfc4bd97a3e0b48c93b888a1a471cd489c0d9f71e5b28e2e6708099d7b6f00b87cb441fd4d7af384bc32ae07f33ce97144f8b0dfa8ec15498a1b78b443c0c44f8522012ab14361123be90825174a6ed44624531eaf680f14afea25b39c2ac20687dba1dc720a2637b35744f79f97ececdd31150f8c5d973dd99afe531b66eb0be4403c94786c41dc212395fccdf666c70e820b333da5298c5daf3af660e60be6120055047921d572357aaa0d53571c32c0eea0d89a2"}) syz_usb_connect(0x6, 0x0, &(0x7f0000000080)=ANY=[], 0x0) [ 814.419339][ T840] usb 1-1: USB disconnect, device number 45 19:31:07 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x181083, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x3, r1}) write$ppp(r1, &(0x7f0000000000)="adf35fea8c7ad5c6c25efec8b49dbc1b2b11a2b70f8d549f14c3cb79ad134bdb248189f29943d81fdd47a380c95201acc0548ff9d14800964f46eea2ddf7801c490e13b0da36ad433bbc5b6ccba00487467af27295301b5b07c615f698a716358ba683b9182e15fdcf0a0e1ca43b7057a84fa0024e05bac2d0035978be57b53812d2eeff7607e09a7c85b09c9da7c71397a2b2c956163976cd3d9e55c108111fe31e81c15cfdbf1851cbbdc62fe8a609dd40b62f212c9a1bce34f32ce5b7572f22fb767f30f18ebb591d03e4773a393ce66381b6287a11af9bb50769", 0xdc) r2 = syz_open_dev$hiddev(&(0x7f0000000100)='/dev/usb/hiddev#\x00', 0x5dd, 0x8000) fcntl$setlease(r2, 0x400, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) [ 814.562482][ T5] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 814.611098][T24902] IPVS: ftp: loaded support on port[0] = 21 [ 814.622876][ T5] cdc_ncm 3-1:1.0: bind() failure [ 814.634282][ T5] cdc_ncm 3-1:1.1: bind() failure 19:31:07 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @local, 0x100}}}, &(0x7f0000000040)=0x84) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x80004, 0x0, [0xe9, 0x80000000, 0x80, 0x62a, 0xedb9, 0x8, 0x20]}) [ 814.685916][ T5] usb 3-1: USB disconnect, device number 2 [ 814.942179][ T840] usb 1-1: new high-speed USB device number 46 using dummy_hcd 19:31:07 executing program 1: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendfile(r0, r1, 0x0, 0xfb5) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) bind$rxrpc(r4, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x81, @remote, 0x7}}, 0x24) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback, @multicast2}, &(0x7f00000003c0)=0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r13, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r13, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r17, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r17, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r21, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r21, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r25}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r22, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r25, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r25, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r29}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r26, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r29, @ANYBLOB="00000000ffffffff0000000009000100686673001000000008df010000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r27, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r29, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r30 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='\b\xec[\r\x00\x00\x05\x02\xcb\x00\x03\x00', 0x2, 0x0) ioctl$int_in(r30, 0x40000000af01, 0x0) r31 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r31) ioctl$VHOST_SET_VRING_ADDR(r30, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r30, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r30, 0x4008af30, &(0x7f0000d7c000)={0x0, r31}) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r35}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r32, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r35, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r33, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r35, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r31, 0x8933, &(0x7f0000000480)={'team0\x00', r35}) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket$netlink(0x10, 0x3, 0x0) r39 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r39, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r38, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r40}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r37, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r40, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r38, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r40, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r41 = socket$nl_route(0x10, 0x3, 0x0) r42 = socket$netlink(0x10, 0x3, 0x0) r43 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r43, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r44}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r41, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r44, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r42, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r44, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r45 = socket$nl_route(0x10, 0x3, 0x0) r46 = socket$netlink(0x10, 0x3, 0x0) r47 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r47, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r46, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r48}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r45, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r48, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r46, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r48, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r49 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r49, 0x40000000af01, 0x0) r50 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r50) ioctl$VHOST_SET_VRING_ADDR(r49, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r49, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r49, 0x4008af30, &(0x7f0000d7c000)={0x0, r50}) getsockopt$inet6_mreq(r50, 0x29, 0xe, &(0x7f0000002cc0)={@loopback, 0x0}, &(0x7f0000002d00)=0x14) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000037c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x108080}, 0xc, &(0x7f0000003780)={&(0x7f0000002d40)={0xa28, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x8c, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xfff, 0x67, 0x8, 0xcb}, {0x5, 0x4, 0x4b, 0x3f}, {0x7b, 0x0, 0x9, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r9}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x87d2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r17}, {0x160, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x27}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r21}, {0x128, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8347}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffff8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x100, 0x1f, 0x7, 0x2}, {0xe568, 0x7, 0x5d}, {0xeeb, 0x6, 0x81, 0x7ff}, {0x100, 0x1, 0x9a}, {0x400, 0x5, 0x4, 0x11f1c893}, {0x3, 0xde, 0x81}, {0x401, 0x4, 0x4, 0x8}, {0x1, 0x4a, 0x81, 0x100}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xff80, 0x7, 0x0, 0x6}]}}}]}}, {{0x8}, {0x288, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r40}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r44}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x6, 0x23, 0x3f, 0x80d}, {0x800, 0x4, 0x7, 0x1}, {0x1, 0x0, 0x0, 0x3}, {0x8, 0x6, 0x8, 0x4}, {0x53, 0x2, 0x3f, 0x772}, {0x6, 0x0, 0x0, 0x8}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x0, 0x9, 0x5}, {0x5, 0x6, 0x4, 0x10001}, {0xf618, 0x6, 0x7, 0x7fff}, {0x401, 0x7, 0x3, 0x81}, {0xf228, 0x3, 0xff, 0x8}, {0x1, 0x6f, 0x5, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x158d}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r48}, {0x130, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r51}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2ef873e3}}}]}}]}, 0xa28}, 0x1, 0x0, 0x0, 0x8410}, 0x4000000) [ 815.144799][T24902] IPVS: ftp: loaded support on port[0] = 21 [ 815.210057][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 815.334226][ T840] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 815.391836][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.472181][ T3932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 815.524206][ T840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 815.533578][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.541621][ T840] usb 1-1: Product: syz [ 815.545933][ T840] usb 1-1: Manufacturer: syz [ 815.550581][ T840] usb 1-1: SerialNumber: syz [ 815.606028][ T840] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input158 [ 815.848594][T12877] usb 1-1: USB disconnect, device number 46 19:31:09 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getrusage(0x1, &(0x7f0000000300)) 19:31:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x400, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_QUERIER={0x8, 0x19, 0x3f}]}}}]}, 0x3c}}, 0x0) 19:31:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x53, 0x2}, @cond}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3d) write$evdev(r0, &(0x7f0000000040), 0x1b3) 19:31:09 executing program 1: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa) close(r3) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r1, 0x0, 0x5, 0x4) 19:31:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0x404a, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d220100000000ec869578b1dcd5e182fdfaf704384534191263deda5adc50cf9b00000000"], 0x0}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x80200, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev+vhost-net\x00', 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xb618719a86b1a382, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x3, 0x0, 0x0, &(0x7f0000034000)=""/80, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$int_in(r6, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x801, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000140)=r8) [ 816.222060][ T3932] usb 3-1: device descriptor read/all, error -71 [ 816.244093][T24946] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 816.253144][ C0] net_ratelimit: 18 callbacks suppressed [ 816.253163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 816.253616][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 816.275931][T24946] device bridge1 entered promiscuous mode [ 816.308990][T24950] netlink: 'syz-executor.4': attribute type 25 has an invalid length. 19:31:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x228902, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='cgroup.controllers\x00', 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='wls\x00\x00\x00\x00\x00\x00', r3}, 0x10) recvmsg(r4, 0x0, 0x40000000) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000019e, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef0}, 0xfffffffffffffe73) r5 = socket$kcm(0xa, 0x100000006, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x12}, 0x14) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) r8 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080), 0x301) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, 0x0, 0xffffff8c) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x200, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0xa, 0x2, 0x11) r12 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r12, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x14}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1}, 0xfec0) r13 = socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x894c, 0x0) sendmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x180, &(0x7f00000003c0)=[{&(0x7f0000000bc0)="0cff1e37aa06ba78b4f7b1df81b42ec7b85d42c2a13d2dac7cc1a5cfdd8d41ca3c9ccd8de5414f6fc3c4e42799a3ea516031c8ed54b32e0b9ed3d7d1bd0947529c77657bc6f2db976343bb1341ffeb2032691eb04d73e8a13fd52805583e60984c262ca2519eb6ba7e2ea00377b0cf26d67ee4525bba2c2a3dc7ada08fa01b22afa6af094f72aa85aded95c5dddb677f2c9dd69668b12c889f77dd0001f56228a9"}, {&(0x7f0000000580)="90b977dd000dd4f7c8cf887e3c8f1e79aa56c59f2d8abb214f135609afe81ee47f4287810c30ec28bc550abca9eaafb8b42367c63f9b813e39507e20545cc88fc297c3fb0c5d1db468d6156fa5f5be125d620ad6ba0e0ac5559265f9dff71921753fe14ff814283d7d9812df82ca667e1711b576950f3e39ebde9f144be60f11ad9b6c266782399abebb4516227959071482cc29920e309c4449196d8051f83a56c9f24d011a0f4db0896d93a27429ca11a3bd"}, {&(0x7f0000000a40)="873cbc134f8326031d5ce5102f12e7e254ec1b4aa1115d38ad5a3c6cf5e4a71f0022fa9fa8eae8036407f9e3fa38758bcc86bf0569541b5a28b736c285062dee5ad600f54c471d9210093eccddeee3b7d05b40765ef4e22d6ec9f859a72b263f3736ee225b8d88905289687e0d521d6ea803e85bcc508885f58c9b4bb62c87658e42431c94933188c2ef9cb1c3f271d817c7d76370bfdca4ced430c3957e861c45efcf8c7d9968b6deb2f6c80101000000000000be85750da8849af91a57ae39cf04ec2963901fb1e053fa52c91371f3f7652245df2cad064a206b56ee4701a7a68091febdec1a20c3929d730cbbeafb17c7ea38b5ce76fbdb6e7b6db292ce0f58eab0effed285b7e14e64a490d3ae1578962d60e8707a8fbae01df9278ce90def149667fc0466b1df2904baef1ae670162c72586ab638f100"/325, 0xfffffffffffffedb}, {&(0x7f00000002c0)="ceccbec6ffe28ac36b024c792c7b3c28665076f11fbb9fe3d3239c99b1a15a033e9e9346536f8dff72"}, {&(0x7f0000000700)="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"}], 0x45e, 0x0, 0x30c}, 0x20000090) setsockopt$sock_attach_bpf(r11, 0x29, 0x1b, &(0x7f0000000040)=r11, 0x52d) close(r11) [ 816.324270][T24950] device bridge2 entered promiscuous mode 19:31:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x20, 0x46e, 0x5578, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='gretap0\x00', 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000002000000f9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19:31:09 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={{0x1, 0x3, 0x1f, 0x4, 0xe7, 0x4}, 0x9}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='ndev/vhd\x00\x00\x00net\x00', 0x2, 0x0) sendmsg(r0, &(0x7f00000025c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000180)="473ab9bbfea162f73af865914669f4599394695eb772e0bec91af0e6e4157e6a1eb1b742ae5e7422a24a4b2ee9c48a43e4f13518378a11b7063459d3aca2a446281c1515dca371a391cbfb56120cbd30f5864fe01abaa4c77b50f087a7efa65e8544cdfae2a7eb742b3ffe843f880d7ec6a6f5eb68f603a86eb03125dc5f8b4a0bdea581022c2ff5e646ba4e64b9bfae9562e95532eaf411b8f9337ffb079379a29308712d93e26f838fddf3060e4e08cf8f709f8c5871c93b64483babcf8ea2acf83013043d9565219e100f8d2cd938fc21a44b60612826aa8fe1e7b794659d26a69e9768e0692bca2a01436a548a103363d3fd203a9a", 0xf7}, {&(0x7f0000000280)="17311281f63a32c30cc54e7fa7d367119e7c2e369ef5a61183af83f9ac28fbc88e2bd8b49a095ddc941c30cd73eed695eab078185b2df467fcbc45e81d7e98eb30bd797d54680e5f83e723e6e6c98e0e395f54206a559c46073495336633a7d05e349331efb36348b9f1a441719ea9a7c721b292a9f05b1fab1a10992e28abdfe3b068eaee16737bbeab95262d8b2c6e4a4fbd47410e02a77a6b0e54a62f2be3f13fc3e89344fb1f828e34cfa6f56a4c50385aefb9f114161ff7", 0xba}, {&(0x7f0000000340)="a042edecdde184a27ed017b878d0b07975e9507a34b366c821f0b5821fd2a622dc5a2677594cdd4823d7a452c4c59e42f5be9ea96305536775baa8f092348912c46e9f68b00b1dfa6632ababf315b60feea001a74b7e1b6d8b3b75f1e71a39615caf45d0ff3cb492b3905ed12bf5ed91831c881f3f7e4173dcd4d215b27a33c598a75ae4b697886d99a8176dc40fb94f3c58c15ccf015d01c083fad5978d02dcd5c37647584cd218b290560206d6f72aa12c0d61a59d888b8248cda7706485ff3ab99a8eac3730fcc8a113615a7985bbd073f60dcc75f22ed308a894f535a6dd34bf8641f7f2628d692a17bd560e80f837fb273a044c801988ca4b009c48d99622465ad3f727004d3f35e111029f097cace040722c66ee026824c602216fd359e8251b7556933fb1d3ff9537854b029b08221575db130b8bdd86c0fa84afb9b0fbeef11da56a98cc0909c21a1e2516f896534b936ebf5a25c9f5a24b384c87804b53e93d521a0cbe19846c89f625af9f83fabf555d2c16ec8ed435a9318c1e133b13fd70d6d4e4df9a82726a7e93e35f90c3a99d4f0b2299a1fc7c148effaa2c64f770f26e50f797338390bf231635d544e661f2768febc7bec313058600821f2669ba3839593891e85fdde9d73ed873d6cfa44a06c4925df1309ed0a743970454bba4b3874ac95a3c338b90b7dc1c6f6c42f9e595185db82ab0324c528a75b39f085a5bce363b347dd0843da4deb97840ca0d7c858ad1f1a95ee1fc219bcd32278bc3f1da16550576e3e37198479c5f8656706b339ed54db37b790046d9f132c7ec145438c3a64f87fd084e2f5456af1a473e2977952489e12028ba3825a7b63a83402974f261d8f6e1ae1b1ce9c5fd6a9ccd1df0b9e22daecf068b5b9c478cf9aa7119a13b743ac43326fa6ed0cf13d2dabc60752a3b59994273059e07a6a8ce302b5aa96d0588cb4ca76f2a440f98cc659ebb7189be82d3a87577d95d7891858ab6612f2a219e581c943efb7491063baf88fab67bcd1565bb758f640b04711b31b45be28f322b05089d63df6192d45d151773b5e44b8ade3608221eb9b9f132e28a513268300f4880b338224ab516dfac69fff957c1be7c4a77f4a229def432db58bab3b6879a93bdc03b75a7579da51d999067cd44280d1f77d9a73e25d01f0c98675e952b3f77ca38d00fc6d2292eef2718a1b8dd2e1ad3fda59708eb79f5751b365178e263bfc2312a5941a153977bf66c9063f4cafdbce4cf8af043ad23851124b1306ab62c44078cd75d3750af0f1f4d2cadc652c0852daaa92880ca01c4f762cb0ef744625c5c912ab4003cfb19c399190393ce7e6e98dfbcb2c55bebb6a2f1d67e48d7063f326b9c89fcfc8b44df148d4617b0738dc5c5cb1988cc19391f5fce9a5a6798d825f323486b9534c4ce03660428d327811d2c62898df6cbcd0886c4ac7c7f0d6ff62c39538ffdd894d500e11d30eed25b863938a46adb7f9ae5a25932e8a91d59344f337b9db4c3d6255f7e461378ca318d677f0cacab594ad120db3027815c98af2fb5c3ad911218f12d7fbb4e56efa9178b5a857a7131884af54edced5aff9e10a18351812b4303f1a0c022698cc2a0bf53c62673c9df5a6cd082e5686baee02e7c16264fc90493f145c2877d1d31a6444d66c88fff3cc3635811d3fc4e50c8d45dfe00d79b1140ee6ff7ef97d8658a1695b7d16b3bc03c43388c7bdc8ab02d89b5c881af2ff7b9d493aab8acf6a70dcb8d07e415f6a6fd5e814f0280dce3998834969a2c5aa7d69a958909f4f4aa0bddc4fbcaf039c55f1e78716b8df420cff1487171225a5c6a887910822f4f2883e7cf8ab2e414878ff6052b02bc880a679a81adc9aaa68b08949b1e26474e6592e9985a37ecb8e5783208eeb171188167946cc811e009c170be860527ba06b864bbcde96fb5e0749d6a2496b0cb96d6a2e239d50f9b5a1e9a88444c0f9b69a47793b3cb6145b3079cbda55748bcfd4982db35fb1dc419e779ebd39dc60e758a26b9d5ba3cf76ed69cfb4fdbeec6f5e86976541338f2beee63dc0510ee0217214d6d6c66e979cd102c7740e8da53569b96b570d6582502b6b6a8d39b8145d94794fc13a50b2ed2b509dd85c3156ed83aaf99a2eb3f34c405c64b8a2e165440611144315c16642e1f9e3865a3814e5650079d0878fc06ec5389f9387b043a0b62b9aeadfa36cc0e10ff5c5ff8585a368f5aee845886ae705967a3834b42b32f16d02c659b3596c4dfab676236788edf278a860ce0c5cc217db47c980c1785999a9f94f7f65608acd6c9f7823382a6c876ae91f521796c8d75499d4b42c69e9ef25ddb1bdd3feb1bf4033de17635b9b8c2d8c7c62e6916098a2dfb3beb6ac1872fd7ea5a42a7c91d63b89ac604c5476a0e3a556f9968cd0a87c8ca7a0b2944b59ffff4d1d98daa234639592ae1fd4801b632eff0bde715bcd002cd3862526715f65bea7b964a22055d22872ab904ecf3ba7510133af5d53266a64e9f0c4133a07f7ffc006b7b3f7087691e5c5d2b65a408356e423234b1766f0d0e30553b5ab3e1669c54dae437c72896c286b3578fea39eb6e772faa66c3c7e4920717a44f02445ae8f6686e7d556eb7e8f386cb1e96c99e04c300c7903d9a7940f06c2a6c38eb044f82d6d1ff92819b2ced04990ba5698ce7056818b065175f43070563d1cf4c5d7e1ba7058df41d6b4fc84efe4ea9058dde89e488e57723899f5b08bd841e4bab7121fd1b22fc81bc35e9ed5c8342efc344b26c23b08a8e223f9fedbfccffcfca083fdf4e4942a7f1ec602ad7c01b588139c9e074e7c8becf7da53a7c67ed7949e6bb52039b1c598da724801f4fb197d290e5995b64097e48f625f1c87a7619744acb4f3263abcf61f62a8ed2361c0af6d310385d392ed4646e2f4b5f4286f276a1d52cab01c2a3e64df70ba891f54a96d773adffe7ed7ed06a5e07f831d67f35ff13835d7c1bcda46a561c867d8ab1defcd3369c32831cb9421609db0b80a80dd061d965f6afdcd2dfe472ba80bc40880dc77fddbd521b7ad3a8f23ea56d5f1739e23b3526c16473bf3b5f5f9a60293be2d7a25676e75cc0ef9a0b012e657932f37abe7b4cc5228becd5d4979caba9d2b851e7ca3c9fb1fd54410172f61de283bb3a0975cf875485a57321948742ae61bf29b84cdcbe8b453d2e26c976b378339c1609cc90dcccfcb0f3daf43529c6400f1424680c254a54c9928e41a67e88812dd28c6279c8c1180ffaea393288b06fe4e3341d3ceb7399dc0254d288d51cfec7ac9ee28180672d8e502d9461f8b9e1675fbc4168d1c4701eb04972bd885135126ebdcf04441006fb2462f4eceb4b90493a085890e3c21b4477975027fc09adde674f750dbaed3a16a0416e8014b6174f02958bdb65bdeb03341fcc6e6223dcdde7acb6a5e6e9dd0186008129de59cd8f688ca2f9eea6f77ad7dfae61debb12314a4520abe49e44b475652a98f7037df5f3424fb9e63f627b580040d088b0f9558f23e65cbd3addeb58db0c185fa9c9882353badae6e7978daad6f363d4a02c7c672e4640fa2ada0e8b2c75727b4057bd819fee43b4666c57b9b15e1381d537620d3046658ee17f3eb6ef12849542cc349af53dec07ea01b8fcb9b7380252b9aec3327d5fe4dc5ff907d914eee05755c8a82185ab3f4fe5d3c9cd9481db41a09cb962575ec15e6b959ed09823555be11aabc922d8838d062bececdc6b055f965c996c6c035f44b946d24acd6c31f2ddbd16c589a3e11e5b6a620084f5728a58ec7bad964d7f4b0be20eddb1c2b8f9fa4f8ae793a424b7533b097f3157a91458e112c609bdc693114d975d5c3912bcb7e668e777a3c79ee15bbe5071ab4104d3decf5938fe96b91e47ed1281fd1010bdc1d46de13877380e86dd97817a7777e3abc4597a7b3f59a6d3ec0970548d0f82031fbda52d9cbb19751a8d5adaebae33d17cfdebb3653f52422b504e0abd538e8949d86ce5168b36c13f29e52f6619fd073d0fc5c5408d8f74d99141f9e66312e2670f0f3ceb29198d20d04fc76714f46bd275b262773b00d8adbe03be471c51b4c1226f7ca81527fe24e07717abd788b4a70d42ea9a9b9c0016251f641c75437a90b6a95777f820bb9aa5d2a38830ba8a5bf946090b0fadac98f6617caf54f1b7a8bd156712ef6abc2b809a3913ed0b680d5aecd8b42ab2779dfd6b1ca3395d92ea6b57ec80e2d788e4e7855942c09b1f35ddf4329102b5819c2dd086615854d6745b359ebb81bc5266b981e321eceda56d8b13c722553995865fc15fd344074c386652682236d47db39b6b4f0f9f40cd483f6989cce16f8eda442652de69a42713cbb6d2f2c8bbab426c20d6bab6a81dac30342a20f4768e9d4c4145d930a1215bf7eaabacd81a394bcdf4159a13e07911ad4f0966c638a5ba9542cb08bed1760bc0b866c8e393b9890cd184947e7e5ee40887fd5e2854deed36640d59780b23a9e4fa4ad49b5399b9cd5e21b7d52407ac0d168d34d6f22795ae93b3fbddf862abe1a48558f0e2777a2d783dbe4ff1ab1a001cd7c67d85098cc4a4f094f408b7322f326f66ba569f647a68717c3995f7fe576fb6303a28aad2b253b64b207db1e5be81d551ed6d178121234210ba45d0830aa9b4e9c763cb2f177b3add1b3c788c012f377e75904215b7b66a742b251a12412418fc33846bdb10d47d0bc686a8b4c0e33128ad3c2ddf4cf06756b24873804cc94d8c110fa9bdc46930e678777d8b8d69ac622f7a54261ec6b8bdbcdc667ad5732a0553ac0743bc2182241c160037b6daecc47f3b523215702e793c904d73f7741ea61b25bf0ad7178ed82208c83751ed9e8994e99407d366cb26577f49336ea93bd864102d2afbc74585cab78b16bc4902b74d6412f8e576fac7f049cbd75e441cc158c98f357decbf590f04b2cd897dc4edee7ba9e904dc4fc71da8afc5751acd0a03ba6cc583df84e6c0b425aea7aee6af51f5c250a556dce605aad9ab2bc88ce4fe99050ee39dd2970271ee8e9972bba454838f4bca518f27e9844ad278dae36231ed2e4080d45aa3d2be0f85692da5fad3bb68526069173da7e6bc86a8f37434dd2fd95aafd251c0ab88bdcfb6ea85ce496476623fa88a1dd41de4089e558b029cc500b3e77e99fcc40914cccc3e9560dad15fa3ae0b302265e95f40a13fa7cd340e169758684f981e63a4192ac967e761c6682b2aaed1458140b4f96b7b0e92ff2386e048183ffcc878da411d1a5613f29e5bfa1f1061586644c83966c6afc9eff31fa83bb17fb99966548b90c50d005512539c0602803ed86ee9ba5587dbed41cd69e04e1136c8d3405294c0bfee695e9d743a23a596590bc76133c435e3bda1798b71e45852b9df6856bb50b1217dc775143286205b2288ad8ceeaa713939295e0f54efbbe58330a0b77a04e7419eb8d052a8a8f1519439c9bd66f4205edf237e8e1ba617b537bb59cb7b087e4461a1f4b0fa7df2e30b057b0cc7786ad44c3214938dde7985a65a4caae637d5d30192dfdab86a52f2c522de1b55f1e53ac8e445ad6f782b17f7a80e9d1f24d268540a61ed6387c0be01e192e4f0e2785678f70a842c955b944abcfecb426218de3d0d5449a4a601d5fcd82ef3b0b44820aabffae1181ba1357d6f667b7e14528a2f04422534196a2bbb4ae7da4c00af6b2826141c2bb395daa346a1a53ba8f31070d6d6d43c4619388d481c74c13efb9753798bc86f01692a601097de1d7dc7ed3121b47171e8df1f4203aa3fb4ff6c7379", 0x1000}, {&(0x7f0000001340)="921e467a6b273a7b166c6f5e27b4d34713303f82032ce0662c94d2f244582595d5872dd811485e776515dbcfafd5e5ce337282fdbbe19404f743956342fba70394985089e57df309a63a340e29cfc2605ede6da16e2ba51e22c01b3704efc11f5a8dc5f5c4833263858296df0e844d970ed88f69bedd6494461298064583e3bc9d35d9806a8a9e619adb68469fdc6d6dc3d51f796868a1076997ee1a7b030e0831233ffe9a05edfbbfef", 0xaa}, {&(0x7f0000001400)="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", 0xfa}, {&(0x7f0000001500)}, {&(0x7f0000001540)="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", 0x1000}], 0x7}, 0x4000) ioctl$int_in(r1, 0x40000000af01, 0x0) [ 816.572271][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 816.578679][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 816.622410][ T3932] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 816.632281][T12877] usb 1-1: new high-speed USB device number 47 using dummy_hcd 19:31:09 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000300)="fa", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000080)='vboxnet1vmnet1^/}::.Rvmnet0*\x00', 0x1d) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 816.732294][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 816.738646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 816.783774][T12855] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 816.872227][T12877] usb 1-1: Using ep0 maxpacket: 16 [ 816.982183][ T3932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.993611][ T3932] usb 3-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.40 [ 817.002894][ T3932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.012036][T12877] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 817.042028][T12855] usb 4-1: Using ep0 maxpacket: 32 [ 817.047807][ T3932] usb 3-1: config 0 descriptor?? [ 817.063826][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 817.070029][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 817.164294][T12855] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.175401][T12855] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 817.188519][T12855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 817.195408][T12855] usb 4-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.40 [ 817.204594][T12855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.216168][T12877] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 817.225368][T12877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.233545][T12877] usb 1-1: Product: syz [ 817.237770][T12877] usb 1-1: Manufacturer: syz [ 817.242468][T12877] usb 1-1: SerialNumber: syz [ 817.255730][T12855] usb 4-1: config 0 descriptor?? [ 817.296851][T12877] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input159 [ 817.302539][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 817.312357][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 817.372215][ T3932] usb 3-1: string descriptor 0 read error: -71 [ 817.485785][ T3932] usbhid 3-1:0.0: can't add hid device: -71 [ 817.492072][ T3932] usbhid: probe of 3-1:0.0 failed with error -71 [ 817.524937][ T3932] usb 3-1: USB disconnect, device number 4 19:31:10 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000080)=0x7fff) syz_usb_connect$hid(0x0, 0xfffffffffffffdc3, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x4041, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xfe, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x3f, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x192, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0xd0, 0x51, 0x8, 0x4}}]}}}]}}]}}, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) 19:31:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x4a0, 0x280, 0x280, 0x0, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000000040), {[{{@arp={@empty, @empty, 0x0, 0xff, @empty, {[0x0, 0x0, 0x1fe, 0x101, 0xff]}, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x5019b1ad9c3d5460]}, 0x0, 0x3, 0x7ff, 0x8, 0x9, 0x400, 'team0\x00', 'tunl0\x00', {}, {}, 0x0, 0x40}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @loopback, @local, 0x2, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast, 0xf, 0x1}}}, {{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xd3, 0x95c}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) 19:31:10 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0xffffffffffffffae, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x200, 0xfffffffffffffffd, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000002c0)={0x2000000, 0x6, 0x1a}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r2, 0xeb, '\x00r%', "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"}}, 0x110) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x80000000, 0x404000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x7fff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xa) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r12) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000d7c000)={0x0, r12}) r13 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x1, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x560241c128709483}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20085c42) mknodat(r5, &(0x7f0000000340)='./file0\x00', 0x8, 0x3) unshare(0x40000000) [ 817.599339][T12779] usb 1-1: USB disconnect, device number 47 19:31:10 executing program 4: r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='f\x00\x00Nfo\x00') r2 = clone3(&(0x7f00000003c0)={0x20c0000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0xd, 0x0, &(0x7f0000000200)=""/233, 0xe9, &(0x7f0000000300)=""/168}, 0x40) syz_open_procfs(r2, &(0x7f0000000400)='net/route\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) getdents64(r1, &(0x7f0000000100)=""/231, 0xe7) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) [ 817.769094][T24989] IPVS: ftp: loaded support on port[0] = 21 [ 817.784039][T12855] topseed 0003:046E:5578.0025: item fetching failed at offset 497743058 [ 817.792984][T12855] topseed: probe of 0003:046E:5578.0025 failed with error -22 19:31:11 executing program 5: ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000280)={0x4, 0x40, &(0x7f0000000180)="c34880a44225b8c8a8699783c1d81409be28b49f090bd4e63c148699ecace927c3af4c32327340f5ec338c41f9af35060ab0eef5c3873dd66036cd8732e0dacc1504a04db8527a475babddc72c15c07737599ec94674a53ac24abe6f5694e4d828b63ac0b82dbfe69b8c54fd1794f44e7e7ea3b5e8e8f28d6f1080429f21e82bbbc3c9ecae89df65a2227ae390f5ef50e13a62c28dfa791da04bfb7dfb7fa0bef4477cbbe8e3a1e782db0feaffc768cc38116d3cab56640d7e452f91b78515e64385834f468e32a583973cb1744d81ba72958f7912e995b7c0505117fcb40c84", {0x6, 0x7, 0x30324c4a, 0x8, 0x46d, 0x40, 0x9, 0x5}}) r0 = syz_open_dev$hidraw(&(0x7f00000002c0)='/dev/hidraw#\x00', 0x3ab8, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0xfffffeff, 0x7, 0xffffcda3, 0x7, 0x1}) set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = dup3(r2, 0xffffffffffffffff, 0x140000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)=0x0) mq_notify(r5, &(0x7f0000000880)={0x0, 0x31, 0x4, @tid=r6}) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4a100, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x70000, {0x77359400}, {0x4, 0xc, 0x8, 0x7, 0x2, 0x7f, "47d49435"}, 0x14, 0x2, @fd, 0x4}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r9, &(0x7f0000000640)={0x11, 0x0, r10, 0x1, 0x1, 0x6, @local}, 0x14) ioctl$int_in(r9, 0xe6c83c07821d79e3, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000740)={0x5, @sdr={0x35323645, 0xfffffffa}}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) 19:31:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) [ 817.982832][ T5] usb 4-1: USB disconnect, device number 12 [ 818.052433][T12779] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 818.092331][T24989] IPVS: ftp: loaded support on port[0] = 21 19:31:11 executing program 4: syz_usb_connect(0x0, 0xffffffffffffff9f, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x7c, 0xab, 0xad, 0x8, 0xeb1a, 0x2800, 0x42bc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) [ 818.162069][ T840] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 818.301917][T12779] usb 1-1: Invalid ep0 maxpacket: 512 [ 818.452246][T12779] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 818.459975][T12780] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 818.552175][ T840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.563364][ T840] usb 3-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.40 [ 818.573550][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.583904][ T840] usb 3-1: config 0 descriptor?? [ 818.712042][T12779] usb 1-1: Invalid ep0 maxpacket: 512 [ 818.717790][T12780] usb 5-1: Using ep0 maxpacket: 8 [ 818.724816][T12779] usb usb1-port1: attempt power cycle [ 818.822374][T12777] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 818.902241][ T840] usb 3-1: string descriptor 0 read error: -71 [ 818.914583][T12780] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 818.922646][T12780] usb 5-1: can't read configurations, error -22 [ 819.032277][ T840] usbhid 3-1:0.0: can't add hid device: -71 [ 819.038570][ T840] usbhid: probe of 3-1:0.0 failed with error -71 [ 819.072052][T12777] usb 4-1: Using ep0 maxpacket: 32 [ 819.078465][ T840] usb 3-1: USB disconnect, device number 5 [ 819.123777][T12780] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 819.202044][T12777] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.213185][T12777] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 819.226123][T12777] usb 4-1: config 0 interface 0 has no altsetting 0 [ 819.232880][T12777] usb 4-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.40 [ 819.242082][T12777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.254403][T12777] usb 4-1: config 0 descriptor?? 19:31:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 19:31:12 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000800040044000000120012000c0001007665746800000000182d38d4e4e4f78af39bdefb82bfdab89422a2dee22c8809be14ec01000a00010000000000f074449edf9d5bc254f1ae7f7da85719441d96ebdabfa2c63d0f13ebab948050e26663253e99e12111497c92b7728bdc8b996425c2a051b5fb1fb5a880a608816cdb3380974ddaf967d7a1a6b87386350cede903f03e543aebdc5d1ceca06d5d01838180ee3c69119380eb68efd2b41cf2a8ffd47d119414a800e546784fda702d1d9c352ef08feee5e9657b6da1999640065eb02260ad1f83eb6882f2a67f7611c60f1b80cea73cb07c0d3bce9b0000000000000072a3189ce341fbcdc6a51ee8b142a9f027a3c425f201d72467cc6c4b1db87760cb214c80ad5801b085605b08eaca4aedaf653c5898b8600a406aef9740944cd1d782e895de4589cf5ddca0c2dbb70e4f4b401bac365432fb4667b2a51dfdc4dcbfb01e04d273e20cd3f8882d17060fcd8ed45f50f3b8dd25dc84b628183b4f109a83f7cfc7d16bfca283206d655be3615d5363189ea89c5cad11f9e4278df3a724519346fa0c39fc2bf5490faf10741db5e74698092dd2432149691a5625ad3deac899da303f8b11d41d05bf3da841b52648b045a97f26dab1703f4eda4c6a5f8eb847549d00f90d07d41225b30f922f2b52daf92f188edfdcb5be38e1c34400839e4a14f1e747547990dab5102e9e5587a5315ec16c25661fd88e717d95293d6cbd02f86bcc955f14c5fe19aa2cd56349bb90e3791ff269be83ef4e62ed591e7451fc8561dd52d06822d668eb66154b481042c16d10cc03a9046bbc8bf0bacd38ed4be381db118aa87fff42db469213ae97b7f8793a95df612c25124a5dd82952bc0ac03603f63d3ca3239d", @ANYBLOB="7e6ccd86e2c36a161eb94a53df2ce4c1a4fa20903cc88058aea14ceaa491b92f1b761464e36fc60d81020f9f277a4c9fffa74fafaacd4181900e867013ab0e2ad3951546fb50569a5042796d75419d1f5cfe7741b92b13ca119052854ac7e282ab378852dfb4b863cb32be7697851e8a4ed1096a", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 819.373448][T12780] usb 5-1: Using ep0 maxpacket: 8 [ 819.444518][T12779] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 819.545156][T12777] topseed 0003:046E:5578.0026: item fetching failed at offset -966934718 [ 819.554235][T12777] topseed: probe of 0003:046E:5578.0026 failed with error -22 [ 819.564187][T12780] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 819.572238][T12780] usb 5-1: can't read configurations, error -22 19:31:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x9a}, 0x1, 0x6c}, 0x0) 19:31:12 executing program 1: socket$kcm(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0xffffffffffffffec) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuset.mem_exclusive\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) close(r1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000240)) r2 = socket$kcm(0x2, 0x2000000000003, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f0000000200)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') close(r2) close(r0) close(r2) recvmsg(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002d40)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) socket$kcm(0x10, 0x0, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffb4, 0x0, 0x0, &(0x7f0000000440)=""/134, 0x86}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() 19:31:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f0000000840)=""/98, 0x62}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}, 0xe0f5}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) rmdir(0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x84, 0x0) write$apparmor_exec(r4, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x4, 0x101, 0x9}}, 0x20) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f00000003c0)=""/238) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) r5 = socket$inet(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) socket(0x100000000011, 0x0, 0x0) stat(0x0, &(0x7f0000000500)) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) [ 819.627569][T12780] usb usb5-port1: attempt power cycle [ 819.641906][T12777] usb 4-1: USB disconnect, device number 13 [ 819.702055][T12779] usb 1-1: Invalid ep0 maxpacket: 512 [ 819.852077][T12779] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 819.874754][T25059] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.884325][T25059] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.932374][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.965816][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.976264][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.988437][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.999990][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 820.010241][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 820.021027][T25060] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 820.124009][T12779] usb 1-1: Invalid ep0 maxpacket: 512 [ 820.129789][T12779] usb usb1-port1: unable to enumerate USB device [ 820.372029][T12780] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 820.623506][T12780] usb 5-1: Using ep0 maxpacket: 8 19:31:13 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000d9ee18ee5610ac05730240000102030109022400010100000009040000000301020009210000000122000c4951390faf00090581030000000000"], 0x0) 19:31:13 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0xa, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r2], 0x1c}, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getuid() getgroups(0x4, &(0x7f0000000140)=[0x0, r3, 0x0, 0x0]) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) fdatasync(r5) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x5, 0xac1, 0x0, {0x6, 0x9c93, 0x2, 0x3, 0x8000, 0x400000000000, 0x0, 0x8, 0xffffffff, 0x6, 0x0, r2, r3, 0x40}}}, 0x78) r6 = dup(r0) ioctl$TIOCSTI(r6, 0x5412, 0x3) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) 19:31:13 executing program 3: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) fallocate(r0, 0x0, 0x0, 0x6747) 19:31:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r5, 0x1}, &(0x7f0000000040)=0x8) 19:31:17 executing program 1: timer_create(0x3, 0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000340), 0x0) 19:31:17 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'\x04yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\t\x00\x00\xfe\xff\xff\xff\x00\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\xff\n\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) 19:31:17 executing program 4: gettid() creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x9a}, 0x1, 0x6c}, 0x0) 19:31:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf10", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:31:17 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x400000080000000, 0x400000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000200)=r0, 0x1) socket$inet(0x10, 0x5, 0xa) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='\x06C\x94i\xf2P\x00\x00io\x00', 0x80000, 0x0) close(r2) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7f, 0x402000) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x1ebadd0077db1000, 0x1ffffffc, 0x0, &(0x7f0000000140)=""/95, 0x0, 0x6000}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000640)=""/8) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000340)={0x6, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x800, 0x0, 0x1c, 0x4, 0x0, 0x8, 0xfb, 0x2], 0x3000}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)={0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634, 0x5, 0x1, 0xa4b, 0x9}) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000580)=""/85, &(0x7f0000000600)=0x55) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) 19:31:17 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x48080, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/143, &(0x7f0000000140)=0x8f) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) 19:31:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x11c, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x18}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ec}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 19:31:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x7, 0x7d1201) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r5, 0xfffffffb}, &(0x7f00000000c0)=0x8) set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) 19:31:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000008c0)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000900)) accept4$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14, 0x80000) rt_sigpending(&(0x7f0000000040), 0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="00000000020001000400140024002400c52c39b37e101b35d4bce786223a651e2dc42e0d03b9336e7aa5d2cfb80000000801250002000000080025000400000008000a00", @ANYRES32=r2, @ANYBLOB="0800110020000000"], 0x68}, 0x1, 0x0, 0x0, 0xc82}, 0x0) 19:31:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000200"/88], 0x58) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x20000000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f00000000c0)={0xaf01, 0xffffff30, 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000200)="0bec32ce0fbc56e4a4e1a8e25c0e1071612af31168e29b9e3dbcc7020e90c9b9d2462447cb1b2eaa7d330afd198a324e0521cc86ce9b0e67b4b40ecc4b073c5f9152e7000c84427ebc9b25e9058c2a302a3eb7685fc155e599b39cbacc020b049d8a0c9278e332afc9679587dc0001cf3546a0beb1d508371c298f8c7e7ebefac19502eb9b1a1790de60251655772e6664878a61ce71b109feaae231558276c130e6c131fcd6a8ffaae8aa38ea3183c64871b8ab2489b8d44d7a8c8f2fe94aa30ac670622fc6394433a776498cd5486e5463c0a2bd027b435b556fc576012ea7dfe690898fc1", 0xe6) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000f000600000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2a0000, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7, &(0x7f0000000000)}], 0x4924924924925f1, 0x0) 19:31:17 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x2c2, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000400)={0x0, 0xd9f, 0x4, {0x1, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177863b1f3c453ffc3707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000500)={0x2, @vbi={0x1000}}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x8f) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi={0x0, 0x6, 0x0, 0x0, [0x80000000], [0xfffffffe], 0x2}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000380), 0x0, 0x9, 0x7fff, 0x0, 0xffffff7f, 0x8000, {0x0, 0xffff, 0xfbf8, 0x6, 0x6, 0x1, 0x4, 0x8000, 0x1, 0x8000, 0x7, 0xd4, 0x6, 0x3, "24c26888281bfdf66453899c22ea5d6b922b00"}}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) r4 = gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x701000, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r4, 0x10000, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) [ 824.473273][ T3932] usb 1-1: device descriptor read/64, error -71 [ 824.751982][ T3932] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 824.991968][ T3932] usb 1-1: Using ep0 maxpacket: 16 [ 825.112132][ T3932] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 825.282269][ T3932] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 825.291371][ T3932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.299555][ T3932] usb 1-1: Product: syz [ 825.303773][ T3932] usb 1-1: Manufacturer: syz [ 825.308366][ T3932] usb 1-1: SerialNumber: syz [ 825.355182][ T3932] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input162 [ 825.597268][ T3932] usb 1-1: USB disconnect, device number 55 [ 826.411973][ T3932] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 826.651947][ T3932] usb 1-1: Using ep0 maxpacket: 16 [ 826.652386][ C0] net_ratelimit: 12 callbacks suppressed [ 826.652450][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 826.668889][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 826.772066][ T3932] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 826.942105][ T3932] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 826.951243][ T3932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.959446][ T3932] usb 1-1: Product: syz [ 826.963695][ T3932] usb 1-1: Manufacturer: syz [ 826.968298][ T3932] usb 1-1: SerialNumber: syz [ 826.982199][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 826.988214][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 827.016225][ T3932] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input163 19:31:20 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) dup2(r1, r4) 19:31:20 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf0, 0x7e, 0x8e, 0x10, 0x112a, 0x5, 0x4e9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9b, 0x0, 0x2, 0x13, 0x13, 0x32, 0x0, [], [{{0x9, 0x5, 0x5, 0x12}}, {{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) r7 = gettid() tkill(r7, 0x12) tkill(r7, 0x1000000000016) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x30081, 0x0) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000300)={0x18, 0x0, {0x1, @random="a37efc2f990d", 'eql\x00'}}) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000040)=r7) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000000c0)=ANY=[@ANYBLOB="34845d300fc0a0777c6f5a3dca80e14f63454d1f787cdfc7305cbca033c4a6a88beac072ade2b790e06cc1c92b1ad31affb5bea98f78dff2e1b0f4e074f4fa6bfbd5f68559a9e501a9719613adc0f7dcb0992f8c6c8838493b23486ba8a8f2a822a146bb9336dbbfbaeff59ab29c6c8101f0d55b420919a81c1cc2c8c31132926f75e08d1830f1934044e2b99e3b", @ANYBLOB="19d81d70c1c3afee1d00907087c65a46177c26378162080a0b92a86d89f87e58b60f0696852aeb14e71e860562f04c02bd6d6a7cc9782549f2260dc47540253cce004ae94c5f69cad37b1c24903ea8c14b01169536016862a3a2e5c240a007d66aeebe52801910e5ed4777e30ce17d45f458eb1c9a589557daa2c1147d0be3dbb5b0bef39154596f9aecad175cc6d5f1da06578c67eb35e32d6330f85a9afd8071caddfd35b31fca22b21a9d65f584b8d6194707a053294d74353352ff7e7d", @ANYRESHEX=0x0, @ANYPTR64, @ANYRESDEC=r3, @ANYRESHEX=r0]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x3) 19:31:20 executing program 3: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000011f79a08070ada0048ad000000010902240001000002000904b90002c750dc000905850b000400000009050103d600000000"], 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 19:31:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x800008000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe8082bd0cbd6eac111038d3909000000fff5dd0000001000020000000000000000cfb193e7ee0000", 0x58}], 0x1) 19:31:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x40820000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:31:20 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x301, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0xd8fb786a5f6aaf4b, {0x2, 0x4e22, @multicast2}, 'veth0_to_hsr\x00'}) [ 827.132227][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 827.138275][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 827.160592][ T3932] usb 1-1: USB disconnect, device number 56 19:31:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000002c0)="73f2f3f8e95c3d7054c1d7e2d957e82f", 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) arch_prctl$ARCH_GET_CPUID(0x1011) dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="38e9da56857dde2300000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r12) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000d7c000)={0x0, r12}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r12, 0x84, 0x70, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0x40e88747, @mcast1, 0x5}}, [0x7, 0x3f, 0x7ff, 0xa000000000000000, 0x546, 0x8, 0xa3, 0x9, 0x7, 0x9, 0x4, 0x4, 0x100, 0x1, 0x400]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={r10}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r10, 0x609}, 0x8) [ 827.314242][T25178] IPVS: ftp: loaded support on port[0] = 21 [ 827.429228][T25189] IPVS: ftp: loaded support on port[0] = 21 [ 827.452487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 827.458737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 827.465301][T12780] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 827.542215][T12855] usb 5-1: new high-speed USB device number 13 using dummy_hcd 19:31:20 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f00000000c0)='/dev/vhost-net\x00'], &(0x7f0000000180)=[&(0x7f0000000140)='/dev/vhost-net\x00']) ioctl$int_in(r0, 0x40000000af01, 0x0) [ 827.697461][ T3932] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 827.702422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 827.711340][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 827.717980][T12780] usb 4-1: Using ep0 maxpacket: 8 [ 827.782594][T12855] usb 5-1: Using ep0 maxpacket: 16 [ 827.852105][T12780] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 827.860534][T12780] usb 4-1: config 0 has no interface number 0 [ 827.866812][T12780] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 827.878137][T12780] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 827.889247][T12780] usb 4-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=ad.48 19:31:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000ddff00240012000c000100626f6e64000000001400020008000400586500000800010004000000"], 0x44}}, 0x0) [ 827.898436][T12780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.906795][T12855] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 827.911050][T12780] usb 4-1: config 0 descriptor?? [ 827.920229][T12855] usb 5-1: config 0 has no interface number 0 [ 827.926471][T12855] usb 5-1: config 0 interface 155 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 827.936490][T12855] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=4e.9a [ 827.945696][T12855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.974547][T25212] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 827.983034][T25212] (unnamed net_device) (uninitialized): up delay (25944) is not a multiple of miimon (100), value rounded to 25900 ms [ 827.991270][T12780] adutux 4-1:0.185: ADU218 now attached to /dev/usb/adutux0 [ 827.996901][ T3932] usb 1-1: Using ep0 maxpacket: 16 [ 828.042918][T12855] usb 5-1: config 0 descriptor?? 19:31:21 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x0, 0x4}) [ 828.087124][T12855] redrat3 5-1:0.155: Couldn't find all endpoints [ 828.122153][ T3932] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:31:21 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e6526808720c1100f432ff0f000009021b0001000001d1f000000705810000000000000000000000cc"], 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 19:31:21 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7fe, 0x101) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = dup2(r2, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xe71a, 0x46400) [ 828.292270][ T3932] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 828.301514][ T3932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.310022][ T3932] usb 1-1: Product: syz [ 828.314289][ T3932] usb 1-1: Manufacturer: syz [ 828.318944][ T3932] usb 1-1: SerialNumber: syz [ 828.390509][ T3932] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input164 19:31:21 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100001b5a94401aeb065008000000000000001b0001000000000904db00015a963c00090582000000000000719bc520efbf4aedeab3ed84d3d014a7d7f8b378d013dee8e72f1136348cdc91b22c2c3360c5903aabbbd471bb6634543345aeff0f00005188ecde869199ab8938861508e8cb91385d8de95e2601396c0849a352320807f6cfd07d2364ea09cca1e30537520f23c2745b44d9a4118c2f40f44467cbe397613502e0110d0b7235e9ddaf1e3d2a00"/205], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x201000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2d, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000140)={0x0, 0x32314d59, 0x280, 0x168, 0x0, @stepwise}) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x5004, 0x24) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x9) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000180)="552e286f2d8f3290d7ee8e310f2e53e975c54f976b33aeaad524a976ebff12b061eba7591c2301a8e0c1e554ffa4d1bb49ce5a29b1ff49a11867d2ac47a98ff90d84c7f505ba70542b0f4599e279e8a7d056dd0e9ab8bcf98ec83c79c8989b6e21d55b43fbb2947e1ced709e764f8d3ed69308cf2784656b90d3c3b32a1370b05026b584f57f1e09cf99a75ee6cb2088616ca03c208cb9264c98df75bb76adb6a048b3d0434d7534d1b787d3d5aea10c9c838303dd") ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x5, @pix_mp={0x5, 0x396, 0x32315241, 0x3, 0x5, [{0x9efe, 0x6}, {0x7, 0x2e}, {0x400, 0x5}, {0x80000001, 0x6}, {0xffff7fff, 0x6000000}, {0x5}, {0x5, 0xf4e}, {0x8, 0x4}], 0x4, 0x2, 0x4, 0x0, 0x1}}) [ 828.492069][T12780] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 828.586230][T12777] usb 4-1: USB disconnect, device number 14 [ 828.648148][T12779] usb 1-1: USB disconnect, device number 57 [ 828.743848][T12780] usb 2-1: Using ep0 maxpacket: 8 [ 828.793550][T12780] usb 2-1: no configurations [ 828.798371][T12780] usb 2-1: can't read configurations, error -22 [ 828.821928][ T3932] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 828.953095][T12780] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 829.102010][ T3932] usb 3-1: no configurations [ 829.106690][ T3932] usb 3-1: can't read configurations, error -22 [ 829.201970][T12780] usb 2-1: Using ep0 maxpacket: 8 [ 829.253780][T12780] usb 2-1: no configurations [ 829.258452][T12780] usb 2-1: can't read configurations, error -22 [ 829.262022][ T3932] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 829.265084][T12780] usb usb2-port1: attempt power cycle [ 829.471968][T12855] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 829.552365][ T3932] usb 3-1: no configurations [ 829.557161][ T3932] usb 3-1: can't read configurations, error -22 [ 829.563850][ T3932] usb usb3-port1: attempt power cycle [ 829.712088][T12855] usb 1-1: Using ep0 maxpacket: 16 [ 829.832088][T12855] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 829.981963][T12780] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 830.012618][T12855] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 830.021785][T12855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.029863][T12855] usb 1-1: Product: syz [ 830.034132][T12855] usb 1-1: Manufacturer: syz [ 830.038792][T12855] usb 1-1: SerialNumber: syz [ 830.087698][T12855] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input165 [ 830.223988][T12780] usb 2-1: Using ep0 maxpacket: 8 [ 830.235348][T12779] usb 1-1: USB disconnect, device number 58 [ 830.262408][T12780] usb 2-1: no configurations [ 830.267152][T12780] usb 2-1: can't read configurations, error -22 [ 830.293040][ T3932] usb 3-1: new high-speed USB device number 8 using dummy_hcd 19:31:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) r1 = gettid() tkill(r1, 0x12) tkill(r1, 0x1000000000016) syz_open_procfs(r1, &(0x7f0000000000)='stat\x00') writev(r0, &(0x7f00000000c0), 0x0) 19:31:23 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/^tv/vhoRt-net\x00', 0x2, 0x0) r1 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="25a1bfa9cdeb1c13883d6565c7f9b0c4ee84f09957ff4b87559e22cbd9719d6e6d06d2d37fc33ab88e1114b2c5c9c9e1bf9a3cca10a870d40dad8831814af815d15cbc0e3d72a565289c7fe13adf6e70f96c1fb9fedc1702c085a2e9741b49167618b919de615f266612d9b0d16672f557ba6086f4005deb3ed11236908021680a8c7d2fe5f958ba5f9e2b0c0fcb8f619962c84be4833eca4bc9fc2077f96d3dbe950452652917aa3949ea79565355a405543c686cb82ae1eac6934038d26a96360f1e1bfbd96564dfe439975527beb4f83d9950460274156203be86d334eb688206c391ec2ca0328875d38a4d6cd3", 0xef, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x351d72df88b35552, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000240)=0xa56d) keyctl$revoke(0x3, r1) ioctl$int_in(r0, 0x40000000af01, 0x0) 19:31:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000055000000a9007e07806b2fef929de3f2f6839c2670121f485dd7d1b330d5a36b831934db01979f33394fcdb3c0d9e9ad43715a13186b14b72e92571564e088e1f290d0288e55a37e7dbdc2eb39f44d074fbf2baf18ee0f3dee"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19:31:23 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000010a40500174000d388030109022400010100e00109040000050000000000000000000122e2cf2198ac615425bea37ee536579e52036e03000000"], 0x0) msgget(0x1, 0x6) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$int_in(r2, 0x2a5a, &(0x7f0000000000)=0x39) [ 830.374089][T12777] usb 5-1: USB disconnect, device number 13 19:31:23 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) r6 = fcntl$dupfd(r2, 0x406, r5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000000c0)=0x82a) ioctl$int_in(r1, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) fcntl$notify(r0, 0x402, 0x8) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost\x02\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) fsetxattr$security_selinux(r9, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:hald_dccm_exec_t:s0\x00', 0x26, 0x2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$KDMKTONE(r7, 0x4b30, 0x1) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x3f, 0x9}) [ 830.432209][T12780] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 830.582062][ T3932] usb 3-1: no configurations [ 830.586863][ T3932] usb 3-1: can't read configurations, error -22 [ 830.672017][T12780] usb 2-1: Using ep0 maxpacket: 8 [ 830.682008][ T840] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 830.712204][T12780] usb 2-1: no configurations [ 830.717029][T12780] usb 2-1: can't read configurations, error -22 [ 830.724459][T12780] usb usb2-port1: unable to enumerate USB device [ 830.742543][ T3932] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 830.813848][T12779] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 830.921964][ T840] usb 4-1: Using ep0 maxpacket: 8 19:31:24 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000040)) [ 831.032150][ T3932] usb 3-1: no configurations [ 831.037498][ T3932] usb 3-1: can't read configurations, error -22 [ 831.052362][ T3932] usb usb3-port1: unable to enumerate USB device [ 831.052940][ T840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.070277][ T840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 831.083258][ T840] usb 4-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 831.083342][ T840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.102122][T12779] usb 1-1: Using ep0 maxpacket: 16 [ 831.114806][ T840] usb 4-1: config 0 descriptor?? [ 831.242304][T12779] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.252674][T12779] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 19:31:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ifreq(r1, 0x8930, &(0x7f0000000080)={'ip_vti0\x01\x00\x00\x00\x00\x00\x00\x00 ', @ifru_map={0x3f, 0x1, 0xfc00, 0x6, 0x1, 0x20}}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x400, 0xffffffffffffffff, 0x400, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', @ifru_flags}) 19:31:24 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) accept4$inet6(r1, &(0x7f0000000140), &(0x7f0000000180)=0x1c, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000000c0)={{0x8a, 0x2}, {0x5, 0x8}, 0x3, 0x6, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) [ 831.432370][T12779] usb 1-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.40 [ 831.441677][T12779] usb 1-1: New USB device strings: Mfr=211, Product=136, SerialNumber=3 [ 831.450105][T12779] usb 1-1: Product: syz [ 831.454344][T12779] usb 1-1: Manufacturer: syz [ 831.458985][T12779] usb 1-1: SerialNumber: syz 19:31:24 executing program 1: setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2000000}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f00000de000/0x1000)=nil, 0x1000, 0x2, 0x40cd072, r2, 0x0) [ 831.585146][ T840] hid (null): bogus close delimiter [ 831.594903][ T840] hid-generic 0003:1E5E:0313.0027: bogus close delimiter [ 831.602280][ T840] hid-generic 0003:1E5E:0313.0027: item 0 1 2 10 parsing failed [ 831.610457][ T840] hid-generic: probe of 0003:1E5E:0313.0027 failed with error -22 19:31:24 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)={0x20, 0x2c, 0x5, 0x0, 0x0, {}, [@typed={0xc0, 0x57, @u64}]}, 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0) 19:31:24 executing program 1: socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x7, @mcast2, 0xfffffeff}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000400)="cfc99e34fda73e9a47d0f9878acbcd3919be5f36ab1b9095db6ced97afd09ffd9ec86258e48cd9b1a9803b6a02a72f17bf4bdd9b3887215224c218d3320ecffebe49acfda6eca14c14bb7dfa039f92d542b193e135bd58c9e349c5d21e10b35e78c03cce002b4871da2d478b7faf8f7539240a6ca58c893eed4a83dc058ab3e9891868b7712bfa601a9ab9b07205123f4df5ad0958b781860aedc14586081cbe99236cabaca446fbc92f3fd8fcaf5643a832f40257a9bb42a5fd54b24a49997e2311ab5a20c466721093d53a58df544ec8", 0xd1}, {&(0x7f0000000500)="77dfd373bc75a670658d2fbf38bbe533ba15aa6c6226390d2e9441b9087bc0d88028ac6f", 0x24}, {&(0x7f0000000540)="7d736a5a0e2b2fcc89e7a980ba67876eb9e77c859463397fe5139a716608c8d6989529b6ff357f37cceda19f445eeec5ad960ed36602b3c974d7b65935310a510fca2f8097aaf9058f8fb589bd3b262d95fc4fa5b25bdb8c5b665f3fa7f272a25ecc50d80d14c343f40c5b6216a2f894fbf8e4dad211d98d43bf0a3b3101e610d2aaf66a32a2c5d3dffe1da46fef1d4f4201c35e59d7367accddad63d6a8a3a1740d1c2139cd7508b49404e5819dacd5eac04d8afcec5ce4aa69c60a1c2d448e9dc7", 0xc2}, {&(0x7f0000000640)="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", 0x1000}], 0x4, &(0x7f0000001680)=[@tclass={{0x14, 0x29, 0x43, 0x400}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts_2292={{0x1c8, 0x29, 0x36, {0x5e, 0x35, [], [@ra={0x5, 0x2, 0x7ff}, @generic={0xce, 0x2f, "2f2716414b71115bf2766ed0b2d5d912521d384f97ee8a0052af5a3d6fd44479af2cb65a39740abdac65ecfa89734b"}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x10001}, @hao={0xc9, 0x10, @remote}, @generic={0x0, 0xfd, "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"}, @generic={0x7, 0x46, "6822c4b0c084ef2aa1c092cd917fbaa064fc00b122bfad9f017fb7c7ac4ec3c6f26aeaa78c049b19b5ce0c818b21f038ef3bb4e9aa99fa7442ce801c043037716b777e4ef447"}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dstopts={{0x48, 0x29, 0x37, {0x11, 0x5, [], [@jumbo={0xc2, 0x4, 0x1f}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @mcast2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x0, 0x0}, r6}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, [], [@ra]}}}], 0x2a0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001940)="b1d64352085383da99890723979253326c2608e2c1b182edf07d829c4345d3dd9bdca9bfc0282707e018bf74ba110408850f89f2d344b15df1080c6a0ab49d908de9d69ade0c190208d18b2d516557c92b802461a628f3c7b12e9d9f4a1bb61b2c2943df2042fdcf3d4e8c66b01121f86fa85c881e48d1baf3b1e68051e3c32f6cee63aa41fc0606d81c0851a96e8e6efb064642c27b1519a7e611724692a69a2109ac42d873858d6439e5e5314d3d5b79b73e48eb161b88c3e2bb8f86852ce8faa13a53071bea", 0xc7}, {&(0x7f0000001a40)="2fd0d72b14fe6b721374ecb7", 0xc}, {&(0x7f0000001a80)="497115839360d354854fd1356dd20350e4a083", 0x13}], 0x3}}, {{&(0x7f0000001b00)={0xa, 0x4e23, 0x3, @mcast1, 0xffffffde}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001b40)="2120a2452fb93accc32116da02505cdbf5bc792a8cce3dd741222f59d373565033542e1c4bfd47b0881757eb4f3bd92db831cbd3f702704c538bfae7552310c6711d81e67ee704fc6935408dd58743edc031697baf7364f11e7a28eadb2664319981d7e9dafc4caad071d6ca2a41ad7e91415da511853dd367eaf0059e24b776401c3f485c0ec98aa00517c6ba60b946070c394dbf06b9a63f5475efd2cfd56cb915930c6e88b11b", 0xa8}, {&(0x7f0000001c00)="7754feb634aca2330085670ce4dc12f7f3790c1fe0ba1aa182c3dca2b754642a0b69f83b15a82843f8a6ac66f66717", 0x2f}, {&(0x7f0000001c40)="d6cd909587681e7b04ccf7f4658d1c27e9f428b940fafbebc631f46c6e2b79f1f3803d03ddb71e9faf77bd5ccfacdd38b437c9ba8ee3cbe50d5344fcc57f485b853db8f0794edf1acb4b0c46e7dd64a5a3f81755fa5338a4db790292fe3514b3b5967efb8bb38e51486862f8df6c821630b5d08c9a4fb1808f72ccae40799296290b1d8749398d1241c6975d45830bab8ca851221604742d1fcf2a45ad1a968b5369b45fa901d15f228946597673e3d8e3d515684828aa5311ac5a188adcb1a4c679bb4ed998679e245d82d2bf78d7", 0xcf}], 0x3, &(0x7f0000001d80)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffff7f}}, @hoplimit={{0x14}}], 0x30}}], 0x3, 0x40004) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000201}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x94, r8, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000000300)={'dummy0\x00', 0xffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="66ba8921d3fe1e84fc487ce8e3b86ec31d9df13189ebe4800b093d0000000019b8b729c40e1418d5aa8c5fa767aba2bb9a5bc97c8f928733d0bc0357643f4eb1a553a98aaf3e025674a8a94102ef1fde24b71a305e000000006f3bf7ac9c65b07d0ae1ffcc4a418a0c", @ANYRES32=r11, @ANYBLOB="14000100ff010c000000000000000000000000010800080000040000"], 0x34}}, 0x0) [ 831.740999][ T840] usb 1-1: USB disconnect, device number 59 19:31:24 executing program 2: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x37e49e05671e9c09, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmsg(r2, &(0x7f0000001400)={&(0x7f0000000140)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x3, &(0x7f0000001380)=""/86, 0x56}, 0x10000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_GROUP={0x8}]}, 0x39d}}, 0x0) [ 831.800836][T12855] usb 4-1: USB disconnect, device number 15 [ 831.852678][ C0] net_ratelimit: 18 callbacks suppressed [ 831.852700][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 831.864913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 832.561948][T12855] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 832.572084][ T840] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 832.802010][T12855] usb 1-1: Using ep0 maxpacket: 16 [ 832.811979][ T840] usb 4-1: Using ep0 maxpacket: 8 [ 832.892524][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 832.898855][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 832.932027][T12855] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.942392][T12855] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 832.952229][ T840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.966392][ T840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 832.979395][ T840] usb 4-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 832.988501][ T840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.998015][ T840] usb 4-1: config 0 descriptor?? [ 833.112157][T12855] usb 1-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.40 [ 833.121572][T12855] usb 1-1: New USB device strings: Mfr=211, Product=136, SerialNumber=3 [ 833.130189][T12855] usb 1-1: Product: syz [ 833.134472][T12855] usb 1-1: Manufacturer: syz [ 833.139117][T12855] usb 1-1: SerialNumber: syz [ 833.212438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 833.218748][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 833.362162][ T840] usbhid 4-1:0.0: can't add hid device: -71 [ 833.368461][ T840] usbhid: probe of 4-1:0.0 failed with error -71 [ 833.381875][ T840] usb 4-1: USB disconnect, device number 16 [ 833.382519][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 833.393889][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:31:26 executing program 4: syz_usb_connect(0x0, 0x48, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000854ea408ac0514026a470000003cee24b1e7b4aaba4adbb301090236000904000004032c020009050200537a000000000009050b0b0000000000190501000000000000090506000000000000c1351feba5c417d910414ac3dd5ef6d091c66efa09f2bd297f66c581abe5983cc3cd8731da13319023eb10d34a0d774b413c4858e9c94e8441098145dab6fc2e"], 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x442, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x88) 19:31:26 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/92, 0x0, 0xa000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0xff, 0x75, 0x7, 0x5}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) 19:31:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100050}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) socket$inet(0x2, 0x2000080001, 0x84) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 19:31:26 executing program 0: syz_usb_connect$hid(0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x0) 19:31:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000001c0)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0xffff, 0x1, 0x17, 0x7f, 0x9}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) prctl$PR_SET_UNALIGN(0x6, 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0x10c7}], 0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x2, 0x20, 0x0, 0x0, 0x6}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) 19:31:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x2, 0x0, 0xfffffffffffffff6, 0x0, 0xffffffffffffff7c}}, {{&(0x7f0000000600)={0x2, 0x4e21, @empty}, 0xffffffffffffff83, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0xfffffee4, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0xe}}}}], 0x20}}], 0x2, 0x0) [ 833.517842][T12779] usb 1-1: USB disconnect, device number 60 19:31:26 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000003800000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003ed0ff213c62882259aa863384be0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0fc5ccb0ff8332a655e3fe47628430062afbe26b264f6d828878901fc7d2828d30f614a8d581df571be87ab53ce5047d5acb6038ed377ac5d14ef0654e26a034315013f4"], 0x258) 19:31:26 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/d%v/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0xc00000c0045005, &(0x7f00000002c0)=0x1000) close(r0) 19:31:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x2af) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') sendfile(r3, r4, 0x0, 0x8002) [ 833.692449][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 833.698629][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:31:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x389, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x30, 0x0, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x28, 0x8dfffffffffffff5, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x4, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3801, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) pipe2$9p(&(0x7f0000000080), 0x50d62365ccae5cfc) 19:31:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090069000000a2e407edab0080582800000046078107a277001419000a000d000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0x0, 0x9, 0x5, 0xffff, 0x5}, {0xc16567a9116905a0, 0x0, 0x62f, 0x17c, 0x7}, {0xc0000000, 0x8, 0x2, 0x401, 0x8}, {0xa, 0x65cd13e5, 0x6, 0xffff7a99, 0x7}]}) [ 833.792279][T12855] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 833.860433][T25364] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 833.870301][T25364] bridge0: port 3(hsr_slave_1) entered blocking state [ 833.877380][T25364] bridge0: port 3(hsr_slave_1) entered disabled state [ 833.889099][T25364] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 833.898175][T25364] bridge0: port 3(hsr_slave_1) entered blocking state [ 833.905230][T25364] bridge0: port 3(hsr_slave_1) entered disabled state 19:31:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r3 = gettid() tkill(r3, 0x12) tkill(r3, 0x1000000000016) r4 = syz_open_procfs(r3, &(0x7f0000000000)='attr\x00') r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000080)={r10}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={r10, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000002c0)={r11}, &(0x7f0000000300)=0x8) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000080)={0x0, 0x5, 0x5, &(0x7f0000000040)=0xd95}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xc, 0x1, 'netem\x00'}, {0x4c, 0x2, {{0x3, 0x800, 0x0, 0x2, 0x5}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xfee738155980f87d}, @TCA_NETEM_REORDER={0x0, 0x3, {0x1, 0x5}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000001}, @TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x9e}}]}}}, @qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x3}}]}, 0xcc}}, 0x0) [ 834.045784][T12855] usb 5-1: Using ep0 maxpacket: 8 [ 834.082341][T12855] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 834.202211][T12855] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 834.210040][T12855] usb 5-1: can't read configurations, error -61 [ 834.363943][T12855] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 834.613713][T12855] usb 5-1: Using ep0 maxpacket: 8 [ 834.655363][T12855] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 834.803904][T12855] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 834.811667][T12855] usb 5-1: can't read configurations, error -61 [ 834.831110][T12855] usb usb5-port1: attempt power cycle [ 835.551890][T12855] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 835.791915][T12855] usb 5-1: Using ep0 maxpacket: 8 [ 835.832089][T12855] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 835.953917][T12855] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 835.961663][T12855] usb 5-1: can't read configurations, error -61 [ 836.111847][T12855] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 836.352035][T12855] usb 5-1: Using ep0 maxpacket: 8 [ 836.392048][T12855] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 836.512160][T12855] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 836.520037][T12855] usb 5-1: can't read configurations, error -61 [ 836.526682][T12855] usb usb5-port1: unable to enumerate USB device 19:31:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xa808) 19:31:29 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) 19:31:29 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0x7b, &(0x7f0000000000)="b3e354b0ba32f80441630d31b687907b3a166e2dbaf6526654c84275f4260129c9fedaf5ca12f3d4cc0ba54f798ba396d5244add39e51828abad6d5d5423dca0bce96dc96ffe0d3dd7e2eb81e99891a9a0f25f75af098ddbaaa7ca4e82eef935bd831ced5c616ad08b801cd5a57776a19e6084cecb15efa92f71cf"}) 19:31:29 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x3, 0x0, 0x0, &(0x7f0000034000)=""/94, 0x0, 0xd002}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000001300)=""/4096) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x40800, 0x0) getpeername$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)) 19:31:29 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='Y', 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x0, 0x7f}]) r4 = dup3(r0, r1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000280)=0xffffffff, 0x4) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000380)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f00000002c0)={0x100000001, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r7, 0x40106437, &(0x7f0000000340)={r10, 0x4}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 19:31:30 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) move_pages(r0, 0x200001de, &(0x7f0000001140)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000001100), 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000000c0)=""/4096) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000001100)='/dev/midi#\x00', 0x7, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$int_in(r3, 0x5452, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000001180)=0x5) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 19:31:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 836.981920][ T3932] usb 1-1: new high-speed USB device number 61 using dummy_hcd 19:31:30 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000900)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x9, 0x8}, 'port0\x00', 0x10, 0x1000, 0x0, 0x8c, 0x2, 0xffffffff, 0x80000000, 0x0, 0x1, 0x3}) [ 837.062443][ C0] net_ratelimit: 12 callbacks suppressed [ 837.062465][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 837.074534][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:31:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000200)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa2}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x70) 19:31:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x8000) ftruncate(r4, 0x1f) io_setup(0x1000, &(0x7f0000000140)=0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0xfffffffc, 0x0, 0x0}, 0x3c) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8ee19e1cb6b89e94, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe080f2921bceac38}]) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xe77b1f50b3fcce8) 19:31:30 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0) [ 837.232069][ T3932] usb 1-1: Using ep0 maxpacket: 16 19:31:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f37fd4a040c4d5415a871b0f0114"], 0x0, 0xf}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x500, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe8) 19:31:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) unshare(0x24020400) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 837.352433][ T3932] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 837.354005][T25426] debugfs: Directory 'vcpu0' with parent '25426-5' already present! [ 837.374067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 837.374444][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:31:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000000040)=@sco={0x1f, {0x9, 0x31, 0xff, 0x1, 0xcd, 0xfc}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="e3f1afb8ac5d9d154c0667021fe197b5ecd0e81857e7b6a34356711f4220944a981c0746041b6b7421189ac1", 0x2c}, {&(0x7f0000000100)="2e6ec46964", 0x5}], 0x2}}], 0x1, 0x2) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x400000000000158, 0x0) [ 837.532497][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 837.538858][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 837.548988][ T3932] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 837.558595][ T3932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.566712][ T3932] usb 1-1: Product: syz [ 837.570927][ T3932] usb 1-1: Manufacturer: syz [ 837.575677][ T3932] usb 1-1: SerialNumber: syz [ 837.666701][ T3932] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input166 [ 837.852349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 837.858626][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 837.917225][T12779] usb 1-1: USB disconnect, device number 61 [ 838.102498][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 838.108674][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 838.732162][T12779] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 838.982013][T12779] usb 1-1: Using ep0 maxpacket: 16 [ 839.111947][T12779] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 839.281987][T12779] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 839.291091][T12779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.299261][T12779] usb 1-1: Product: syz [ 839.303478][T12779] usb 1-1: Manufacturer: syz [ 839.308073][T12779] usb 1-1: SerialNumber: syz [ 839.366089][T12779] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input167 [ 839.565597][ T3932] usb 1-1: USB disconnect, device number 62 19:31:32 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x1, 0x1}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) fcntl$notify(r2, 0x402, 0x10) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000000c0)=""/63) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x647, r1, 0x0, 0x8}) 19:31:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r0 = clone3(&(0x7f0000000180)={0xd841400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), 0xd, 0x0, &(0x7f0000000280)=""/137, 0x89, &(0x7f0000000140)=""/58}, 0x40) rt_sigqueueinfo(r0, 0x9, &(0x7f0000000340)={0x34, 0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 19:31:32 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) renameat(r1, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') 19:31:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getegid() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x202003, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) r3 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x208000, 0x8) r4 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) renameat(r3, &(0x7f0000000400)='./file0\x00', r4, &(0x7f0000000480)='./file0\x00') setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000003600)='tunl0\x003;\xb6n\\\x9d\x8f\xdf\x00', 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000000340)) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x20, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, @in6={0xa, 0x4e23, 0x3, @remote, 0xfffffff8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000001c0)={r10, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) 19:31:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(r0, r0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x10000, 0x90a050}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r2) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x800040}, 0xc) unshare(0x60000000) 19:31:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = gettid() tkill(r1, 0x12) tkill(r1, 0x1000000000016) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x4, 0x2, 0x1000, 0x871}, &(0x7f00000001c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x7}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r3, 0x0, 0x1, &(0x7f00000000c0)='\x00', r6}, 0x30) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f003efb0a0002000000000000000f00030005000000", 0x2e}], 0x1}, 0x0) [ 839.682081][T25455] IPVS: ftp: loaded support on port[0] = 21 19:31:32 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) fcntl$getflags(r3, 0xb) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}, {&(0x7f0000000140)="aa1d484e24002000a84d4583670e12d9fc56b0953fbd80630600007704a71e023a27b2da9426f40100008000000000a7457e3867", 0x84}], 0x2) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xfffd, 0x7, 0xfff7, 0x6, 0xf, 0x5, 0x8, 0x4, 0x3, 0x1}) [ 839.844317][T25471] IPVS: ftp: loaded support on port[0] = 21 [ 839.863269][T25470] sg_write: data in/out 2097152/80 bytes for SCSI command 0x94-- guessing data in; [ 839.863269][T25470] program syz-executor.2 not setting count and/or reply_len properly 19:31:33 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x5, 0x2, [@IFLA_BR_MCAST_ROUTER={0x8}]}}}]}, 0x3c}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0xa, 0x6, 0x3, 0x8000, 'syz0\x00', 0x1}) r2 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:31:33 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000e40)=r1) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000015c0)=""/4096, 0xfd0f}], 0x1, 0x0, 0x37b}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r2, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r11) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000d7c000)={0x0, r11}) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000700)={0x1}) ioctl$KVM_GET_XCRS(r7, 0x8188aea6, &(0x7f00000000c0)={0x4, 0xff, [{0xd3, 0x0, 0x1000000000}, {0x4, 0x0, 0xffff}, {0x8, 0x0, 0x3f}, {0x6, 0x0, 0x5}]}) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x1, 0x2f) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xffffffe3, &(0x7f0000000040)=[{&(0x7f0000000640)="9caa447fa627f17c8ed3d50e68dc7708d4f8b2f40db126a05bb131207f7fe160e599e5370f887b9294b462d9090005daf00c93e020878ef9bb0abb45cb89ea9590f884e902ab0cc7bd56af27c7652c15b647ce0f6a09400eb2f35897c05f847309edb7f1effdffaa0f76bf2d5bef620bcc06502f9cd258b3500b71f0267d9d9e83281985ca44260c0edac2e715b78624a821a71b7e401a08cfe1bd2b7a"}, {&(0x7f0000000540)="04bebae2fc91d175406099fc290a6313057a680320f5020a59bd1795e857ae60e9f8255eca1bdf8ad8b95ed3a9b60652bc7cb3178e35759cac2f2d12fed0d007ca08b490a860a49537a465622b48e99b45eeac12525f403bc2494d21fbf28496c352e485fab0eb7f9ac257b7a5f3b94b74e41892cc778c33d0277d4f46ce60446818ef965c797fc036d9070428a5ed46a1746c378f3f23a2a4335ce1e5597db6afe9ed58284e5195fed0521a98fc67dafd3f54a93f3a106a5ed68b789f6496b1125d42ab1b0b4bf53781a88200906fcc23b6443b"}], 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000340)=[{0x0, 0x109, 0x0, "8bfbe7a06c94cf6e9a9597c27b338400514dac9e845d465c7626863273584375664933767fa8ec0c787b860a9d2060b3b5687b56f6fe743ac9f8065841dde47965110db24a723683a4116e6524047a6ecc2ff36b0a477f1ffc2d0dde5f67180de4171799170f4296f8e8c78abbbc90601b5b38128e45175cc4d7486e4d4dd065425399aa79376683cc6044f6e3676bce99957d56d308256d65408fd352572f9b27129fa77f0c507cb0d4f8e0c5472eca060414485e5230ddef68ae5c245537655d971935c8779c3085fda6fadc0ca141b429ceb52a69cf0f48afac578375709d74b82f"}, {0x0, 0x116, 0x7, "362891f3f1d67bef31fb423f2cfb149a654cfed38c790e6b17a0692f6aff241ef10f38222ec73b67c405a62c31c6c7ccbe189b0acd6b44b06b6282608fffc8858f12eac45e80eb59a6f0e18e32dd57043082d3a78d01a3a7abf121ef2b55e8bc377cd4f91dbee5a667396f27f867c80cd024f3b3fa78ccc4069ddff43590c7b28da4108aa0163f6ba1e86d721ac1a9ba2bd5703e07dcab42cc88c3755bd6b150fc369a227ac88b9a4c62b8994e6ca3e536c907b1fa58e3c9ca9f18e1cdb3ea473356aa31b409ecafee9edb8a5aca3d208a643e8a45"}]}}], 0x4000096, 0x0) 19:31:33 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 840.039718][T25473] sg_write: data in/out 2097152/80 bytes for SCSI command 0x94-- guessing data in; [ 840.039718][T25473] program syz-executor.2 not setting count and/or reply_len properly 19:31:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) r6 = fcntl$dupfd(r2, 0x80c, r4) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r8) mq_notify(r3, &(0x7f0000477fa0)={0x0, 0x0, 0x1}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)) 19:31:33 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) [ 840.192128][ T3932] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 840.451920][ T3932] usb 1-1: Using ep0 maxpacket: 16 [ 840.581969][ T3932] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 840.752043][ T3932] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 840.761146][ T3932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.769357][ T3932] usb 1-1: Product: syz [ 840.773653][ T3932] usb 1-1: Manufacturer: syz [ 840.778291][ T3932] usb 1-1: SerialNumber: syz [ 840.826941][ T3932] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input168 [ 841.064902][ T3932] usb 1-1: USB disconnect, device number 63 [ 841.902121][ T3932] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 842.142161][ T3932] usb 1-1: Using ep0 maxpacket: 16 [ 842.252502][ C0] net_ratelimit: 18 callbacks suppressed [ 842.252525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 842.262047][ T3932] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 842.264488][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 842.442025][ T3932] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 842.451188][ T3932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.459344][ T3932] usb 1-1: Product: syz [ 842.463640][ T3932] usb 1-1: Manufacturer: syz [ 842.468252][ T3932] usb 1-1: SerialNumber: syz [ 842.515235][ T3932] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input169 [ 842.718844][ T840] usb 1-1: USB disconnect, device number 64 19:31:35 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x10000, 0xab1, 0x1, 0x3f, 0x15, 0x3f, 0x6, 0x5, 0xfffffbff, 0x9, 0x3, 0x3}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) 19:31:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000086a0519030000000000010902240001000000000904000009030000000921000000012222000905810300000000009f069210d520a5b71235743c8a4cc8d82f686b854e987787ba0b7d37d2e3db247584149f7dbbddd32cc9ccb1d14cdd283ee4613cc781aa64cda35bb7f08d005c74885dd52c09b5836ae10fcb6d6a8512ff4d4bac15597c593367665e9dd5342561ddd0493d69487c4d2ee2e00e020d5dec6170adba06791ed7be512593ee2696f792aaeac12abaa0f7155a67108298"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) socket$inet6_dccp(0xa, 0x6, 0x0) syncfs(r2) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000760000003800bedc2a54431e640a789b5db384e746e9ff3dd409a880"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19:31:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x0, 0xe0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0xfffffffffffffffb}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x1, 0x0, @pic={0x0, 0x2, 0x40, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x10, 0x14}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getcwd(&(0x7f0000000540)=""/4096, 0x1000) 19:31:35 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) getsockopt$inet_int(r0, 0x0, 0x53, &(0x7f0000001080), &(0x7f00000010c0)=0x4) 19:31:35 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0, 0x5000}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f00000002c0)={0x55dc, "faed9272371e2010d72b2f31e2c7872517319d53f7cb113a92f0bd1fc89c0bbe", 0x3, 0x80, 0xf9, 0x10000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @rand_addr=0x3}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e21, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x9}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='\xc3\x110\xaahost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x40000000400, 0x100) write$vnet(r3, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/25, 0x19, &(0x7f0000000100)=""/64, 0x8d885d08dbb9f130, 0x2}}, 0x68) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000280)={0x6, @remote}) 19:31:35 executing program 1: r0 = getuid() getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xffffffffffffff6f, 0x4000840}, 0x0) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c00466be7c28f6ef7d300df0e0065f36580000002090000c27963fb4a27410415441edeed402a559c77ba", @ANYRES32, @ANYRES32, @ANYRES32=r2], 0x1c}, 0x0) setresuid(r0, r1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r4 = syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x4, 0x800200) getsockopt$inet_buf(r4, 0x0, 0x27, &(0x7f00000004c0)=""/7, &(0x7f0000000500)=0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647740500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) r7 = socket(0x400020000000010, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x262000, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000540)={0x20, 0x4, 0x4, 0xff, 0xda6}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x452f, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xc, 0x1, 0x8}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0xfffffffffffffeff}}, 0x10) ioctl$VIDIOC_SUBDEV_G_EDID(r10, 0xc0285628, &(0x7f00000003c0)={0x0, 0x8, 0x294, [], &(0x7f0000000380)=0x29}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000340)) r11 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendfile(r7, r3, 0x0, 0x80000000) [ 842.929786][T25522] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 19:31:36 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)) unshare(0x20600) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setstatus(r0, 0x4, 0x42c00) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 19:31:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000700)="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", 0x881}], 0x1}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @reserved="a13c199a4dd46e91ce5c8ca4931dd8f5cf1c33ba23c3996740894bf0ba27a08d"}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:31:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x159, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2006, 0x118, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0xffffffffffffff1c, &(0x7f0000000080)={0x20, 0x21, 0xbc, {0xbc, 0x21, "22cc0569e7463c928b187db5d6de50e3495339b56b1ed8667dccb1fc837cf20ac1890906e46f1902668cbab54c7cefc839e0a8aa2a88668fbce1762e7fd12b0a189cbf7e9b459eaa69891f94fefc175a061f9cb2585ddc44afc54181a3bcec936b0460d6f8848fc4c5830c406c981979098334e4dfbf4e8c3bebc7eac4b931d7b4a0487a74af5ab7619869fc19020757cf7a3e3a5ce92270a74c308396a91c90ff3f7e5e8d3016fd2d4b6810680c5c2c9afbbf3c24df357fbacf"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x6a, 0x3, 0x459}}, &(0x7f00000001c0)={0x0, 0x22, 0xfffffffffffffe5b, {[@local=@item_012={0x1, 0x2, 0x3, "ef"}, @global=@item_012={0x1, 0x1, 0x3, "e5"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x3f, 0x1, {0x22, 0x897}}}}, &(0x7f0000000540)={0xffffffffffffff0e, &(0x7f00000002c0)={0x40, 0x16, 0x7c, "708fee4184b542d95c54eecea4ab198a5a5873263dcd5730468c38bc4ca27e02fc5721291680cb78e78c21a15145db321f77b6dfa11aad405413e95e1f02ec9dccfd7dbc79e623f21a45d8eecbea17462941a3c6240e96ab948dfab332001f4fb0c3727299416ede0bcbb59c906805a5c78d7e99f5bd3af089cf6e1d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x71}, &(0x7f0000000400)={0x20, 0x1, 0xd1, "62a6ea2ef6584dc4f7d8698e18c154d96f5e7b3dd4b4b0e626d3a1dd045eafdb533395e4d026b8c6650e2026ae289cbe26b1bc54cbc41f90e8c3d8c9b583ce993045d3f22332b5848c8c3b9492c4e8b75853e9f99551769e9b3d5df129c0a30b1d41f474da1a12ca3064ea9a37b1839ba2367f719b49378c4b3968706b985d2c4d2f022636605ffd0b9977366b7521dee5f9deb430695fa6ffb016251cf73d22e23c0e514aab6c518c7f359f3e9a49fb1d2e260c8e2591832cf9af44dca549d390a6a67ff96b3f46aa86fe5bd2857e23b1"}, &(0x7f0000000500)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) 19:31:36 executing program 1: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1a4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) [ 843.168982][T12779] usb 5-1: new high-speed USB device number 18 using dummy_hcd 19:31:36 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0xd, 0x49) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000000c0)={0x5, 0x4, 0x3ff, 0x0, 0x0, [], [], [], 0xfffffff9, 0x80000000}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) 19:31:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/\x93\x00\x00\x00\x00\x00\x00\x00o\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000340)={0x1, &(0x7f0000000180)=""/83, &(0x7f00000002c0)=[{0x4, 0x8d, 0x1, &(0x7f0000000200)=""/141}]}) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000100)={0x9, "a2fa7490a92831a6619ff403c6a249907c3418d4604bf47fb3bba20979a1fb79", 0x1, 0x1, 0xeb3, 0x3200e0, 0x2}) readv(r1, &(0x7f0000395000), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) [ 843.292562][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 843.298697][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 843.323078][ T840] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 843.431855][T12779] usb 5-1: Using ep0 maxpacket: 8 [ 843.532043][T15414] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 843.554357][T12779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.565364][T12779] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 843.578340][T12779] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 843.587473][T12779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.596696][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 843.603781][T12779] usb 5-1: config 0 descriptor?? [ 843.612111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 843.618034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 843.722042][ T840] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 843.782093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 843.788265][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 843.794510][T15414] usb 3-1: Using ep0 maxpacket: 8 [ 843.891940][ T840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 843.901097][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.909269][ T840] usb 1-1: Product: syz [ 843.913561][ T840] usb 1-1: Manufacturer: syz [ 843.918180][ T840] usb 1-1: SerialNumber: syz [ 843.932131][T15414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.943249][T15414] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 843.956167][T15414] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.40 [ 843.965364][T15414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.967020][ T840] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input170 [ 843.974901][T15414] usb 3-1: config 0 descriptor?? [ 844.092222][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 844.098435][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 844.127250][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.134412][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x4 [ 844.141514][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.148858][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.156002][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.163171][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.170247][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.177382][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.184505][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.191533][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.198657][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.205726][T12779] wacom 0003:056A:0319.0028: unknown main item tag 0x0 [ 844.213274][T12779] wacom: probe of 0003:056A:0319.0028 failed with error -22 [ 844.214745][ T3932] usb 1-1: USB disconnect, device number 65 [ 844.359443][T12779] usb 5-1: USB disconnect, device number 18 [ 844.445206][T15414] hkems 0003:2006:0118.0029: unknown main item tag 0x0 [ 844.454750][T15414] hkems 0003:2006:0118.0029: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 844.466153][T15414] hkems 0003:2006:0118.0029: no output reports found [ 844.473041][T15414] hkems 0003:2006:0118.0029: force feedback init failed [ 844.645529][ T3932] usb 3-1: USB disconnect, device number 10 [ 845.001892][T15414] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 845.171931][ T3932] usb 5-1: new high-speed USB device number 19 using dummy_hcd 19:31:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x24}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xec, 0x5080) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x8, 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f0000000080)={0x27, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00t'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 845.411840][ T3932] usb 5-1: Using ep0 maxpacket: 8 [ 845.424011][T12779] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 845.532061][ T3932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.543145][ T3932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 845.556199][ T3932] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 845.565382][ T3932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.574323][T12855] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 845.623066][ T3932] usb 5-1: config 0 descriptor?? [ 845.702172][T12779] usb 3-1: Using ep0 maxpacket: 8 [ 845.822023][T12855] usb 2-1: Using ep0 maxpacket: 8 [ 845.842095][T12779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.853219][T12779] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 845.866196][T12779] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.40 [ 845.875359][T12779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.887964][T12779] usb 3-1: config 0 descriptor?? 19:31:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xc, 0x1, 'netem\x00'}, {0x4c, 0x2, {{0x3, 0x800, 0x0, 0x2, 0x5}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xfee738155980f87d}, @TCA_NETEM_REORDER={0xc, 0x3, {0x5, 0x5}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000001}, @TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x9e}}]}}}, @qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0xcc}}, 0x0) 19:31:39 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x9fc4, 0x9) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='o\xf2\xa8jort-T\xd5\xdb\xa7\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 19:31:39 executing program 0: getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x351, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000052f4c27c0000", @ANYBLOB="0eaf71fd9c80d13e55613f34b0957d6ee9510eb753043c7a17f83eb025279289a43366d7410ef36c3b4ce113d7e7ebf358e2cd03ee30d6f97a008004000000000020eafb943b475f5c5c8c24b1dd15506b011541c7bf97b33d38bdf1d286a503b0e994a42504ea", @ANYRES32, @ANYRES32=r0], 0x6e, 0x85}, 0x20000040) quotactl(0x9, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)="cb7f462b04dcadf6bdd0aa73d11a1d152239144998dea58c84941d4d64c97fc1a3a89c58b6d0c5f96aa7a588c6771756e163b8d37a0f3bf319a1ce7f611bc5f30c7071f5c55fc0d704c926c9a67d770c6298a309f3484413fa2725dec872a6eedd1ff811ce570c40da6d80affd0dc777b618c0feda0ad3915a062981c8273ab4e1840ec3ea7b50fcdcb7090595e58dd4116e276574804d26b77f4ecf625626a85c97") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000180)=0x80000000) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}}, [0x2f, 0x80000000, 0x441a, 0xfffffffffffffaa8, 0x3, 0x4, 0xa6, 0x6, 0xc114, 0x9, 0x401, 0x8, 0x3, 0x100000000]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={r6, 0x7}, &(0x7f0000000340)=0x8) syz_usb_connect$hid(0x0, 0xe, &(0x7f0000000140)={{0x12, 0x1, 0x2a2, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc082, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1784510dd92b3b89, 0x0, {0x9, 0x21, 0x0, 0x3f, 0x1, {0x22, 0xad6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f, 0xfd}}}}}]}}]}}, 0x0) [ 845.942231][T12855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.953453][T12855] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 845.963179][T12855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.973219][T12855] usb 2-1: config 0 descriptor?? [ 846.043015][T25592] bridge_slave_1: Caught tx_queue_len zero misconfig [ 846.063022][ T3932] usbhid 5-1:0.0: can't add hid device: -71 [ 846.069173][ T3932] usbhid: probe of 5-1:0.0 failed with error -71 [ 846.089627][ T3932] usb 5-1: USB disconnect, device number 19 19:31:39 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x804}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000a70000000006000000030000000000000000000400000077da00000500"/69]) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x10001, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f00000000c0)=0x2) ioctl$int_in(r0, 0x40000000af01, 0x0) 19:31:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r12) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000d7c000)={0x0, r12}) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r13, &(0x7f0000000640)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14) r15 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r15, 0x40000000af01, 0x0) r16 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r16) ioctl$VHOST_SET_VRING_ADDR(r15, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r15, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r15, 0x4008af30, &(0x7f0000d7c000)={0x0, r16}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYRES16=r15, @ANYPTR, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES64, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="09016d384a62218ed8a64d3f2177946533171a77b0d9a3302a0efbad5135e0f1c04ebccaa9e7e2beb7d490ac50fa9eccef1199412f7d6ba966631fa72bae76b56af2dfc2b7d3d54ddf274ed9fa13d98ff1e741fcedb9c86b07958e56d0640af5b50095b8ab8dcebef7dba4ee7caa9a4136cdbb91b98a4787110c989b34", @ANYPTR64, @ANYRESHEX=r4, @ANYPTR64, @ANYRES64], @ANYBLOB="3188501af94dd32fdb44614db0745ee5b154642ea5a811d13f25c7a492e5a5c9ff2959beb9a986c041e196bb1d8d2628fac1d47c91464f37bfac1c16184f74192c7f78fe1b02daa4224ed10ffe79589b75161d87bc29bd15205aafcabce72e41f2a80cddb2adce80f04c35032cb28b4db81ece3d28ddc8e876deb6ae966147c1c1d078f4ccf9e2f54592e11696b1ba111558aaea770dbe76c2c145ff00b7278f6566a6d7e19ca2c86207f4c562fb94d7d362b3bf809b11bd627b77c7ea16313173ebe6461c2dc823df2b5e7714"], @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESOCT=r6, @ANYRES64=r7, @ANYRES32=r9, @ANYBLOB="5b4ab66c84b7a61d98c1fb524a120691bf586fdc704135c0d887454d97cf2b5586a4de6e68aa4d2cb04e9a42b23c9f2d37bfd856aef9bb2475be9cbbfaf77b0f8ef032374368e9f2e469b33effd864e9caf33ae3dc1c284b90b4e86e8ebaba045680270bcb0264a2d68b51f603962aa02fac86736d6815fa5eafd82b8db87b887fb78033806ecaf47f01b7fdb12eddffbc2e29d02060f5a5e88daa3be9ea02dbdd00b7e77866534435c56825cb179c0f386655f975862ca81c61e186e75d20abdb129c3fcfeb894f0696", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESOCT=r11, @ANYRESOCT=r0, @ANYRES64, @ANYRES32=0x0], @ANYRESOCT=r0, @ANYRESOCT=r0], @ANYRESDEC=r13, @ANYPTR=&(0x7f0000000280)=ANY=[], @ANYRES16=0x0, @ANYRES16, @ANYRES64=r8], 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r18 = dup2(r17, r17) r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r19, 0x40000000af01, 0x0) r20 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r20) ioctl$VHOST_SET_VRING_ADDR(r19, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r19, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r19, 0x4008af30, &(0x7f0000d7c000)={0x0, r20}) r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r21, 0x40000000af01, 0x0) r22 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r22) ioctl$VHOST_SET_VRING_ADDR(r21, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r21, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r21, 0x4008af30, &(0x7f0000d7c000)={0x0, r22}) r23 = ioctl$LOOP_CTL_GET_FREE(r22, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r23) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) r24 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00') r25 = dup2(r0, r24) setsockopt$inet_group_source_req(r25, 0x0, 0x2c, &(0x7f0000000080)={0x1, {{0x2, 0x20, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0x108) 19:31:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f0000001040), 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800cdba8e6b5c3c98039f964d8c00f20000000041064f770361768a915deb29873005aaf4dd542bdd6f6c9f74c09b0af3b0984395294d38b90a5f95fe246cc2119c065cd8a193a63386a8917f19fccac57860250b7b59783dc673935ee6f31a0706c9f5352dc10db301a4c2bdf8b8bc73132595f45b1ec8b74e419bc52484eab9f03ec7e3d86f20", @ANYRES32=r6, @ANYBLOB="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"/304], 0x148}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {0x0, 0xf0ffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x4}}]}, 0x30}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0xd202, 0xf6, &(0x7f0000000140)=""/246, 0x41000, 0x1, [], r6, 0xa, r7, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x5, 0xffffffff}, 0x10}, 0x70) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) read(r8, &(0x7f0000000280)=""/22, 0x16) io_setup(0x4, &(0x7f0000000100)) dup2(r1, 0xffffffffffffffff) r10 = gettid() tkill(r10, 0x12) tkill(r10, 0x1000000000016) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28020}, r10, 0xffffffffffffffff, r0, 0x0) unshare(0x40000000) 19:31:39 executing program 2: syz_usb_connect(0x0, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) [ 846.362392][T12779] usbhid 3-1:0.0: can't add hid device: -71 [ 846.368731][T12779] usbhid: probe of 3-1:0.0 failed with error -71 [ 846.382885][T12779] usb 3-1: USB disconnect, device number 11 [ 846.454597][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.462461][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.470200][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.477860][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.485497][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.495003][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.502734][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.510400][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.518067][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.525820][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.533567][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.541214][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.548986][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.556774][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.564507][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.572141][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.579742][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.587405][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.595105][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.602826][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.610466][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.618142][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.625832][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.633529][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.641170][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.648868][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.656633][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.664410][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.672076][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.679710][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.687438][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.695180][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.702905][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.710590][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.718305][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.726002][T12855] holtek_mouse 0003:04D9:A067.002A: unknown main item tag 0x0 [ 846.735267][T12855] holtek_mouse 0003:04D9:A067.002A: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 846.750588][T12855] usb 2-1: USB disconnect, device number 111 19:31:39 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = accept4(r1, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000140)=0x9, 0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) write$ppp(r5, &(0x7f0000000180)="3a655f151ee89d90de2c4752cf938a8a1e687650a061f5c3f1c8b87ec0266f8f2db913a496aa7b682c7346ef98a6ce53e71bfa7d56b264c0b84d25b9efffcb612da6ed97dc03781643bbc566aca05789523c6f7c1b20755135c40a6cac5064a5494f49cd18c9e50d5610829ddb880d8c97e7638b3c6d1d3d22c26f3e353ff0f4698eb55e1d8ed40d1110eeddef93dce30bc13b", 0x93) 19:31:40 executing program 0: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x9, 0x61a69a49191d8bc4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac0573024000010203010902240001010000000904000000030102000921000000012200000905810300000000005e9c7cae5e1aa7053b2f6291918375b4c5d03e526963913b21529c1d071e12e1619b854f62f7716a2fd4e36ae8fcc9d613a859cdb4e43121e03d74882ed410fdb945c2d6b2c8c5ab29c93a5708049ef792fe0ed12a0b2e36f9c042a83a82329cdca4ff7a"], 0x0) 19:31:40 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='Zdev/\x97P\x14w:\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 19:31:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x80000) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xde, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 847.462463][ C0] net_ratelimit: 12 callbacks suppressed [ 847.462486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 847.474461][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 847.481601][T12779] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 847.493524][T12855] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 847.722407][T12779] usb 2-1: Using ep0 maxpacket: 8 [ 847.741920][T12855] usb 1-1: Using ep0 maxpacket: 16 [ 847.774379][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 847.780435][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 847.842165][T12779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.853397][T12779] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 847.862626][T12779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.871941][T12779] usb 2-1: config 0 descriptor?? [ 847.873201][T12855] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 847.932442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 847.938550][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 848.042067][T12855] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 848.051409][T12855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.059596][T12855] usb 1-1: Product: syz [ 848.063859][T12855] usb 1-1: Manufacturer: syz [ 848.068545][T12855] usb 1-1: SerialNumber: syz 19:31:41 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='#!\t '], 0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x401, @local, 0x9}], 0x1c) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 19:31:41 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) 19:31:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/}&4#o\x00', 0x2002, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000080)={0x0, {{0xa, 0x4e23, 0x6, @loopback, 0x5}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x17}, 0x6}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xd4, 0x0, 0x4) 19:31:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0x8a, 0x2, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) bind$unix(r3, &(0x7f0000000140)=@file={0x1, '.\x00'}, 0x6e) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) dup3(r0, r1, 0x0) [ 848.117280][T12855] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input171 [ 848.232240][T12779] usbhid 2-1:0.0: can't add hid device: -71 [ 848.238728][T12779] usbhid: probe of 2-1:0.0 failed with error -71 [ 848.252428][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 848.258739][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 848.300556][T12779] usb 2-1: USB disconnect, device number 112 [ 848.316980][ T840] usb 1-1: USB disconnect, device number 67 19:31:41 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000020ac055402400001020301090224ff07000080000904003f01030102f809210200afba0122810809058103a60106fb00"], &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0xd7, &(0x7f0000000200)=@string={0xd7, 0x3, "4cfe9760d171d944947f4836f52265880f1151e35dafa27b1e6227d3ed7296cc88183fcb44dd75c8eebbb4985232f2ec2bd2282ecf03cd1ea8e50d027e10f03d271340d756ff7663d2f8f78321a2ae2c108b11b6e239a2ca316c55843a7dfc66f56f6a6f385523de18b7ef11977098c93429ce881723b58d1abd9a1a0fcf7bcebec1ad1714c44acd8915e9dcce1361dd2b2b870dfe0b3c4863b9c59f50c49b88ecb9a41dcb46e345afb29242830e6ecaad2139b49f93edae08f0dba126a3783af1986cd4d619efbc4baeb287a496e066210ee459a5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0xc1, &(0x7f0000000380)=@string={0xc1, 0x3, "1cbe6004aed57e4b1ccd5f9d615bbbbda5b4f7f81889e3af9f185aace537015506b39fb5e6f4801e9f388e3110eb8ced62391d70eda15feae0127f0515973731a58f7859eec7e4e32424b4781712c36a1a6e59377d3b32f4c5aa6c3678e344656f0b4df897cf4b5d0eddffae368d39df6cae71b82a6589cd2fa10235f42c1f489f9159c8a9fe4ab645d052243d99e17aece963d070ff6068ebc26a2b56f457faec3ffd3ed2ab895ff383e0f44e36542a9f360dbabf90197ae6cb782fcf3da0"}}]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc0801, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:31:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000100)=""/43) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r0, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 848.492420][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 848.498687][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 848.821995][T12779] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 849.061785][T12779] usb 2-1: Using ep0 maxpacket: 32 [ 849.111911][T12855] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 849.182016][T12779] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 849.190458][T12779] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 849.197890][T12779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 7 [ 849.206858][T12779] usb 2-1: config 0 interface 0 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.219954][T12779] usb 2-1: config 0 interface 0 has no altsetting 0 19:31:42 executing program 3: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "17f1aa00da634e4e", "fe1c4ba99b9920ba0990d6eb7a6d796114040b2fe86107299cd3c392ddd04e33", "ce13c36f", "f58a6bdc87b2ddd5"}, 0x38) io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='ip6gre0\x00') io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 19:31:42 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x8) ioctl$int_in(r0, 0x40000000af01, 0x0) 19:31:42 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1000000, 0x31, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000010000/0x4000)=nil, 0xd07000}, 0x1}) 19:31:42 executing program 4: sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x2c, 0x8, 0x0, 0x19}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f00000002c0)="4d8e756246bf32", 0x7}, {&(0x7f0000000300)="95e50b48dbfa6700c4e1660ced14ce19b06338804c63fda1c90ca5f7f7bb3de93e49d25aa394d7a6ea0369563405565f5cdf60436db59ef7149b13ed85f12f7334de460e7496e37140151f9468404cc601e6c8021466da1015e02983927525da803fb4f633cf5d2251fc7925c62eb38d5b7b59be95a1a9781512ea5cbfe49985d5dc9932975cff20e167dccf9b8e2fd9bf1f4b5dacce7ca8e1da031892c276ec1f8cc1b672118f22b2cf25f6d416cf528830a503dd64fdeb", 0xb8}], 0x3, 0x0, 0x0, 0x40}, 0x440c1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r2) getgroups(0x4, &(0x7f0000000140)=[0x0, r0, r2, 0x0]) getgid() setgroups(0x31dbe445, &(0x7f00000002c0)) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) unshare(0x60020000) 19:31:42 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000005c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xd6, {0xd6, 0x22, "36973fec85f9eed55d89683a2181c0571d18481a3a0a6f253eca49c0b7410911755bcfdd2309abb39a36511aee889305de0f699b0470642ab4c50c50627b146a2b392263c06f61b5cab2ea802a46e07de7056a85264988577d40a7846d22d19be34bb9169e00a1e92be7b8e3c36101eaef13b19bd2300831ccf0a73486509127d8e3eac1c7716bf4b17285826d3d95c27c35efd6e0d610e8fde09b7dc919de4b9aada2bb4cff837ed8137a297086a02db0dee96dff2d84607ab7281a318291077d7bee8c1dfc3f289516dcfee5c29dc18514a2fe"}}, &(0x7f0000000180)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "6474d4de0da360e0b1107b0adf92a5a8d7768d936fd5cafabf62164164d21e5a67ce986d2f49656e5e7818bcdbbd8a0d6fd515260ff758bf1fd5500d53b3d416bd54f2c039f65842003ccfedd223d9f865223009c0cb8a3500ffdeb4e17e5adf52b4dec6ddd91b94403016e59c240b9920bc162a9f504d8ea7067838854db9082841cea9af2dc1119aaead1f2f379e604bbca4fd0c13a903ead511275660c0caff89c444e474a4b3a3d7628aa9844b0395606e3f4e694ee16b6e854059177cbd32"}}, &(0x7f0000000100)={0x0, 0x22, 0xe, {[@global=@item_012={0x2, 0x1, 0x3, "ddc8"}, @main=@item_012={0x1, 0x0, 0x1e, "fb"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "b7bc708f"}, @main=@item_012={0x0, 0x0, 0xe}, @global=@item_012={0x1, 0x1, 0x6, 'v'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe5, 0x9, 0x1, {0x22, 0x78}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x60, 0x37, 0x88, "79c113e18f34c177757d6931e1cde3e70c90261828ddd5b0b313d70672de17169bf5d5a2b688ce442592efcc6d8595a37acea26820bfb92ed3feb0258425e7f2fe3173221691907bf02a6f84de2ae2c8e72a9f5cdc2b957c5b3f15251e5ebab2343002135a0150a3b3cc777982c20d7367fb0dafffc9a1b0d0ba62d37a1b8dd146afbbcd46701cb2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x1, 0xe0, "f2921cf202db00b0ac62dc5aee9df50de02967c53fd08553f9454c90cd863890f05ef0f7df145ef39f2afb88339ffbbf323e44b9e9fcbdeae302e89e1c39189e572f1382940312715c50e045c5de3b09ecfb4b7c7630aa9ca473a819c62e374cec25822dd4e69087aadd4d15e7180ddb20e4701a9866558bd802f03ecc12d44504089f8418dd49e2f248eec69f36cfef9e6b682088ddd2c5d4f5587a6e13300985213b736ff75e2be59d527f3858afd7f6d5df3ecb576f445976f545b1058ae06b8450b5e682b1851bfad09a0b0497c2ff5c9e3d27c94b261d3d6f94b38ae265"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x7f}}) [ 849.383510][T12779] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 849.392859][T12779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.401010][T12779] usb 2-1: SerialNumber: 븜Ѡ햮䭾촜鵟孡붻뒥褘꿣ᢟ걚㟥å”댆떟Ẁ㢟ㆎî¬î¶Œã¥¢ç€ê‡­î©Ÿá‹ Õ¿éœ•ã„·è¾¥å¥¸ìŸ®î¤â¤ç¢´áˆ—櫃渚ã™ã­½ï²ê«…㙬î¸æ•„à­¯ï¡ì¾—嵋껿贶깬롱攪춉ꄯ㔂⳴䠟醟졙ﺩ뙊í…⑒餽竡í£ï½°æ¡ ì‹«â­ªï‘–練㿬㻽ꯒ徉è³ï“ ã™Žâ©”㚟ë¨é‚¿ç¨™ì¯¦â½¸ã· [ 849.445910][T12779] usb 2-1: config 0 descriptor?? [ 849.470085][T25699] IPVS: ftp: loaded support on port[0] = 21 19:31:42 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x2, 0x4) [ 849.728797][T12779] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input172 [ 849.838095][T12779] usb 2-1: USB disconnect, device number 113 [ 849.990586][T12855] usb 1-1: device not accepting address 68, error -71 19:31:43 executing program 4: sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x2c, 0x8, 0x0, 0x19}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f00000002c0)="4d8e756246bf32", 0x7}, {&(0x7f0000000300)="95e50b48dbfa6700c4e1660ced14ce19b06338804c63fda1c90ca5f7f7bb3de93e49d25aa394d7a6ea0369563405565f5cdf60436db59ef7149b13ed85f12f7334de460e7496e37140151f9468404cc601e6c8021466da1015e02983927525da803fb4f633cf5d2251fc7925c62eb38d5b7b59be95a1a9781512ea5cbfe49985d5dc9932975cff20e167dccf9b8e2fd9bf1f4b5dacce7ca8e1da031892c276ec1f8cc1b672118f22b2cf25f6d416cf528830a503dd64fdeb", 0xb8}], 0x3, 0x0, 0x0, 0x40}, 0x440c1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r2) getgroups(0x4, &(0x7f0000000140)=[0x0, r0, r2, 0x0]) getgid() setgroups(0x31dbe445, &(0x7f00000002c0)) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5) unshare(0x60020000) 19:31:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="73c4d43e6582f2a5a980f3cc40801dbd48795492f3509bbafe24418a58fe8f2338bd36602b7e770c11306884c4", 0x2d}, {&(0x7f0000000080)="727fd3ddf870b4fa77dfcc484e48bd4038e791b40599a5868e8b244006d580673085acd65daa2c5439a85d9e23acfb64eb542c903e9a5931d75c122f8fdc652dcfdac0d278a66a5c68ae7d5711d8375ce289ce4295cf499874b0c47d5f209e3614d8882dd12d24695b8f75cc03d1d1c57e82579925ab148a49ad381aee55ff8ea80befc81c395e78d705ac41982d57f6b9f6f805746370680a0711b7b92a11aaccb74749d8b1aef7953aba57b638d848c7ac8bd438204de8c04e62a7fdb9789c371c4d71242b44247c33399e9d1ca4f990db", 0xd2}, {&(0x7f0000000180)="5f3b2dae85985beeb6f9bf9ca42b12451ce034297049269bd9c236605832d83e33fbf6162743ff8455b9d2dda0e1ff28bace5c65dc8ab51cdbf100ae5ac494c12b2d8b1d858c26a9b9aa52119742c396a584bf5e3d2eacb283509e18d021bcae85ca5e4843dffe4c5106f28c2e0266d3f965bd0844ee20d8c3d796b8b5b24f8ab29a820e4db06ee44eb63c3f32802eabf61479db95356ad634d9982531ddbb152d136b11022cfaa2fb6e8f8e490195c517b917b26a07d361c05682f8d6aaf03d3be83f282cad4b5434ff8be603a193f2b0c9a5d01f18119e62dbb2aa08f0188aaac1418b59d84e4e6b68f3fba8", 0xed}, {&(0x7f0000000280)="b618d1663d5a5aefa7ad2a39e9df6471b559256f13eb966ad77d1777dbc50e303c17e1922c63dd2c252343b5a5e3b22f50912cb3fdf5ee2321fa4982980e0bc4a3a13e6b9642274a53eef76549544fb5f313d2476c40b62d40cd2ec04f63660896c426fd0d64eb0b58e61d16e5d5a745884b2e3f520a6e2cd04098186d63140d4940c88289ce38fcdc743eb0c28f2ee54a0676ed70c8b257f6964a158b93abbf3fac1261da95ffb6a28fee24d1e686c7507ca304ffd53b3f569c091dd2083a6642814c146fa150a79e605ae4bbd9", 0xce}, {&(0x7f0000000380)="489174c49a97afc6ed265cb9a92396a89751eda584be248b90e215b5463662", 0x1f}, {&(0x7f0000000480)="55959c77323c98f08b3335c245af131dd10125db202031e775534234c9e240617f9e5849afef36563529b1fb9dd02e312a1b5483c3c1ce360e70e13972a1", 0x3e}], 0x6) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000000)) 19:31:43 executing program 3: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr="e8c7f7ea54210c4a45d92d980c48a465"}, 0x1c) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x7f) [ 850.198658][T25720] IPVS: ftp: loaded support on port[0] = 21 [ 850.364244][T12855] usb 1-1: new high-speed USB device number 69 using dummy_hcd 19:31:43 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) sendmmsg$inet_sctp(r1, &(0x7f0000000040), 0xae, 0x14008800) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="899c96baee153b1f64017be5cb6c20d983549224487c94505c0d15dfcac7952c6dbe", 0x22, r2}, 0x68) [ 850.631904][T12855] usb 1-1: Using ep0 maxpacket: 16 [ 850.762256][T12855] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 850.785014][T12779] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 850.972250][T12855] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 850.981351][T12855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.989518][T12855] usb 1-1: Product: syz [ 850.993978][T12855] usb 1-1: Manufacturer: syz [ 850.998581][T12855] usb 1-1: SerialNumber: syz [ 851.041981][T12779] usb 2-1: Using ep0 maxpacket: 32 [ 851.057335][T12855] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input173 [ 851.174077][T12779] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 851.182692][T12779] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 851.189989][T12779] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 7 [ 851.199118][T12779] usb 2-1: config 0 interface 0 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.212260][T12779] usb 2-1: config 0 interface 0 has no altsetting 0 [ 851.296806][T12855] usb 1-1: USB disconnect, device number 69 [ 851.392590][T12779] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 851.401844][T12779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.409864][T12779] usb 2-1: SerialNumber: 븜Ѡ햮䭾촜鵟孡붻뒥褘꿣ᢟ걚㟥å”댆떟Ẁ㢟ㆎî¬î¶Œã¥¢ç€ê‡­î©Ÿá‹ Õ¿éœ•ã„·è¾¥å¥¸ìŸ®î¤â¤ç¢´áˆ—櫃渚ã™ã­½ï²ê«…㙬î¸æ•„à­¯ï¡ì¾—嵋껿贶깬롱攪춉ꄯ㔂⳴䠟醟졙ﺩ뙊í…⑒餽竡í£ï½°æ¡ ì‹«â­ªï‘–練㿬㻽ꯒ徉è³ï“ ã™Žâ©”㚟ë¨é‚¿ç¨™ì¯¦â½¸ã· 19:31:44 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x1d5) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) close(r0) 19:31:44 executing program 3: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x7c, 0x6, 0x0, 0xead}, {0x7, 0xfe, 0x0, 0x50000}]}) 19:31:44 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0x0, "a8e3ebeb"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x1}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x8, 0x7, 0x0]}]}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x20}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x1, 0x0, "e8d6b9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, 0x0, 0x0) 19:31:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) r9 = socket$rxrpc(0x21, 0x2, 0x2) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r10, &(0x7f0000000640)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x1}, 0x8, 0xa7128902eb2646d4) r13 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x1e1041) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r14, 0x40000000af01, 0x0) r15 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r15) ioctl$VHOST_SET_VRING_ADDR(r14, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r14, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r14, 0x4008af30, &(0x7f0000d7c000)={0x0, r15}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x0, 0x2d1, 0x9, 0x0, 0x0, [{r4, 0x0, 0x2}, {r6, 0x0, 0x6}, {r8, 0x0, 0x7}, {r9, 0x0, 0x9}, {r10, 0x0, 0x8000}, {r12, 0x0, 0x4}, {r13, 0x0, 0x94f}, {0xffffffffffffffff, 0x0, 0x7ff}, {r15, 0x0, 0x3}]}) r16 = syz_usb_connect(0x2, 0x58a042d8cc6292cb, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9a, 0x78, 0xdd, 0x8, 0x14b2, 0x3c11, 0xd383, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x81, 0x80, 0x0, 0x3f, 0x91, 0xc2, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "582dd9"}, {0x5, 0x24, 0x0, 0x200}, {0x5, 0x24, 0xf, 0x1, 0x80, 0x2, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x3}, [@obex={0x1d8, 0x24, 0x15, 0x3f}, @mdlm={0x15, 0x24, 0x12, 0x5}, @acm={0x4, 0x24, 0x2, 0x960cf9399bc44200}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x5, 0x0, 0xea}, @mdlm={0x15}]}]}}]}}]}}, 0x0) syz_usb_control_io(r16, 0x0, 0x0) [ 851.453633][T12779] usb 2-1: config 0 descriptor?? 19:31:44 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400100000001000000030109021b0001010000000904002001ef010100090501020000000000"], 0x0) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r0], 0x1c}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r2], 0x1c}, 0x0) setresuid(r0, r1, r2) [ 851.495472][T12779] usb 2-1: can't set config #0, error -71 [ 851.532241][T12779] usb 2-1: USB disconnect, device number 114 19:31:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xb2\x1d\xbe\v\x8e\t\x1b\xeb\xc9\x02\x12m\x88\x84\a\xc5;\x84\xed\xf3*-4\xbf%v\xf0\xa9\x00') openat$cgroup_ro(r1, &(0x7f0000000080)='mem\x00\x01y/\x06\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xe3\xfare\x8a\x89n', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/81, 0x51}], 0x1, 0x2000107c) [ 851.802113][T15414] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 851.901982][T12855] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 852.001983][ T840] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 852.111927][T12779] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 852.182133][T15414] usb 3-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 0 [ 852.192437][T15414] usb 3-1: config 1 interface 0 has no altsetting 0 [ 852.282178][T12855] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 852.290364][T12855] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 852.299451][T12855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.309729][T12855] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 852.318794][T12855] usb 5-1: config 1 has no interface number 1 [ 852.325055][T12855] usb 5-1: too many endpoints for config 1 interface 5 altsetting 0: 168, using maximum allowed: 30 [ 852.336005][T12855] usb 5-1: config 1 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 852.349586][T15414] usb 3-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.01 [ 852.358868][T15414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 852.367126][T15414] usb 3-1: SerialNumber: syz [ 852.371805][T12779] usb 1-1: Using ep0 maxpacket: 16 [ 852.414975][T15414] usb 3-1: bad CDC descriptors [ 852.422100][T15414] usb 3-1: bad CDC descriptors [ 852.423100][ T840] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 852.434860][ T840] usb 6-1: can't read configurations, error -22 [ 852.532027][T12779] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 852.592082][T12855] usb 5-1: string descriptor 0 read error: -22 [ 852.598578][T12855] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 852.608573][T12855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.622060][ T840] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 852.629981][T12780] usb 3-1: USB disconnect, device number 12 [ 852.652498][ C0] net_ratelimit: 20 callbacks suppressed [ 852.652520][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 852.664672][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 852.671640][T12855] usb 5-1: 0:2 : does not exist [ 852.732083][T12779] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 852.741304][T12779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.749420][T12779] usb 1-1: Product: syz [ 852.753763][T12779] usb 1-1: Manufacturer: syz [ 852.758404][T12779] usb 1-1: SerialNumber: syz [ 852.820746][T12779] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input174 19:31:45 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000001c0)={0x0, 0x5}) r5 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xfffffffffffffffc, 0x26c001) waitid$P_PIDFD(0x3, r5, &(0x7f0000000380), 0x40000000, &(0x7f0000000400)) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100626f6e00020008000b00000000000000", @ANYRES32=r7, @ANYBLOB="7a6086cf3ee5b199a4e333595f64ae7a42d31449346436b3355f91cb5f8cf780b3bea5c7684f988086ef88fa1d6e825e0997aa97c317a71458edf18e57a23a3823759babc206830d7626f313e44acfd977cea6a025680393017ea33d63d43022c58b07ee69430823d566dfaf95c82518aab43292806f4495b1c218a1602b516fa7bf197b9331e8b75200"/153], 0x44}}, 0x0) 19:31:45 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x6, 0x0, &(0x7f0000000040)=0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x1f, 0x2) [ 852.881284][T12780] usb 1-1: USB disconnect, device number 70 [ 852.913924][T12855] usb 5-1: USB disconnect, device number 20 19:31:46 executing program 0: iopl(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, r5, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1bc, r5, 0x21, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca9f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x30}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x86}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3b01}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x1000, 0x7}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000080)={r9}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r9, @in={{0x2, 0x4e23, @remote}}, 0x9, 0x9, 0x1, 0x4, 0x10001}, &(0x7f0000000040)=0x98) [ 853.025886][T25772] QAT: Invalid ioctl 19:31:46 executing program 1: syz_usb_connect(0x3, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cf00a8170500415800000000090209000000004000"], 0x0) r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000000)=[{0x2}, {0x0, 0xffffffff}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000780)=[0x5]) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x2, 0x3ff}, {0x3, 0x2, 0x2800}], 0x3, &(0x7f0000000040)={0x0, 0x989680}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) poll(&(0x7f00000000c0)=[{r1, 0x508a}], 0x1, 0x7) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setns(r2, 0x20000000) 19:31:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60d8652b00142c00fe8000000000000000000000000000aafe8000000000000000000000000000aa3a0000052035ba49a4f5f9e9bdc09679050eb21df37a037ac01d7cb0c4fc043160e3eb137547245878c620b359c9d2a5219a043026bb5cf862d0ffb7bf51d661ce087d7ec99dc9c1cc19d8734839eda9e4c3746386a68d6e988687f6c098b87f5b2c4945393a6ba1ee7c2f1519cc000af924607586f89b989c4a226301d4b1c552a38418a1", @ANYRES32=0x41424344, @ANYRES16=r0, @ANYBLOB="50000000edc66cc6"], 0x0) [ 853.104116][ T840] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 853.112264][ T840] usb 6-1: can't read configurations, error -22 [ 853.139116][ T840] usb usb6-port1: attempt power cycle [ 853.402436][T12779] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 853.433395][T12777] usb 2-1: new high-speed USB device number 115 using dummy_hcd 19:31:46 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x1, 0x2, 0x1, 0x1}}, 0x26) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsa(&(0x7f0000001500)='/dev/vcsa#\x00', 0x1, 0x141001) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) write$UHID_INPUT(r4, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x1006) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="65aa9c3b15975b9346cfe4377e65e779"}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000128bd7000fddbdf2504ecff00080005000300000008000300030000000c0004007f000000060000000800030001000000080003000900000004000400"], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x21) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x50080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="192bce5e2ffb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$TCSETX(r7, 0x5433, &(0x7f0000000000)={0x5, 0x3, [0x101, 0x7b24, 0x7, 0x4, 0x3], 0x8001}) 19:31:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) semctl$IPC_INFO(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=""/77) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x120) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10000017a) shutdown(r1, 0x1) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x1a) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000180)={0x5, 0x0, 0x100, 0x1000, 0x0, 0x7}) [ 853.512470][T12780] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 853.577947][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 853.692504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 853.699088][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 853.711953][T12777] usb 2-1: device descriptor read/64, error 18 [ 853.731868][T12778] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 853.759538][T12780] usb 1-1: Using ep0 maxpacket: 16 [ 853.765496][T12779] usb 3-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 0 [ 853.775583][T12779] usb 3-1: config 1 interface 0 has no altsetting 0 [ 853.898887][T12779] usb 3-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.01 [ 853.908298][T12779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 853.916578][T12779] usb 3-1: SerialNumber: syz [ 853.922197][ T840] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 853.932288][T12780] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 854.004964][T12779] usb 3-1: bad CDC descriptors [ 854.012291][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 854.018629][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 854.054084][T12779] usb 3-1: bad CDC descriptors [ 854.102629][T12780] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 854.111873][T12780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.119907][T12780] usb 1-1: Product: syz [ 854.124339][T12780] usb 1-1: Manufacturer: syz [ 854.128979][T12780] usb 1-1: SerialNumber: syz [ 854.137510][T12777] usb 2-1: device descriptor read/64, error 18 [ 854.172374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 854.178631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 854.182296][ T840] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 854.192766][ T840] usb 6-1: can't read configurations, error -22 [ 854.214245][T12778] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 854.222389][T12778] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 854.231118][T12778] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.241404][T12778] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 854.250615][T12778] usb 5-1: config 1 has no interface number 1 [ 854.256830][T12778] usb 5-1: too many endpoints for config 1 interface 5 altsetting 0: 168, using maximum allowed: 30 [ 854.267772][T12778] usb 5-1: config 1 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 854.284821][T12855] usb 3-1: USB disconnect, device number 13 [ 854.323144][T12780] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input175 [ 854.502366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 854.571925][T12777] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 854.579771][ T840] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 854.602348][T12778] usb 5-1: string descriptor 0 read error: -71 [ 854.608798][T12778] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 19:31:47 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x10, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xb000000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@ni={0x193}}}}}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x4, 0x20}) [ 854.618142][T12778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 19:31:47 executing program 4: [ 854.677116][T12778] usb 5-1: can't set config #1, error -71 [ 854.685222][T12778] usb 5-1: USB disconnect, device number 21 [ 854.735691][T12780] usb 1-1: USB disconnect, device number 71 [ 854.852411][ T840] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 854.860088][ T840] usb 6-1: can't read configurations, error -71 [ 854.866745][T12777] usb 2-1: device descriptor read/64, error 18 [ 854.876538][ T840] usb usb6-port1: unable to enumerate USB device 19:31:48 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, "ed6121", "0144cd0250f34ca7b07915472cd0719e13da163aaf4d978c8c8df1f45a29570e701824fbbd9e1ca4f565138b96f339a5f67c36d6d24b0bf255a5caaf6e5521072ff76b84fa3f0865bf669c750e19842e0f8ea8d15cf45827268b2d2a46b7dcb62f1324ff936f9ef9fd172f610b69d8ff0f8cfb906e6ded837e0f5975172bf2fe880c5b30a6affbb7acfb123974fb65ac6f2e86a6ef52fb99dafd3bb78b75e3fb04768ab142593285c9b774d73aa1bd208eb596eadac041aa80714bce08b5b8af68d9465d32d05809eff8a6cc23d94208a002462d733e623640a0ba4a083ce1ae9d5b36c946d727b792807b123e4e1380ec24576947cbe60f6fb5fe9576730ecb"}}, 0x110) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 19:31:48 executing program 4: r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f0000000080)="2f4c03ec3bad4def", 0x8, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev\x18input/event#\x00', 0x82, 0x10400) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x5, 0x5, 0x9}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x77359400}) 19:31:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x302, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f022c708ca0768a86dd9000000010902120001000000000904f90000cff23800"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19:31:48 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x4, 0xcc46, 0x7f, 0xe4, 0x10}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x8000001040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x5) execveat(r5, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x2802, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) getpeername$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r10, &(0x7f0000000640)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in6=@ipv4={[], [], @remote}, 0x4e21, 0xccd, 0x4e23, 0x0, 0x2, 0x1c0, 0x20, 0x33, r9, r12}, {0x9, 0x0, 0x2, 0x592ead65, 0xb6, 0x6, 0xffffffffffff2a7a, 0x80000000}, {0x7, 0xfff, 0x8414000, 0x9}, 0x80000000, 0x6e6bb8, 0x0, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d4, 0x2b}, 0xa, @in=@empty, 0x3507, 0x4, 0xdd125f850d7e9d92, 0x6, 0x10000, 0x919, 0x1}}, 0xe8) 19:31:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000040)={0x0, 0x0, 0x9, [], &(0x7f0000000000)=0x1}) [ 855.306580][T25819] IPVS: ftp: loaded support on port[0] = 21 [ 855.319476][T25828] vhci_hcd: vhci_hub_control:593: invalid port number 0 [ 855.351236][T12777] usb 2-1: device descriptor read/64, error 18 [ 855.668499][T12780] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 855.676980][T12777] usb usb2-port1: attempt power cycle [ 855.725001][T12855] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 855.810495][T25825] IPVS: ftp: loaded support on port[0] = 21 [ 855.912504][T12780] usb 4-1: Using ep0 maxpacket: 8 [ 856.032531][T12780] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 856.040884][T12780] usb 4-1: config 0 has no interface number 0 [ 856.047171][T12780] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=d9.6d [ 856.056292][T12780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.061921][T12855] usb 1-1: Using ep0 maxpacket: 16 [ 856.067380][T12780] usb 4-1: config 0 descriptor?? [ 856.116118][T12780] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 856.124505][T12780] cxusb: set interface failed [ 856.129224][T12780] dvb-usb: bulk message failed: -22 (1/-30592) [ 856.140298][T12780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 856.152154][T12855] usb 1-1: device descriptor read/all, error -71 [ 856.164397][T12780] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 856.173181][T12780] usb 4-1: media controller created [ 856.205680][T12780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.233991][T12780] dvb-usb: bulk message failed: -22 (5/-1) [ 856.239883][T12780] lgdt330x 0-000e: i2c_read_demod_bytes: addr 0x0e select 0x02 error (ret == -121) [ 856.249609][T12780] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 856.292027][T12780] dvb-usb: bulk message failed: -22 (1/-30592) [ 856.298342][T12780] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 856.323352][ T840] usb 4-1: USB disconnect, device number 17 [ 856.356071][ T840] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 856.391925][T12777] usb 2-1: new high-speed USB device number 117 using dummy_hcd 19:31:49 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000180)={0x2f, @multicast2, 0xfea, 0x0, 'rr\x00', 0x8, 0x200, 0x2a}, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x7a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000fa02c6330000000000a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x18, 0xd6, 0x8, 0x5a617b6e, 0x248, r1, 0x5dc, [], r7, r9, 0xffffffff, 0x2}, 0x3c) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r12) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000d7c000)={0x0, r12}) setsockopt$inet_sctp6_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000200), 0x4) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$kcm(0x29, 0xd, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video1\x00', 0x2, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r14, &(0x7f0000000640)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @link_local}, 0x14) close(r14) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000d7c000)={0x0, r13}) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000000080)="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") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa4c915410e644fec, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x9) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 856.661986][T12777] usb 2-1: device descriptor read/64, error 18 19:31:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x16c, 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/mcfilter6\x00') bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x5}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:31:50 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="af39a8cfdf37b360bb8912b342786f1bc9d8049410578e299837bf6858c1b0862ecdddda5a83e8fb050420c5af41610487bf2452d404721c45ab639c2967119fe27108c055515baf84b44a00e7d68b748bf20211ede593f8afde30caa7b9499b1f92dea8d5055e07d12f8d799aca9bdbecd3f2e3df952a2a55ba831edad87416938f56d72c44c456122cb05dae15eba88305a1f6d83e429521be64849c03a20291bd62d38bf5431e306a240559e2043942635041b5ebaf261ff79897c0dd80d0cb8066dff216a53bbbd3b9fe7a1d186a", 0xd0}], 0x1, &(0x7f00000002c0)=[{0x78, 0x0, 0x8001, "8afe3044e608ec69ed8a025d2e883832d3f67747d5c2d318d18277c6c8b0b19e0ee85271e7e6b304fa6ec7de8ffb784f7c54ff5a4add6f4b0fbaab5f260312c46fa0ab6db4058917f48ee6e7c7315e27333e87e8c860a44635b81d2ca4d6eaf6a281"}], 0x78}, 0x400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 19:31:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000004002b0008001b0000000000"], 0x2c}}, 0x0) 19:31:50 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6\xe47_/v\xa7\xa6st-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x800100a, 0x10000, 0x1}) 19:31:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='2d\x00\"yH\xc0;<}\xb2net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0x20, &(0x7f0000000140)=0x2) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000040)={0x5a, 0x1, 0x9, 0x97a0, 0xdc000000}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x6fa6c203625b0e1, 0x749) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 857.312115][T15414] usb 4-1: new high-speed USB device number 18 using dummy_hcd 19:31:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x7ff, 0x200200) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000380)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x2, 0x49441c5e}, 0xfffffffffffffdf8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r9, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x50, 0x28, 0x421, 0x0, 0x0, {0x0, r9, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, @m_bpf={0x18, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x4}}}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r9, {0xc}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0) [ 857.601996][T12855] usb 1-1: new high-speed USB device number 74 using dummy_hcd 19:31:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xae60, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x1, 0x4, 0x0, 0x0, @adapter}, {0x1, 0x0, 0x0, 0x0, @adapter}]}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r6, 0x100, 0x3, [0xff, 0x40, 0xffff]}, 0xe) [ 857.842378][T12855] usb 1-1: Using ep0 maxpacket: 16 [ 857.852635][ C0] net_ratelimit: 13 callbacks suppressed [ 857.852656][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 857.864666][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:31:50 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x5c, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x80, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x40}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0xac, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 857.962533][T12855] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:31:51 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x6}, 0x28, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES16=r3, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r3, @ANYRES32=r6]]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x0, "46db21cfe16b1ab8"}) accept$packet(r0, 0x0, &(0x7f0000000040)) 19:31:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x181000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/52) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0) [ 858.152223][T12855] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 858.161395][T12855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.169608][T12855] usb 1-1: Product: syz [ 858.173890][T12855] usb 1-1: Manufacturer: syz [ 858.178539][T12855] usb 1-1: SerialNumber: syz [ 858.182383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.189445][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:31:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fbb930102404009d430b0000000109021200010000000009047a00007b68d800"], 0x0) r1 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="32beb707418f7595576a5dd4f7bd642258a0a9c0fffd9f753aedc458d00eb0da815c49238a0ebd57", 0x28, r1) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="dcbe7b0409f7c85bc05af4750a1b78b5b5ef8175b0cc95da313fd403e349a518519947cc117b09c4f4513ea3cf44fa8dc6a081c1f31e9269f1494579aea95d5057d3ec2fee16e4bf427d8b68b42d036a929981f45abb3d7dac49087e33f7573825d21e39bf73cb73324ab7929f76656d7e77b84e2c76060aa2dbad112ee8a236e7a94ebdfc04b14d1c8e151d5f3edb80e7caf895", 0x94, r1) r3 = add_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r2, &(0x7f00000003c0)=[{&(0x7f0000000200)="d20c36dbed5a7b2577d53594f2061562d9cb0ebd84788771ae88ca27867e934ba1afbe5d4aa965adafd1baec51b2f7e1f0402755508180726d4b3018229ec7f570195fa1396f0c1571bb0196cdaca2e459c87666e77d5c6305c62000c40b9c443d8f6be25873a856ee579ca6faad9aed59bda1514f621eec9197da933e7a2400c0e324eb5ad046a8caf65996acaa33c63155bc484d7b5e6d0cef33f07df860a9a8f666f053d4ad5d30d91a7716e09429", 0xb0}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000000480)="9611d19bd19e6c67464de5ecb301b7b4707ac19c15e8a029626f9ceb19a464ad8a1c45a5fdcb07e3fbd801020ee4088cafdcdb97ca3b39c8c9e1c396dac3dbca808054f27c6c255f579a0c143c0001cf244c71a9d527680d313c2ed0a3c889956bb177281ec3ca1841a43a78988579549393f75f91cdd65020b36d32765d27cc892aee29f7dd0b5b8a5e8f347b452576e58502f834442785cfd0971580cd1ebdaec7e7cbe608e9453f3316f4eb9467cbc0046aae69f34b47cee9337403d758c991d56fc448180ef912cc4f5dc49fbb", 0xcf}, {&(0x7f00000002c0)="63f259cb2b6d2c4e8e9103d8883d9ecd94bf8064724b687a86384b42cbfb5f60207d6029ed6712f0cd3a06b6bb29704d31c8a919ca67ff89840f76345eea1eda6e8d11e1d426adfc67fff29faf43ab1a55e7eded61f8", 0x56}, {&(0x7f0000000140)="41aba461", 0x4}, {&(0x7f0000000580)="15da7d57e9fc1712a094b406745b5894b0aa219fd6f33b3e6015c7f97537959b03f937b8aa73d56f89fb5f93c93d05e28c6d23281ae9eae44584c84fa4de63c82f65ab95e0b924cf0f780eb59e3b576388669582d6f2036763ee9e8a5ab927369141fcd9c10b95382660ea5045cc720e87e00514cba05add091a34be9d768cb7f8126e549bc2c71d5442b469e41325aaff27a9817bbd932cacf0f8f28310b15f0e4f0b61fd3725fe90ffa988468902ac66", 0xb1}], 0x6, r3) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="01002f00dc7cd5602682682cb2f1663c6d093b1a7bf1d6a5244c62d382e281f94141b1914ba92dcd4fa60884eeca19b78488c8cf184aa5a627d048c5264634b2461376c19e9229bd8a8c50c6bd34474265d0e808dec06eadb03d5fc80b496637d598a320f0c1ba5c3cfc174839b7c77fa255c3517c"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 858.268386][T12855] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input176 [ 858.278893][T15947] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 858.313064][T25889] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 858.332289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 858.338496][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:31:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) prctl$PR_GET_NAME(0x10, &(0x7f00000001c0)=""/67) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x100, @mcast2, 0x3ff}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0xce, 0x4) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xffffffffffffffee, 0x40800, &(0x7f0000000100)={0xa, 0x28000004e22, 0x0, @ipv4, 0x9}, 0x293) [ 858.471278][T15414] usb 1-1: USB disconnect, device number 74 [ 858.642069][T15947] usb 6-1: config index 0 descriptor too short (expected 92, got 74) [ 858.650881][T15947] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 858.659203][T15947] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 858.662240][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.667384][T15947] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 858.673405][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 858.682200][T15947] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.698850][T15947] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 858.711878][T15947] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.720999][T15947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.723846][T12777] usb 2-1: device descriptor read/64, error -71 19:31:51 executing program 3: setrlimit(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) dup3(r0, r1, 0x80000) clone(0x0, &(0x7f0000000000)="a123c9bea7986585f2ea68b776ffb0757a845f671aaae499cd9b134c08751f1f686b62a77d8ca8b7896a9632b9b8e5fa1a7a873fb909009645ab11df03d218c7dfeb53f829a25a178fb1b3c44b61ace875086cc226bca426cbb885120abecbec9367c1d748f27c4e4915f1fb9bbb415fcbfcbebb8cc5d50c6be422bff19cbaf58aa0469986df8d9064ddf2585b33a75bcfb63fe327ec72", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="63d14906cab5e6b26b912d1f8ba6fbe6bc7314ecd53a02bac584bd7a56f2425a58dbc9c8ab59e76d1a737f1b9f0d1985d72f34c4a634a08c8dc23818ed4e9cbd81e07ed97c6e23bd5f0354e093c22a37646a3c9c0cbfe8527a56bb9e04314aa4b2176ee166131eb0547ea8191ab3a2de157e11d524525f4c5bb24dea6cd749dca9") [ 858.892378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 858.898784][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:31:52 executing program 4: socket$inet(0x10, 0x3, 0xc) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x400042) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x401, 0x4, 0x0, 0x3, 0x81, 0x2}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a07031dfffd946fa2830020200a0010000300001d85680c1baba20400ff7e", 0x24}], 0x2d7}, 0x0) [ 859.002494][T12777] usb 2-1: new high-speed USB device number 118 using dummy_hcd 19:31:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = shmget(0x1, 0x1000, 0x2c001808, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000240)=""/250) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xff, 0x631baaf1535a1f7e) write$P9_RWALK(r2, &(0x7f0000000180)={0x16, 0x6f, 0x2, {0x1, [{0x8}]}}, 0x16) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000001c0)=0x6) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x200902) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) sendmsg$unix(r2, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="7929bd4e379bb0431e8a9f99f854209adc3bb5836183365fb3"], @ANYRES16, @ANYBLOB="4ec4557864bca9014988163c259a3d7eb12c1360132d00d7c094bcf7cab27af64d9aa4b4aaffe76facd993112a9ca0b13b561ee5e005da0b1a", @ANYRES32], 0x47}, 0x20000000) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x519060, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000380)={0x8, "290fe1cd7c4226e69fa47a88bb02b17289be84c8def7b763e5406a3bfa693ee0", 0x0, 0x1}) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setreuid(0x0, r6) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) [ 859.252150][T15414] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 859.271949][T12777] usb 2-1: Using ep0 maxpacket: 16 [ 859.287502][T25920] input: syz1 as /devices/virtual/input/input177 [ 859.394441][T12777] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 859.402802][T12777] usb 2-1: config 0 has no interface number 0 [ 859.409002][T12777] usb 2-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.43 [ 859.418277][T12777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.428078][T12777] usb 2-1: config 0 descriptor?? [ 859.501927][T15414] usb 1-1: Using ep0 maxpacket: 16 [ 859.526618][T25922] input: syz1 as /devices/virtual/input/input178 [ 859.622439][T15414] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 859.792233][T15414] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 859.801389][T15414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.809579][T15414] usb 1-1: Product: syz [ 859.813893][T15414] usb 1-1: Manufacturer: syz [ 859.818511][T15414] usb 1-1: SerialNumber: syz [ 859.865487][T15414] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input179 [ 859.992301][T15947] cdc_ncm 6-1:1.0: bind() failure [ 860.001956][T15947] cdc_ncm 6-1:1.1: bind() failure [ 860.022862][T15947] usb 6-1: USB disconnect, device number 115 [ 860.065233][T15414] usb 1-1: USB disconnect, device number 75 19:31:53 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100, 0x102) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x45}, 0x0) 19:31:53 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x5, 0x200101) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r4, 0x4}, 0x8) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x200000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000200)=0x80000001) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x6, 0x80, r4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r6, 0x8, 0xe9cf, 0x8}, &(0x7f0000000140)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:31:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000140)=""/236) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x30002, 0x0, [0x5d, 0x7fff, 0x9, 0xc159, 0x6, 0x101, 0x827b, 0x275]}) 19:31:53 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000040)={0x3ff, &(0x7f0000000180)="f6bdae24c8de507a26b9237ad709a7e85b289ec98ff18954f993fe15f61a86dec928c37a405e9b9bf4f6b3b5dcecaff73dfc663dc10e54aea97d13201f6e979a2dbb59577f02b224cedc5ab3094a8af0ab00be1948778d874fb1c224fa269b834a92daaa6eead888a8d74a3258249d9fdd87ed907ed9692f2afebd32e32a17204417824415a3"}) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x3, 0x3, 0x4}) [ 860.332579][T12777] smscufx: error -5 resetting device [ 860.333648][T12777] smscufx: probe of 2-1:0.122 failed with error -5 [ 860.691813][T15414] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 860.742850][T12777] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 860.941963][T15414] usb 1-1: Using ep0 maxpacket: 16 [ 861.062181][T15414] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 861.122048][T12777] usb 6-1: config index 0 descriptor too short (expected 92, got 74) [ 861.130262][T12777] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 861.138632][T12777] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 861.146698][T12777] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 861.155804][T12777] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.166872][T12777] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 861.179881][T12777] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.188988][T12777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.254947][T15414] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 861.264125][T15414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.272276][T15414] usb 1-1: Product: syz [ 861.276490][T15414] usb 1-1: Manufacturer: syz [ 861.281129][T15414] usb 1-1: SerialNumber: syz [ 861.325843][T15414] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input180 19:31:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x4, 0xfffffffd, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r12) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000d7c000)={0x0, r12}) accept4$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14, 0x800) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r14, &(0x7f0000000640)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @link_local}, 0x14) r16 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r16, &(0x7f0000000640)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'b\x00\x00\x00\x00\x00\x00\x00\x04\x1d\x00', r13}) bind$packet(r10, &(0x7f0000000640)={0x11, 0x0, r18, 0x1, 0x0, 0x6, @link_local}, 0x14) r19 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r19, 0x40000000af01, 0x0) r20 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10002, 0x0) close(r20) ioctl$VHOST_SET_VRING_ADDR(r19, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r19, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r19, 0x4008af30, &(0x7f0000d7c000)={0x0, r20}) r21 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r21, 0x40000000af01, 0x0) r22 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r22) ioctl$VHOST_SET_VRING_ADDR(r21, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r21, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r21, 0x4008af30, &(0x7f0000d7c000)={0x0, r22}) r23 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r23, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r23, &(0x7f0000000640)={0x11, 0x0, r24, 0x1, 0x0, 0x6, @link_local}, 0x14) r25 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r25, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r25, &(0x7f0000000640)={0x11, 0x0, r26, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_usb_connect(0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x84800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r28 = dup2(r27, r27) ioctl$PERF_EVENT_IOC_ENABLE(r28, 0x8912, 0x400200) 19:31:54 executing program 2: unshare(0x400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKROGET(r0, 0x1267, &(0x7f0000000000)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140), 0x4) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x18000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f00000000c0)=""/117) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) 19:31:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0/bus\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0/bus\x00', 0x0, 0x1000, 0x0) mount(&(0x7f0000000240), &(0x7f0000000140)='.', 0x0, 0x3002480, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000440)=""/199) [ 861.532340][T12777] cdc_ncm 6-1:1.0: bind() failure 19:31:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x98, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd}, [@acm={0x4}, @obex={0x5}, @mbim_extended={0x8}, @mdlm_detail={0x3a, 0x24, 0x13, 0x0, "d4c03233858a188c0d1c30230441a59da594d9194f83894e9ee8ee110236cfd5d273d0a6dfc048e93a850d407068fb08b9c1405d471e"}]}}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000140)={0xa}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4}}, {0x4, &(0x7f0000000040)=@lang_id={0x4}}]}) 19:31:54 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x26}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xffffffffffffffbc) [ 861.572634][ T840] usb 2-1: USB disconnect, device number 118 [ 861.592222][T12777] usb 6-1: string descriptor 0 read error: -71 [ 861.625620][T12777] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 861.654098][T12780] usb 1-1: USB disconnect, device number 76 [ 861.676900][T12777] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 861.702202][T12777] usbtest: probe of 6-1:1.1 failed with error -71 19:31:54 executing program 3: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/122, &(0x7f0000000000)=0x7a) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xe) socket(0x5, 0x80004, 0x9) fallocate(r1, 0x8, 0x4, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280a38dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) [ 861.723012][T12777] usb 6-1: USB disconnect, device number 116 19:31:54 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000201010000409fbc60e130d79915434810000800020004000100a27e91197c7352b23a2e73fe2a849f747eaae1ae7051383e413c9e0e8280d75f6fed64671a75bf639bd7e3266599397ace7a8e2aadd6482454dfe168d77302b1c644b493b64094b31b9267bf91dc3266f6410000"], 0x24}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010507031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x169142, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) 19:31:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000040)="8e0221d33bdba8928c03d9a5462ce33c8b5d797cf1c65edfc86cef10b0c901fe1a5af2658e9962a1b1ab5fde9818d28229921305a5b834b539f71b464c06fa3b4400f85096e00b6b00916814bce23936ac27c20b6fd3b8cd3e8a5a6ad9fc16ce276280c5360f4f992ef5817dcce0d96b3386f43b43d5e68f02623135a0bb38287dc9b37ed2a593d13245c4d97534b78003fc78bf5f6982aea45ac5901e1a8cc722f82004af17017e99ac7817ad37a7f8cfb47f45fbfa231a0c6b4cce8f274d7d9e0aad2f711625fc3f7b466a8240aabd2d1065670a3e6c746ccae3ec838f29bf877f9aaf1e", 0xe5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0x3, r1}) r7 = socket$inet(0x2, 0x2, 0x0) r8 = dup2(r4, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f00000004c0)={0x10000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xf0ff7f}], 0x1}, 0x0) 19:31:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x501}, 0x4c}}, 0x0) 19:31:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = gettid() tkill(r6, 0x12) tkill(r6, 0x1000000000016) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={[], 0x9, 0xfffffeff, 0xffffffff, 0x0, 0x7f, r6}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) getsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000016003f0400000000000000000a00000021fe000014000100fe8000000000000000000000000000aa"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket(0x10, 0x80002, 0x0) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 19:31:55 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x15, 0x0, 0x0}) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) syz_open_dev$evdev(0x0, 0x0, 0x0) write$hidraw(r1, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) getrandom(&(0x7f0000000080)=""/42, 0x2a, 0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000140)='/dev/radio#\x00', &(0x7f0000000180)) [ 862.083545][T26005] __nla_validate_parse: 5 callbacks suppressed [ 862.083570][T26005] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 862.104809][ T840] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 862.532114][T15414] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 862.592498][ T840] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 862.603566][ T840] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 862.613460][ T840] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 862.623519][ T840] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 862.771937][T15414] usb 1-1: Using ep0 maxpacket: 16 [ 862.872078][ T840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 862.881350][ T840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.889740][ T840] usb 2-1: Product: syz [ 862.893037][T15414] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 862.894074][ T840] usb 2-1: SerialNumber: syz [ 863.052182][ C0] net_ratelimit: 18 callbacks suppressed [ 863.052202][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 863.062119][T15414] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 863.064233][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 863.073053][T15414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.086824][T15414] usb 1-1: Product: syz [ 863.091011][T15414] usb 1-1: Manufacturer: syz [ 863.095715][T15414] usb 1-1: SerialNumber: syz [ 863.145459][T15414] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input181 [ 863.205958][ T840] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 863.219834][ T840] usb 2-1: USB disconnect, device number 119 19:31:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000180)="0f01dfb9800000c00f3235000400000f3064470f01c965f30f320f20e035000002000f22e066baf80cb85413a18cef66bafc0ced410f01c566ba2000b800800000efc4c24db836c481ba53ac5c8e000000", 0x51}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) fsync(r4) getcwd(&(0x7f0000000040)=""/137, 0x89) [ 863.342832][T15414] usb 1-1: USB disconnect, device number 77 [ 863.942222][ T840] usb 2-1: new high-speed USB device number 120 using dummy_hcd 19:31:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x0, 0x105, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x8, 0x20, 0x7e, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x37, {{0xa, 0x24, 0x1, 0x6, 0x8}, [@processing_unit={0x9, 0x24, 0x7, 0x5, 0x3, 0xfd, "0541"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "e8"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x4, 0x4, 0x7f}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x80, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x0, '7'}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, 0x4, [0x2, 0x7, 0x1, 0x9], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x80, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x53, 0x7f, "a4bf", "d4bda8"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x6, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x32, 0x1, 0x8, 0xe1, "644af42499fd"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xff, 0x4, 0x81, 0x81, '[i'}]}, {{0x9, 0x5, 0x1, 0x9, 0x32, 0x4, 0x5, 0x1, {0x7, 0x25, 0x1, 0x80, 0x12, 0x101}}}}, {0x9, 0x4, 0x2, 0x0, 0x0, 0x1, 0x2, 0x0, 0x20}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x44, 0x6, 0x6}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x0, 0x3f, '?t'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xa6, 0x2, 0x1, 0x9, "4e559d544f68"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x1}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3ff, 0x9, 0xc6, 'Bo'}]}, {{0x9, 0x5, 0x82, 0x9, 0x1e4, 0x4, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x64, 0x1000}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xce, 0x29, 0x3, 0x20}, 0x1d, &(0x7f00000001c0)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x7, 0xfffc}, @ss_cap={0xa, 0x10, 0x3, 0x6, 0x0, 0x40, 0x6, 0xfff7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x4, 0x80}]}, 0x3, [{0x81, &(0x7f0000000200)=@string={0x81, 0x3, "ce79115c20fa7ab58e35b67ccdd68a4b90ebc5351578064918b273dbf6ab93ce09db04662980e34c43cae55562eaab62fc66c9adb73f846ce2099da7eb4411b536ca917b0b604541da2213b0f5dd17879ec3e87204ad169c2beb84549888ee09d5b018ba67072b79172dfd94276d841b5b24b125da86d4b99be40faa5341e4"}}, {0xc1, &(0x7f00000002c0)=@string={0xc1, 0x3, "d9d505d6ee4c4c520fef98739e01c20f1055c23f08dcca7023b65fbfcb9bc968a07fb9d3e6b065fb657b13a98dedf2c025b1b7d673376197f02b6eb8d1f381d289721831598412642fb558730d829b55cb5805bb51870b6c9c2c5eaebe6ee6ff023b0feacc904aea5f8bbab2ca54a46322eda61297f14f9c9df6feaf8c1adec3dadae31042d0f3afc7b7df4a8ecbbbcf138f7b64298ca3f5db70e3fcdc0320384eee11f74ee502b58f18b26a27aef56a5e8765d8799d6d29210163c22a0580"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="78010000170001000000000000000000fe8000000000bb0000000000000000ac141400000000000000000000000000ac1414aa000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fe8000000000000000000000000000bb0000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000feffffff"], 0x178}}, 0x0) 19:31:57 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x258a, 0x6a88, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x80, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x7f}}}}}]}}]}}, 0x0) 19:31:57 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xe3, 0xad, 0x20, 0x2001, 0x3309, 0x8a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc, 0xc1, 0x47, 0x0, [], [{{0x9, 0x5, 0x8d}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0x84, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000001940)=""/4096, &(0x7f0000000040)=0x1000) [ 864.092188][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.098376][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:31:57 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005074a608480b04107ef30000000109021208011000000009040100004a5d54000800000000000000acdd21ff8cbac574f6e80fe93a88f5956a342b220f2f08be22941444cb6e279422c71a183fa4460027ea615d57dc99c33a9eb8cad135bfba827f0800a4be2630d4104c94f8de5a4fa3410000000000000000fd00130000000000"], 0x0) 19:31:57 executing program 5: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xb89b, 0x80) write$FUSE_BMAP(r0, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x7, {0x800}}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005121102168083d1b8e01bd04000000010902120001000000000904c400006ce46200"], 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200, 0x0) mq_getsetattr(r1, &(0x7f0000000080)={0x9, 0x7, 0x8, 0xded, 0xcaf4, 0x675, 0x0, 0xfffffffffffffc21}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$TCSETX(r3, 0x5433, &(0x7f00000000c0)={0x4, 0x8, [0xff4, 0x40, 0x281, 0x534, 0x2], 0x20}) [ 864.242302][ T840] usb 2-1: device descriptor read/all, error -71 [ 864.391902][T12777] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 864.412446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.418633][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 864.424737][T12780] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 864.431875][T15414] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 864.482099][T15947] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 864.572406][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 864.578379][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 864.612081][ T840] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 864.641899][T12777] usb 3-1: Using ep0 maxpacket: 32 [ 864.671970][T12780] usb 5-1: Using ep0 maxpacket: 32 [ 864.722789][T15414] usb 1-1: Using ep0 maxpacket: 16 [ 864.762165][T12777] usb 3-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 864.771399][T12777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.782576][T12777] usb 3-1: config 0 descriptor?? [ 864.801987][T15947] usb 6-1: device descriptor read/64, error 18 [ 864.842724][T15414] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 864.853567][ T840] usb 2-1: Using ep0 maxpacket: 8 [ 864.892376][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 864.898562][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 864.962490][T12780] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 864.971664][T12780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.979817][T12780] usb 5-1: Product: ж [ 864.984061][T12780] usb 5-1: Manufacturer: 헙혅䳮剌î¼çŽ˜Æžà¿‚å”㿂烊똣뽟鯋棉羠펹냦ﭥ筥ꤓî¶ìƒ²ë„¥íš·ã³é¡â¯°ë¡®ï‘íŠçŠ‰ã„˜è‘™æ’딯ç˜èˆå–›å£‹ë¬…è‘氋Ⲝ깞溾￦㬂î¨éƒŒî©Šè­ŸëŠºå“ŠæŽ¤î´¢áŠ¦ï†—é±ïšê¿¾áªŒìžáƒ£í‚꿳럇䫟쮎쾻輓摻谩烛ﳣϜ㠠딂á¢æª²ê¸§æ«µèžéµ¹â¥­Ä¡ì‰£Ôª [ 865.012320][T12780] usb 5-1: SerialNumber: syz [ 865.012515][T15414] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.40 [ 865.017960][ T840] usb 2-1: config index 0 descriptor too short (expected 2066, got 18) [ 865.026283][T15414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.034608][ T840] usb 2-1: config 16 has an invalid interface number: 1 but max is 0 [ 865.042604][T15414] usb 1-1: Product: syz [ 865.050680][ T840] usb 2-1: config 16 has no interface number 0 [ 865.054954][T15414] usb 1-1: Manufacturer: syz [ 865.054992][T15414] usb 1-1: SerialNumber: syz [ 865.070507][ T840] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=f3.7e [ 865.079702][ T840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.092080][T12777] rtl8192cu: Chip version 0x10 [ 865.147526][ T840] usb 2-1: selecting invalid altsetting 1 [ 865.153555][ T840] ttusb_init_controller: error [ 865.158357][ T840] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 865.184578][ T840] ves1820: ves1820_readreg(): readreg error (reg == 0x1a, ret == 0) [ 865.192820][ T840] stv0297_readreg: readreg error (reg == 0x80, ret == 0) [ 865.199929][ T840] dvb-ttusb-budget: A frontend driver was not found for device [0b48:1004] [ 865.214653][T15947] usb 6-1: device descriptor read/64, error 18 19:31:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff40) ioctl$TCXONC(r0, 0x540a, 0x7) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 865.346846][T15414] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 865.353175][T26062] IPVS: ftp: loaded support on port[0] = 21 [ 865.370470][T15414] usb 1-1: USB disconnect, device number 78 [ 865.402069][ T840] usb 2-1: USB disconnect, device number 121 [ 865.534833][T12780] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 865.543507][T12780] usb 5-1: found format II with max.bitrate = 68, frame size=6 [ 865.551174][T12780] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 865.683564][T15947] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 865.698118][T12780] usb 5-1: USB disconnect, device number 22 19:31:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff40) ioctl$TCXONC(r0, 0x540a, 0x7) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 865.913794][T26070] IPVS: ftp: loaded support on port[0] = 21 [ 865.992216][T15947] usb 6-1: device descriptor read/64, error 18 [ 866.162122][T15414] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 866.182271][ T3932] usb 2-1: new high-speed USB device number 122 using dummy_hcd 19:31:59 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff40) ioctl$TCXONC(r0, 0x540a, 0x7) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 866.341625][T26075] IPVS: ftp: loaded support on port[0] = 21 19:31:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x64}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4c68a8de4f806115, 0x0) listen(r0, 0x5) [ 866.522576][T12777] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 866.550369][T12777] usb 3-1: USB disconnect, device number 14 [ 866.557787][T15947] usb 6-1: device descriptor read/64, error 18 [ 866.746501][ T3932] usb 2-1: Using ep0 maxpacket: 8 [ 866.751903][T15414] usb 1-1: Using ep0 maxpacket: 16 [ 866.758070][T15947] usb usb6-port1: attempt power cycle 19:31:59 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xad, 0xa5, 0xbc, 0x8, 0x12d1, 0x142c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x2, 0x2f, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}, {{0x9, 0x5, 0x2, 0x12}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x182) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$int_in(r7, 0x5452, &(0x7f0000000280)=0x9) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x101800, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r8, &(0x7f0000000240)='./file0\x00', 0x2) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r9, 0x424}, &(0x7f0000000140)=0x8) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000000c0)={0x10000, 0x100000, 0x3, 0xd6, 0xae}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) 19:31:59 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c56c17104f1711a323910000400109021b00010000000009047e0001ffffff000901000000000080a6663780b68d49b4d90231f21a88123b1ff7e000f437450b756277eec52a3705bfcffe2d455cb357978cc500004f83c31a8b3191cf50b839416b4510b688d16561ef214d4f86016e2931da78664065c7347bd30a88278f4cd85b102347cc43af68e2128e76"], 0x0) [ 866.873107][ T3932] usb 2-1: config index 0 descriptor too short (expected 2066, got 18) [ 866.881477][ T3932] usb 2-1: config 16 has an invalid interface number: 1 but max is 0 [ 866.881554][ T3932] usb 2-1: config 16 has no interface number 0 [ 866.896148][ T3932] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=f3.7e [ 866.905335][ T3932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.906235][T15414] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 866.928462][T12777] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 866.966592][ T3932] usb 2-1: selecting invalid altsetting 1 [ 866.972716][ T3932] ttusb_init_controller: error [ 866.977503][ T3932] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 867.010139][ T3932] ves1820: ves1820_readreg(): readreg error (reg == 0x1a, ret == 0) [ 867.018452][ T3932] stv0297_readreg: readreg error (reg == 0x80, ret == 0) [ 867.025767][ T3932] dvb-ttusb-budget: A frontend driver was not found for device [0b48:1004] [ 867.082437][T15414] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.40 [ 867.091782][T15414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.099816][T15414] usb 1-1: Product: syz [ 867.104065][T15414] usb 1-1: Manufacturer: syz [ 867.108728][T15414] usb 1-1: SerialNumber: syz [ 867.115216][T12855] usb 5-1: new high-speed USB device number 23 using dummy_hcd 19:32:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000003c00"/20], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) [ 867.164968][ T3932] usb 2-1: USB disconnect, device number 122 [ 867.182618][T12777] usb 3-1: Using ep0 maxpacket: 32 [ 867.202198][T15414] usb 1-1: can't set config #1, error -71 19:32:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = dup2(r2, 0xffffffffffffffff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) clock_adjtime(0x2, &(0x7f00000000c0)={0x81, 0x3, 0x8, 0xc10, 0x5, 0x5, 0x7, 0xffffffff, 0x8, 0x10001, 0x9, 0x80000000, 0x7, 0x100000000, 0x9, 0x360, 0x4, 0x1000, 0x5, 0x5, 0x401, 0x1523, 0x40, 0x9224, 0xb3, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={r8}, 0x8) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000280)=0x800) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r8, 0x8001, 0xff, 0x3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r11, 0x40}, &(0x7f0000000240)=0x8) [ 867.213007][T12780] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 867.238788][T15414] usb 1-1: USB disconnect, device number 79 19:32:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00B\x9ec`\x00\x00\x1f\x97\tt\xe0x\xbd\x18\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup3(r3, r1, 0x0) open_by_handle_at(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x4000) dup2(r0, r2) [ 867.272910][T12777] usb 3-1: device descriptor read/all, error -71 [ 867.362548][T12855] usb 5-1: Using ep0 maxpacket: 8 19:32:00 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1) accept$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140), 0x10) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 19:32:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xffffffffffc8ffff, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x5, 0x0, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r6, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000380)={r7, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r5}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r5}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r8, 0xc074510c, &(0x7f0000a07fff)) r9 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 867.454828][T12780] usb 4-1: Using ep0 maxpacket: 16 [ 867.492473][T12855] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 867.500590][T12855] usb 5-1: config 0 has no interface number 0 [ 867.507840][T12855] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 867.517719][T12855] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 867.527560][T12855] usb 5-1: New USB device found, idVendor=12d1, idProduct=142c, bcdDevice= 0.00 [ 867.536746][T12855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.548091][T15947] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 867.582510][T12780] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 867.590842][T12780] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 867.599681][T12780] usb 4-1: config 0 has no interface number 0 [ 867.605959][T12780] usb 4-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 867.626209][T12855] usb 5-1: config 0 descriptor?? [ 867.646553][T26102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:32:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x48, 0x21, 0x20, 0x17ef, 0x7203, 0xc682, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x0, 0x87, 0x81, 0x4e}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x5, 0x1879, &(0x7f0000001940)={{0x12, 0x1, 0x310, 0x9d, 0xa1, 0x55, 0x40, 0xf11, 0x2030, 0xc223, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1867, 0x3, 0xe, 0x40, 0xe0, 0xd4, [{{0x9, 0x4, 0x1a, 0x8, 0x8, 0x64, 0x3, 0xfc, 0x9, [@generic={0x6b, 0x22, "dff936fa48b873faba786157619a240d0b9137365ed0061de28599c3c9b17d649356966245b941b9acbc47d5e98ea6e1242dad06fa5682f58be51a24ff33fb50ae120d04e64858c8e56b99c33e64e1eccc48a79dd69eaf94b08037a3f9b696613e839b3e259285b77d"}, @generic={0x4a, 0x22, "d781246e5f6a469d0111a276018414636dda90a71807c8f50e1f750a7df5b555f0f4ed17d1f05a0d1b12c6aa6494ab6b942f772e851fb65f4fae027304120e4be9971601ec6ae3a0"}], [{{0x9, 0x5, 0x8, 0x1, 0x223, 0x1, 0x52, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x40}]}}, {{0x9, 0x5, 0x86, 0x0, 0x38, 0xff, 0x80, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x2e0, 0xcd, 0x2}}, {{0x9, 0x5, 0x4, 0x4, 0x25d, 0x1, 0x7, 0x9, [@generic={0x1002, 0x11, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}, {{0x9, 0x5, 0x8e, 0x4, 0x38f, 0xa1, 0x81, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x401}]}}, {{0x9, 0x5, 0xf, 0x1, 0x254, 0x4, 0x6, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x2f5, 0x0, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfa, 0x4}, @generic={0x77, 0x22, "6308a4a5528d75aa789f47e0d17a4ea9aeb906cde02d46f9bfc4f992fd6d62050e3971b6b80a00f4058c0c6cbc56d93ae11be9ae2401cf5318eba9549297f2d717cbf5cf22b05a79a10ba0e35e8df9ae2cbfa302dbfd3ece5e981afe0aca103bb3b717d35443b9569e43863dbaa558482aee7f6897"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x98, 0x80, 0xc9, 0x44}}]}}, {{0x9, 0x4, 0x1a, 0x0, 0xf, 0xff, 0xff, 0xff, 0x5, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "1bc635b609e2"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x20, 0x4, 0x3, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x1, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x7, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x8a11, 0x2, 0x1ff}, @mbim_extended={0x8, 0x24, 0x1c, 0xa1c, 0xe6, 0x5}, @country_functional={0xe, 0x24, 0x7, 0x87, 0x3f, [0x1b8, 0x8, 0x0, 0x40]}]}], [{{0x9, 0x5, 0x4, 0x0, 0x162, 0x7f, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x9}]}}, {{0x9, 0x5, 0x43d1dbabb0736c5c, 0x0, 0x2ed, 0x1, 0x1, 0x6, [@generic={0xb3, 0xa, "bb05280cb734a490329da328408f01f7347329dcc1fec1ed3509259b4a4f8508ad5eef234bbe96d06afbcc5b988a1175e71958d0aacb24e3dae34303a43ac52bf8012d814c378b26b2c9da551a84347610d765f7838e96999fb88589fc709a1607d0e0089b64f904fb32cac9ec343f8cd6e370568f073343b72c0d3ac63679a05b65f18d636eee677e0b74e18713dd37aba733317c987d3859e73374e50f427701b95ee9dadc19afc40616164857e54b9a"}, @generic={0x3a, 0x7, "3b446f7149d077b4bc31530f824be27a93f5092efe7d9a0c97040025a00a6a1bace58cb840e227f87b95f6cf71b1328331f65799ff8c8c67"}]}}, {{0x9, 0x5, 0x14, 0x0, 0x99, 0xb5, 0x81, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x56ff5e07b5b8bcdd, 0x80c9ba0ef92d5cde, 0xa8, 0x8, 0x77, 0x7c}}, {{0x9, 0x5, 0x1, 0x2, 0x62, 0x8, 0x9, 0xba, [@generic={0xbc, 0xe, "bf92a6ac082913a40396e368ae550f17363f7eaf4c202ee83c40d79f4fbf29a2e7923cafd699837a4bc3089e7ccef26963a690296edf4ffee51c3ef064dbaab339be5d1075f8b342515d8ec7600f33bd5df2527e1fae53dbb850f8c5c94d99bed2ded0f8133417cd37680965dd8b499516226d0f8b6a7d68537030fef4b0e56c71f81892b1923e4d0dfc2fb4dee4773ca1ebb924049b056389aa237c49eab55bef62dfd4cb7c4343b382d06bef17cf95a832d06bc7b7f4266b3a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x5c, 0x10, 0x1, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x1, 0x1620}, @generic={0x40, 0xc, "d561763ff309b7836e2096339a2f822134de0b87d05685802d28c94c3645d2d1198915d6261e139346ef12817e06c0ca8908b99fdc47ec8f606db26cd383"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x2e, 0x74, 0x9, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1c3, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x20}]}}, {{0x9, 0x5, 0xc, 0x3, 0x2f2, 0x1f, 0x7, 0xe1, [@generic={0x70, 0xc, "5a3bf41774be731f900a03147d8a8a4eb499200a269352e4099ad83a3e47cb7f45596e4229511f52f8882a05c230a348c5e4dc22a2e8d615e115f19430ec7b42f0d6de2b00440060e08888d10136631cb189c06962177b643e9ff01e11d9e76c3c5d3754e9456c5f182bd739e784"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xda, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x6b, 0x62, 0x7f, 0x1, [@generic={0x90, 0x11, "71507cf5814a74526701042075033f379c1d129bb65f38f6b7460990dd5f1cf227509f9eb117a2481c7aa84bf4093ce63f77eacd28fbaa714704e30dd623c80d80f7a20c5e5793b775dd2da7608ffdc44f237f2aadd50359e9820b8dc61ba2d345935759bba524c78cfc0199880213a37351040846a50036ae8fe9bafca9b54a109ccebef5c89c1d1c96fc899c21"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x2df, 0x8, 0xff, 0x20}}, {{0x9, 0x5, 0x0, 0x2, 0xa9, 0xc3, 0x4, 0x81, [@generic={0xe7, 0x30, "393e824bef857417d24728395da4436dd8f66a875429cdd36fce24476d536281c8f54159791bca338badcfcfe49c2fb30ab461436a050b58719365fb47f333f68246f766a61b54553c7fe346a676434933a0ae23295bd0772e9851d422d37bcfd8d1ceee0b6fe5f59b14c57f827b3b8df5c8ca4dd705ee740fbe2212d8e6238f8c9e09f8707bbc1363da832a61858e7a518d973991363da6b0297824aeb978e17a2a7f0dbda1c0656ee46b698a54321164e39f843c5373dd456617ab2a541e570c0bee9e2629a709ac2e34abc8c7ebad8ffc2241d5ec452475495a0aefc444aa8e52b029ae"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x2f6, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x5, 0xef07}]}}, {{0x9, 0x5, 0x9, 0x8, 0x265, 0x3, 0x49, 0x80}}, {{0x9, 0x5, 0x616d604746f8d31e, 0x3, 0xac, 0x0, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0xd7, 0x10, 0x80, 0x4, [@generic={0x9d, 0x23, "aa0695ba4445538be31b1c5b2f6dc9d4feaa6395b03f398ee38d80d58f7a9b91926aec02455ba377c7574e02a4b431f558a5c8045ebcd0dd2349c1b663cef8f6606bc55e459ca853021faa0e4496674444f773ed0977982c6b1a749b960c7cd65d1990b3015946460cafd44a7c06db23a83f536b19445e214031e0c8ab191362641dfde6d08c23b41a07f1a1145a348d623b21f654e0f0f2dd2fa8"}, @generic={0xe8, 0x12, "81180fcc5e2b7bc70373a148914664083905d803f0c937ce698f2678eab5ea0fbab0d5169c5a5d7eab834c4eb2c1f62d72061a66446ca9bd8f6237e97c1775ee61c602fe88184a1b9c0791a9b97c783fa1c6f4ea739a8696a8add9bfdb387f9c356acab1ee6dc3e833b3477f10b9c5b7cc1c2b771a70ba2554a0e885e86185e6c011c5c709351b170e21b0d83743946426f4141c594182cd0f6156f15bc689336de91102ee882d603a9f216cd3a6d2dc0a70f1c6ab0e2b98ad6bbf0f4ef025a799d13f83d9fb1697dc6bf9c2fad362eabef01e8bf19b0285732bba81b4fe0e2681fabef298e5"}]}}]}}, {{0x9, 0x4, 0x97, 0x5, 0x1, 0x2f, 0x75, 0xd, 0xf8, [@hid_hid={0x9, 0x21, 0x7f, 0x5, 0x1, {0x22, 0x29e}}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x6c}, [@mixer_unit={0xb, 0x24, 0x4, 0x1, 0x6, "4e63f96055f7"}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x7, 0xae, "10d0cf62"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x2ca, 0x6, 0x8c, 0x2}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x81, 0x0, 0x8, 0x81}, 0xa1, &(0x7f0000000080)={0x5, 0xf, 0xa1, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x1b, 0x9, 0x1, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x6, 0xc, 0x1f, 0x3f, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x5, 0xff00, 0x1, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x6, 0x4000}, @generic={0x66, 0x10, 0x7, "cf152dc8ce4fb9e729defbab32f074b989805f7cc4bf59d905a38bf865ad82849e29d978d244dbf0e1de6c767ad8c3bd924a01e08f1d7a3165b1ff79800b7257b7a4d211a8222bdcceb3dd4d9539f7c1f6a0bde94b4b8537202d334dd516469cecbefc"}]}, 0x3, [{0x41, &(0x7f0000000140)=@string={0x41, 0x3, "9747e8ac9a69572c71dec7c25034cec14bfb9d5a7ec226640dac0890967cd9b0b07157f454c66969bad6fcd06677b921ab0f812b74877ec9a927ec73b8cd00"}}, {0xb6, &(0x7f0000000280)=@string={0xb6, 0x3, "4ef27b6adef9234101b07421334767b907d1c9fc916bceac936eecf8ec91872e522fc65ac18853655d45cf0349f0e482ffbd03510b3e7821972116dba1fb5aa2731fed887f744f46ca2c39231b401f729d48c82786d1bdac2dd177f1caf285b34a320db0cbf41d7826292346e2ec45c7c6726186462a829b2408054e316887b18909357de44e746d16557b7e3b213ac924ccfebd57272561c649cfbce84229f3356fac0c1df559f93715a53d4f27a3cf3167f045"}}, {0x18, &(0x7f00000001c0)=@string={0x18, 0x3, "ca802e22b6bcfe2c9d63b0f7e0132da7c4b3771a9ce5"}}]}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="5adefad19135324fe3", @ANYRESHEX, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 867.687223][T12855] usb-storage 5-1:0.8: USB Mass Storage device detected [ 867.760572][T26102] batman_adv: Cannot find parent device [ 867.767106][T26102] device ip6gretap1 entered promiscuous mode [ 867.779110][T12855] scsi host1: usb-storage 5-1:0.8 19:32:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='\f\xd3\x93E;K\x15q\xdaX\x83f7\xca\xb8\xb5\x06\xac~\xa2(\xf9`\xec\x10-J\xdd\xbaJ\xe7\xfc\xe9M\xa2\xff.\r\x1b.gh\x99\x02|k\x10\xed\x94\xf6&\xc77\xf0O\x1bou\x88\xd5n\xfbc\x94H\xf3\x8c\xe1\xd9\xc6\xf7|G\x04\x80\x19\xe8\x1d\xbb8o\xaf\xac}\xef\x1b\xf0\x0f\x8d/\xf0\x8b\x9cg\xdf\xc3h\xfaY\x9e\xe0$pvL\xcb\x1b\xf6\xb9\x96\x1a\x8b{,o\xcb\xf4\xdb\xf2\xf6\x98\xbe\x96\xee\x89\x03\'\x8ag\xb5\xc7H\x8c\x81\xa7\xc0\x06\xd7\xac\xbb\xf1\xfbY9\xae\xdd\xef\xb1$#\xd4\xe3\xc3\xa6\x7f\x01\xe8\xcd|Mwh[\xc4\x12\xb3\xff\x0f\xe6R\xac\xd7\x13/\xd3\x05Y%\xc4Ml\xab\xcb\x1e\x83\xa7\xbc\x94k\x1e\x89\a+\xec\x9a!\x03\xc5zs\xbb\xed\xd8g\xc2\xc1\x93@-C\v7s\xe7\xfdDb0>\x80\xdf\'\xb6\x13amM\xe9I\xe9&r\x03q\xb3\x96\xab\xd9&\xe1\xba_\xb1\xaf\x83i\xb5/\xb0\xdc0\xa5I\xb90') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800) syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00') prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x1) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl(0xffffffffffffffff, 0x40044102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x400202, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), &(0x7f0000000880)=0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) socket$caif_stream(0x25, 0x1, 0x5) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000300)={0x6}, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$int_in(r6, 0x5421, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) [ 867.840729][T26117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 867.854448][T12780] usb 4-1: New USB device found, idVendor=174f, idProduct=a311, bcdDevice=91.23 [ 867.863658][T12780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 867.872750][T12780] usb 4-1: SerialNumber: syz [ 867.919344][T15414] usb 5-1: USB disconnect, device number 23 [ 867.926831][T12780] usb 4-1: config 0 descriptor?? [ 867.978768][T12780] stkwebcam: Could not find isoc-in endpoint 19:32:01 executing program 5: syz_usb_connect(0x0, 0x17e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d883f008c0090002a5540000000109021b0001000000000904fb0001d93dd2000705811000001b0000"], 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) 19:32:01 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2d4041, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002fc0)={'team0\x00', 0x0}) [ 868.102869][T12855] usb 2-1: new high-speed USB device number 123 using dummy_hcd sendmmsg$sock(r0, &(0x7f0000003500)=[{{&(0x7f00000000c0)=@ll={0x11, 0x1a, r1, 0x1, 0xf7}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000180)="b712c45a5a3ff8cfadc7d2126c3bbbaa164feb4b450367b76a64a1e09985be6f45d93f48646009833a25db84ba33cc71ba03b9d5bc8252bb042b85c775d0a81a6cc9f3602d1b76c017ee6b25ac2a8a13898eb07a9f041a024f8af64d2bfc4f1389a7fac8c6c630cd", 0x68}, {&(0x7f0000000200)="4e60dcc521122ff38d9b548973bf1944dd290f809984a964bf3c47075db2c8c86d5e5e6154769fc5232269fc89024b0d67a4638c5be988e484a565c8366012bb980559d0f73aefa7cf16fc400af3af53ba415f4d805d783a1ea007f141e7341b9fe9e2a11966273d7aa61041623cdc6702983b0ee231bec3e3f276b1872ae75806a8e385b03b0b6e391d82d7c819f04c2ca59805aee25a77eb1a8ffd18b16f708ed6107691f9a2a8cd1986b65a95ca584fb22f413767731cccecfc82cbe10ec6f7e956c32d79337b68d62b57ea43c08ee2227b955ed18f6ede3fefab879b741612bedfd08e23a6fe8abfffc2bff2cbf4060097f6bcea055a4a", 0xf9}, {&(0x7f0000000300)="3f79efd39cd7de1bbcc09949b86db28d29cacb3635bda8468d7e92d8a8abde44e5591e50bc399d6baa65e7d01ea15ce66516af815081a7dbad43b22aff58b415ad50558e5b7ead4be8c8c49729e906b13dd2169af40feea1de2d74ab29fd5d3738adf5dec8d447634e5d6e889f426b0cf72b48838ee722bed293f633c3b3352f034b2f6c4f348da1c1bd1f0d240f1378915f4a24202d9afbd18ae6656122328f32393a7a0fd7ca66fabb36b7df0183e7d0a9da95b571da9ebf25785b2206e3db4de179ff8ca047723ba28a3fd00ec45be7f019ca7f2f582219779a6b842591d98d969f7919f527d6623fda871a92c1e6d4ba43d12c094b4887a1e70159cab8ce6f87c5dd6141bc410c0cd551a04ea0c990a41acf6d21964e6096ffe2ae187736c84ea650f168891900913767952afe994910dee6c58de1b8d8735848fd39171dfe5382d52e7b0bbb643cf32cca0372b7643747a3ba57cdc1d58fc38c5eef1ad4f5f4cc65fad0d510b30d2102467d87d0f651f1d307d855e0e7f8c12dc4e74ac8bec0f3b6e2ed49773471591a562db0be314e589710b3c0e98a4aa1a4b389d84ad9a41be32a79fd9236c032b57c5d633c82e28df5bc6f254bc473f55457e6f3c5ce04c4797e9713f404e763f302334845172a487b98c8af29a3fa666e3247c04b86ce491f7363b5095d25e6d48907fd5af27ee3cc1fb1fbd5b9bcb7c5a2aa8fd997442bd1a83d80dc422a49b51adf80126339df15909082f4a97f29a23d9dd06caa9e6a11b9c4e4c3c7941167b9d970617a88dd88736cfee8eb8fff15a684d68635bd27f1a4a55d70db7f71e308fcfbd710c94888d6c571c8a66a963e65dc29b230540be37a987289816fd97bfa107d439ec02a0122a317628e46e6c9ad24c16c2915a1ae0da444ff46cfc8e0cf21ceafdf6e41443789c8f7bae69c58720b425d0f87dcb315beffa9b24ee1cb8dba3b151def3f0ff2181bdbc0aa6b5bb3d9959bea77c055ca04d273a832fb9597c2f2eaf017885360a156e588fb1b27a638624b90479698af256970e7c3078a7e46bf52abd0f3694c0e5e8794448a47f6bb9630932df8f2a3ea18f691f07397c726915f8271d9e04283db3f02bb866cbcfebbcef4dc396cb5d803be9634bff9b102f8b75cc369e94112e6fe3b61ff968d4ab3fef81a02f77e9a426028c6171aa7686aaa41788f53faefeee511c381cbadc0cb6b5ed6a7a9ca92077dd47cbc368c05a5b9564b23790411e7d31f805187947147469244111c6aacbd18f4c5ad7bf4acbe0a7d08fc673bef5c1d739f18c61ae73ecc0261436fbf42452d33ae13665ce5c2a794562a970ae37fd53975db3fbba78e300ae95539e0c729cfe9e1acb2d93aa98ceddb4bc82d20e5ba6b6a60bf7ce18bb0aae4cd6a40aa198a57e115715556f7939ae9dfa74c700ff4ba8967bb14569099f7c7b41de349a19448c6fa07a55af818122022b562c835dc698745cb7ebaeb5f6447eb58785677e02765ae889f0443d3f83c58d1356501a6b9fda2f141714e7e86a6e3dc4cf71b44232135899d8ba5a57cdce621a87970fc1de08bbac4374102ef6c4938907acc30105a799bab2ed32ea43eeb383a4c86b1fdfd1ef9d35c724f57c05ddd3de9d4ae6731e80b6104d3c1cf6fcd84886894a8a8f3db5400ca32f3c8a4f9a10d995f389ce58220c216bf4f954ae91a35310aeb97c9ec78428598f3fba039a52f7d6d004412f0d54f38eb2cf135ea77dcf72ab715d0aa5ad69aa7d3a28e89586d721f2b89344b2fe04a906b1fec2904f408a1d471f339887c98b4061b779cf5654b19c2439b54f5754f6cad8936d6a636fe25613fb321aee03bf6e290d376ecb9343cde0e641cdc8e71a5dc77ec9a4cface3bffdb428d54c1014fd41a8fd507f79fd5e96ac087213701c3f94f7a0f2febab7eaf88ae692c4434bb39d375cf8a0bc17001ec917752e05597c374c94d8cbb6bbaceeb96c7359966fcc70bddaaa1103d0b1de5bcf7cffccc14ce13c0aa9eef23e80f1067c775551402ccdbd1664b1fcbc9bc6ebf0d83bc6a75736b58f8f391fb7f71fc1db02fe18e811e263df3b4ad3daede675300787ee73eee3e1f193eb617508d8196998447977f7d71035155239a0f1e7cc34b9f0794a524db9ef6c548ca8f93cba1fa65171f1692cc635be9473935d4828459956e3f3f495c450ea7d8e52053371eda0f9d03807696de6fb66e5fcd0f42ec65fae889c7e3bddc9ca40c9eeea8496f2499bd1a2250c14456daf6135993e0f1b4e2abb895eabefa36217806939072d27b9c77c79abac00397f2798c40c67582b50f873d4cce5af52a3153419dd989315cf50dccb5fb0b5f21c6e2324ce134991e6639dd3af50464afdf0612e3c41b87ad38404a4b9b74f69df7960a670b3146f06501fbba7fa8c2f30fc58fc7e69cfa7ad2bafd6d64e0b590896e5d2c8fcc75b95b5db5bd255c11752e0034eeacdc854dd4d5f03796af9bfd56288ac5b8be69a1fb891a584eed3e87d9beb843b71158174c693a886dc9d440045ea7032b784dc2bd7cd66facddb67d911a5124cd9e6efd9c1a06323be996eb3e2445e5656528f42a48883071ab81554cae9916e3dfed473c95905c6a72473509162cca78dd949e05e44e85413cea494be397e7ca861a7a317a60beb1625aef9c6d92c8d62bc6c7f1ebe37524f097aacef09fed7f7a9730954a7d1fdda2d0e2e4669020ac3ea50deb66b3a82ce7a5ab1b941e322724c1eedf6889b25484da6ba67edcfb4e85a2a8e53904449b15842688a215b9f0b99b723599bc348df5774cffd03590b377144d5a2751c1e12d2d414bf5282b172593ab53c25a7dc80307b3856b0c51d369d4554aa0eabf4b575a3aec7a109ad61f86dff7108ce63420538aa7a48775b1771fdbd4b7deaef3c6c2c8d1ffde19ff49297da44bfdf595ead16a2acec9308c209fe77c8459f5705b03d5a15575d267fbffad3bc1c705a274fcd779e7beb793a62b8c4ed13ab53709680d7dd4a5c0951ad7fab624fae052a498d39084186c694ee0b0e970baa91bf77001c8818ee500f506d664f46b5a0b02604e192dbeae306ce092191f1260ddb93e75ef835438691b623fcb06880369713e7fa22feeb21319d8a49a98fe74704fbbfce4ad116c6d20013e20acd4be059fad769f15e2dc2f736eabfa72e68b8e8320a9a0416e0f19e5d40a5b26dd4ccc414ff4247e410a60b144fae530fc4f822cb3e6ba974fd16c5b170c9594ec853442f451d0f6e11ccc1c10ebe0f2ca0b8ff7136350366c6e12acf1f196d224438ea8564b372e2c6ee5750284db59082351a75fff6b5ebc750d116e73bc6cbcefa50b5859fd2c1b2d91d19dfa36561a15f3e1fcd695322a76c9ecbd77f68859a87f0c496c6b25d7d138e3dc95778d94a7be082129eee1a9e50bd84c7ccbf0a2f593b1e2af260d67f34a28e9311fed25dd058d58adfdb244a18e1eb31d27aa7c7cd224ef488b1c4dcd15feba6723198cca4053ba89623a16b8382d94091ffa56b0d6ca3e57697676e89834e8f22a0421f8af9d497b673e036257c6a404f67792c32d5f65040f30611a4dbff3c0700ece0a3472ed6a8943b1692e21a024636ee351d45c98596596929d560f04fc4699d9879bb8687df3e6b0d2d5688f46849d2657010743133486c71fe626f94c19e8930670bceaa240605a43937920554736d6d127595be56a77b090dee166b814a62c0746004644d40ec7f14d17b0940ac33c4f35466ba37a1da7dbeee9c7922fd4364d6e41d41a6c4a3ed61a616180e074822a918f724cf7b7123506aabfc80124e51351968784049be0ceef49d625f3e6f2c7520264d294bb6ad847baaa01ee625fb4853b316c1c31dce3e7edf9708c1efade6ed8274a0e7ba6800719dd7d79d9a471a747cc06d8f75b76dd9e0b4ce7965e2dfb0feb63a926ed34ce3758bd2309d86f7d6cd455876468cb35afffbec6f912387b73f28f9a77f5c48206c63abc61e353a08f587c07770300be584e24a91a58df26492f0793d6c2df45441489b96b29b5da21b0e454a295e105bb315572f7346047bfb00f20816abaf5d8740586448558feda3f157cb9481debf6eefc4d002c60493b51173bb62a940d5d029186d5cfcb4649aabbd9e68bba88dfda5d645317c5f6c58c0b4998b8244b1de63ddae998d4d1f18fdeabb42d1f46741e7b35bd148b1fa9f085b020c8719f8c440c7b0dfce5a94ed8fa04be3234c40532a08a480adec0cea89d91f40214c7c48270fe21c6b8e79001152cb761b2585395a86d1ccf372389f6f31440eaa69fc6cf2a3a0d7363bb53bde816eec77b52825580689f85aa946cb55f71d5327ecaf01722d853c3528c36fd55c9b02f2ef21610e5351311b91edfe7c2f27d5f9b35a64a7928cb13077c70c59646963919a6e9490a004b2e57144025c014b5bde2a0f87ba163410169d3342a3952d2ea99dc95fdd774699559b59734a5ac0f579f2deff234962688c819b2b945fdec8800fc9da4872fad2dd0d38a5cdf41a10672e1822cf445f8598881e067cd6ba4dc4c9e6c732d73b0bac02d2cd6f9555c440b00ad2c322261c45b8b65eec4947811158950204fd0b85d322c14f25217ac9a201d8b976175c196792095e915e8d0ca1d76294563e5804b57485addf9cc3eec675d171b97cd532f20ceab0dfb8ef40ed9ef75ecc2112cd5c565202651a480c60f35fc8443e2c7540be6c6d9d2914eb9196bc360a441d231322bb3800bd070313647d09389beda85b901ebe5bfb94ef43c3a40f3320f87f90e1768d46ebd33ca0751ffa76d13d8baacc3e896ad247c80f392a0b7429b76797dddc5c4c4b148966d9fa2d0ba3957bd36e80d143b1caf1015f77b149b4fef06af1148ba4c1cc0cccd4511265df2586207f1836eb082d7820c2d12d79eeb7a59a14832ef884fd65ed1251272f972f809b99b6d4253b39e793002eeaa79334fc20e97dd7c297abe0c1f738ce2a7249f84a47bd7d0cc39a2672200f7e9fcb48d868c3eaca133aea0f5163a5c66204c7e551c49d83888adfa5d33dc7b935054e1de4ec9bf30be1c5766ae66348267d00d127e143e1a2b0fd7b48a15689d0e8ceda614da8e636bc6936381deee345ec5078b18c22dc9adc33222898add7800a58e12a943f8def9ffa4f49403096b2d3f83eab462d451ea5c84af1c8aa67f0f0d99834e197948078356fb4ae3aac28f965fc905b3db1a8d75e0768884b08805cd4b11db15d0d006b97b4b45bb42f53d6662f78320d6df00e255da72b68e1b27a821b07648164383663fb92305a9b43be0ece42cd6736b425a3a6f3b6722e9e6620852bf50cf12ee620a3ea61ff42241a0bc17dbc050237a1503bf09bd18141254516f572fd8b6126d401548a52ceb2ff40e16086da67a0dd78aed9482ad8ad9d1073e83491fd28ee4f2065de008adb6b2193d6ab4b783c4362d6df0ff868352202e403f92069031d7aaf7d116acc913cf2266c6a9c4a44c3b91b0d9aa245119df105fd4739f2696ebaf997fa1a5744654d5aee05451f46dee0e7ee409efcc7c5a154950d48826f56a2394e5190eea61d761a46a14f24cd9553d70670e444e0362c791f4b934e6eafda617be58183947e0520413c6fb8f8955adb78586ae7504c45f710eebf4459c34ad5d2c715dfc2f0063ce745edec46800e6324cc3bcec50b15a6ac2f19a381d8bf0a70fde37dd223e1f3e3bcd640b2f9e731f362234907230a76c29237a9c3f3ae2d0051ae475066bb75960da9e8939e9ef4c425a7ccbd7aa4db05e3a", 0xfffffffffffffd8f}, {&(0x7f0000001300)="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", 0x1000}], 0x4}}, {{&(0x7f0000002340)=@llc={0x1a, 0x30e, 0x89, 0x20, 0xff, 0x7, @broadcast}, 0x80, &(0x7f0000002740)=[{&(0x7f00000023c0)="e520dc56c9399f030eb02e77506991d9eb18e9f514d6ef8815a1a9e17da23f8b47e9a1c890bd4b6953cdf9d18ca1f6444b382f8b6f7c40331910e7b7bf406258e0df53b7340f37a64eaedaf8706b04d1884f9e0d7e4b65d5653759b0b0e4bbeeaa609ef1c06606c22ee4e9d4dc358c04d326ebba96fb1fc36503f740ea5a202dbdd2f642e2e862565d7ad8aba2fd444842540993223823527f95d1dd92fcafa0aa42565aebf9d1a73e1f058a3b4c31ed7c6b1f703ca99a72092dae037aa51d18aaa4daa1d588c0a803ec09e12e372e689a18be136f17d38e135f563a6088def563a6c752b91612a47f", 0xe9}, {&(0x7f00000024c0)="b06abb6a704228ac2881cae222928f566ac60f71511cda1261c3397627eb246afb3e71d6822bd4d9add58e947525c72bf1b74b1769bd6958aba38de1d7217a16b4e2e3b622178ae0882c157bdebe7f49c35019dc6e483c5cb7d6ec1ae478facfb43ad3c52133673c017473be435658b7e43785631baf5ef11587ab451cc6f18eedf2d9372359b4d171e2a9c3a10d1ba4f79fc5c7b82deb7da48e6b3c1c0c9093e92492f8d299e85e", 0xa8}, {&(0x7f0000002580)="d6268420e09c9692dda6b50049a3dbc8e4320419eeaef777b5f05c538c4a208f8bfbe0aeb47b7840acea31a8cbeec6d1aa2c9225cbaab57fe80f22ed3fbe7ab820aa2341c1a328915206687a5d2d8d921588e0b93851ac6bf451314db1608c4490a601ef20fdfb700a3ab95753a59f57", 0x70}, {&(0x7f0000002600)="3c041dbf44c71dbe2b4e42fcc85277d66ebc3cae3798328494681774b08663ed3a132e00057e6f82a8f3eb1aedaec0bde899181743ba675b70099b5cb2ac2218b7e39183ad8c059dd4c8ddfb2f6698a9721869c324b8e5fd8a3076a177826f72cea9217610707c04a572c80410c0e6c5a86f302c7e2121c421458ebd4bfc909adea845ede31100e7b95afae5c1844c03c450d44c7d72d825501c6d3d00be85017c914ba1681a2d44c27e9509b02e1c8cb5cad36ae621158f4e13f350e2be6fe5b48bea077c13d2d6ec3fc70e8a36ae24d20f25cbe33dba0665cf2721d1169a83cee3bee870d4a610fc9c96", 0xeb}, {&(0x7f0000002700)="ab59be4c34014d1637a88c39ab323483afac", 0x12}], 0x5, &(0x7f00000027c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9e00}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xd8}}, {{&(0x7f00000028c0)=@x25={0x9, @remote={[], 0x3}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002940)="03d481b4fc8f08998b653ed43fb16e22aaa0f5fea9e0af358b17715652bc136d56da9aa7e4b9d737050536eda7369dc0606d8d7a2ee55d501555e5e8e260dc5c5214e3a138aba4a971a4382abb0fe4a2f95fca52593d447031e7ffa5fd46d3788ba8119ea63f625290e1fb4415deb861c8d00483ca8b36d706414fcdf40d1aa3bdaca1097aca60bff69d1384cb8b89ab2ab0cf3541be5490cd", 0x99}, {&(0x7f0000002a00)="433fb7bc33b8c3b5d6a2646b2997f7f89abb636b7a51c61689a65aa0785f351217c4476c44acb63e738b35d6593abd30635e6107a3acdbd31f1d25185bcdea3ff3f10d996c2923e71259361e7a8f234fef80425bc585bd1d3b2b4ec59112008aa49ff27a470702479a73e735ee4e8e656e909a639474debc6d54e2ad38e304d2bf7bb68be1ee6812bcd42ef132546ae92dc078501b8e72cd2c7922efabb68b99dbe149cbc066", 0xa6}], 0x2, &(0x7f0000002b00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x4eebc71}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x2ce}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000003700)="dad7d94181886ffefedc160136939c7d4acf3ccec3ce9c0fef7c429aa41ea934cf990ec1cf1dfa194e758eb696aa078f8b09b02b9bdb26bfd2a92a567df9174cae0ce26cf35b4b25f0aa298d519ecd8f1ad72acecbcdc19e28273bf82d1518e94b0e20c0aea90b5dec27e5049863c60132654f66deed77295e404ca6bdd2be6401433559642e37", 0x87}, {&(0x7f0000002c80)="7124abe462eb277b941e39f027ac936722d13e12fabb", 0xffffffffffffffe0}, {&(0x7f0000002cc0)="61541698e9dfec4b44d013ae325fc6baddd30a1cd405f4d620a96ae55e6cbb316023bdc47da1daae797153047ce4d9b6cf1134d139e247296fa4210c63fdc9f54acbda054240a544f88f0cb1959d161ba595b09f63913addb7a05463dcb517d75745b0736776de2af50ba153a4e84765537066e5c01454c2ffe49770f9", 0x7d}, {&(0x7f0000002d40)="dd076e73458193b56d55b3034b2d2e63611a0c626b4a357534b3dd7d801a331a4fd1db3d794fb4a56e6b5bb279147f1166367f91232c31f9f7815fb8704cc7793449962e8195c63abfc3b89ec414fbde56016dfd9b2a1f718c47d71a8335eb28053c8152e352f5384440783529df520a4ce20b88d841444b833b702bcf2fd332d391c525fe05cd2552359c73015eb36d5080723cb144acd68a37c221489e88eaa1ef2d413b4f9517260f2aac4023f1784f9b", 0xb2}, {&(0x7f0000002e00)="0eb3da391d10457ec3ecdbfe6a841b062730d58fdd35bb6ff872a8b1b720bcb37b23a916b80bc23d778c7e2d6169df9196e6a4c6e561cdb3f7448aa483bed262132c69c4d0eceb1f644f33634f473f2e2a175868a4ae91656c662dfddab123b34ba5e40fafc8a77971d41a3450481284d7ab830d83223dbabdca9411ea014b166d58170f244fe38c51", 0x89}], 0x5, &(0x7f0000002f40)=[@txtime={{0x18, 0x1, 0x3d, 0x3ffc00}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}, {{&(0x7f0000003000)=@xdp={0x2c, 0x92e5feed45664bd2, r2}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003080)="8d7d4bb53d58c5e436c2befda72e3078826ad19d2108ff46a65aa1fea153644e2541c55268", 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003100)="f98bcf29d82ab16feefdc454adeeefc88f67569f7b9b3cd5f8cd8fae", 0x1c}, {&(0x7f0000003140)="dc7dd317f1a07fd8861d80fb6cfa580a15ee9230af6e4a0213a1d8f0c20275d3fcc850099b9fc7677a2a673d2204316a52377e3ee5866c064e31cabf396e29a4ae61473c743cc2a6da17d4", 0x4b}, {&(0x7f00000031c0)="1a1e4497218021755486fd8ab1128f2f62b0f8d7e0f36458909d741c615e458f8c79afe5f0aca4bfb4632461e7fff2d19421dac25e69c1f4984d22b178f3ccd3b74131f9d36692e4c14217c6fb16ad62f2669dab762b27b0b345b592e2b81b9cc184d7bad567d18186ed89e6b4ce81daa635e89f1fdd90d932ecb711f0d1da644728f57d39525da97c6152fcd9784c0d208fea94cfd4f9146001890b07119bbbeed57589f627f9484ab6f8470880f93fd6f42b49e24ba995b3df7d4e2ef76e008ea62ee705ac5835ec0313f6494f2b402c2b9bda1390357c949d38b015da4f7570c6546e04014d4876529e3d4bafdcaaeed35a8078b98e7b", 0xf8}], 0x3}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003300)="2be77940fd6ed14a2817fbc3eb5c532cbbd41988c8b327a8524ae3643245200b01d714681994936f8702a65580de9fd5d10ebadb19c482428b647b48852e9af7365c38a49995c07ced5e5c1e0f9c97571b061a9178380191a93d2ae7c65860831490ef414fce2977cd95c3f57e3a5b2aefb7f5d520cd5a3e7c059371ac236e8c4b6eb820e9ea354ae8f1411006f47c23c825da169cfbc952a0dcacec70daddb8d5a45d92d03aecd2d2743fdff6f9756fbe789c49710f4238b21e52ed47aeaf0ce0569bd58f8a07d827e0691dd513132d31bf8c4e5c187e2fc30789241cf68ff585e2", 0xe2}], 0x1, &(0x7f0000003440)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x61}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0xffff7fff}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0xc0}}], 0x7, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/vcs\x00', 0x5a0500, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010ac0573024000010203010902240001010000000904000000030102000988ce000001220000090581030000000000"], 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000037c0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000002c40)=0xe8) lsetxattr$system_posix_acl(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)='system.posix_acl_access\x00', &(0x7f00000038c0)={{}, {0x1, 0x7}, [{0x2, 0x1, r5}], {0x4, 0x7}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x3) [ 868.178071][T12780] usb 4-1: USB disconnect, device number 19 [ 868.265065][ C0] net_ratelimit: 12 callbacks suppressed [ 868.265090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 868.278767][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 868.341888][T12855] usb 2-1: Using ep0 maxpacket: 32 [ 868.462349][T12855] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 868.470658][T12855] usb 2-1: config 0 has no interface number 0 [ 868.477233][T12855] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c6.82 [ 868.486450][T12855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.497576][T12855] usb 2-1: config 0 descriptor?? [ 868.502141][ T840] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 868.582436][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 868.588736][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:32:01 executing program 2: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000000)='/phread-self/attr/exec\x00\x8e\xb8\x19\xefn\xb8\x9c\xe9\xcfO\xac\xda\xa6|g\x05\x8a\xd6\x1a?\xcb\xe8G\xcc\xab\xd5\xfd\xa6\xa7\x10\x18\xd2<\xc9\x9fIc', 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x7, 0xce, {0xce, 0x31, "04ddfb7b77edae3124a672700640eb36ced3a2bc9c934f44c0b063e9410784013e2794441a7d1ef646c0462dd22b1202ab050c10c1928c8be501de07e06efe7989251696bb5e5ae6c1ac7454feea77c64cd02917ff451246014911baa5a055d81cd772cca192a64d2d35ed4f4eb73da58d9bff0d63ea4440b9e41d4133577154bebf116086a008e6c02af10de59659fe595b117ef805a496f977210276659325dacf77effcc8349aeb1b69d72321cb3ad8e48d45820cb0d895d66bfea9e76ec6101d3e3416521e9dfc2fe781"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x17, 0x16, "dbac4a22b08a38870359608b77658755353e919176ff"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1c, 0x1, 0xf4, 0xffff, 0x1, 0x1, 0x2e3f, 0x1, 0x6, 0x4, 0xa2, 0x1}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x400}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='syscall\x00') r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f00000001c0)=ANY=[], 0x0) sendfile(r3, r2, 0x0, 0x40800007fffffdc) [ 868.732267][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 868.738421][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 868.745117][T15947] usb 6-1: device descriptor read/64, error -71 [ 868.752191][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 868.821952][ T3932] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 868.882578][ T840] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 868.952552][T15414] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 868.972452][T12971] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 869.052317][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 869.058486][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 869.065308][ T840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 869.074535][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.082717][ T840] usb 1-1: Product: syz [ 869.086912][ T840] usb 1-1: Manufacturer: syz [ 869.091507][ T840] usb 1-1: SerialNumber: syz [ 869.102248][ T3932] usb 5-1: Using ep0 maxpacket: 8 [ 869.138016][ T840] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input182 [ 869.141897][T15947] usb 6-1: Using ep0 maxpacket: 8 [ 869.202930][T15414] usb 4-1: Using ep0 maxpacket: 16 [ 869.232482][T12855] asix 2-1:0.84 (unnamed net_device) (uninitialized): invalid hw address, using random [ 869.265481][ T3932] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 869.273727][ T3932] usb 5-1: config 0 has no interface number 0 [ 869.280008][ T3932] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 869.289914][ T3932] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 869.292262][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 869.299703][ T3932] usb 5-1: New USB device found, idVendor=12d1, idProduct=142c, bcdDevice= 0.00 [ 869.305762][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 869.314583][ T3932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.364562][ T3932] usb 5-1: config 0 descriptor?? [ 869.375367][T15947] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 869.381018][T12780] usb 1-1: USB disconnect, device number 80 [ 869.383908][T15947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.400224][T15947] usb 6-1: config 0 has no interface number 0 [ 869.406910][T15947] usb 6-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=54.a5 [ 869.416112][T15947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.425862][T15414] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 869.434237][T15414] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 869.443203][T15414] usb 4-1: config 0 has no interface number 0 [ 869.449347][T15414] usb 4-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.463017][T12971] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 869.471165][T12971] usb 3-1: config 0 has no interface number 0 [ 869.477492][T12971] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 869.486824][T12971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.497952][ T3932] usb-storage 5-1:0.8: USB Mass Storage device detected [ 869.506202][T12971] usb 3-1: config 0 descriptor?? [ 869.514800][T15947] usb 6-1: config 0 descriptor?? [ 869.547464][T12971] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 869.563346][T15414] usb 4-1: New USB device found, idVendor=174f, idProduct=a311, bcdDevice=91.23 [ 869.573040][T15414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 869.581201][T15414] usb 4-1: SerialNumber: syz [ 869.590872][T15947] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in cold state, will try to load a firmware [ 869.603136][T15947] usb 6-1: Direct firmware load for dvb-usb-gp8psk-01.fw failed with error -2 [ 869.612145][T15947] dvb-usb: did not find the firmware file 'dvb-usb-gp8psk-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 869.627225][T15947] dvb_usb_gp8psk: probe of 6-1:0.251 failed with error -2 [ 869.637570][ T3932] scsi host1: usb-storage 5-1:0.8 [ 869.649784][T15414] usb 4-1: config 0 descriptor?? [ 869.696943][T15414] stkwebcam: Could not find isoc-in endpoint [ 869.730472][T15414] usb 5-1: USB disconnect, device number 24 [ 869.767900][T15947] usb 6-1: USB disconnect, device number 119 19:32:02 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfffffffffffffffd, 0x202) sendto$inet(r0, &(0x7f0000000080)='\x00', 0xffffffffffffff18, 0x80811, 0x0, 0x0) 19:32:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="4405ec0000", 0x5) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) [ 869.906301][ T3932] usb 4-1: USB disconnect, device number 20 19:32:03 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x1, r1}) syz_usb_connect$cdc_ncm(0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC=r0], 0x0) [ 870.222110][T12877] usb 1-1: new high-speed USB device number 81 using dummy_hcd 19:32:03 executing program 0: rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x1d1e, 0x3}, 0x1}, 0x20, 0x1, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010ac054002400001020301090224000101000000090400000003010200092100020001220000090581030000000004"], 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x585000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r4}, 0x8) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r4}, 0x8) [ 870.541925][ T840] usb 6-1: new high-speed USB device number 120 using dummy_hcd 19:32:03 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x1388, @reserved}, 0x10) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000001440)=""/384, 0x180) signalfd(r0, &(0x7f0000000100)={0xffffffffffff7ffe}, 0x8) r3 = inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x72109c5fef5d34d3) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x5dec53a905e23ca4) r5 = gettid() fcntl$setown(r3, 0x8, r5) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) ioctl$int_in(r6, 0x73, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x634220, 0x0) close(r11) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r11}) ioctl$KVM_SET_GUEST_DEBUG(r11, 0x4048ae9b, &(0x7f0000000140)={0x0, 0x0, [0xebc, 0x7fff, 0x9, 0x1, 0x7, 0x100, 0x100000001, 0xfffffffffffffffb]}) rt_sigprocmask(0x0, &(0x7f00009fd000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r3, 0xa, 0x20) inotify_add_watch(r3, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f0000000000)='./control\x00', 0x2000, 0x0) [ 870.792398][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 870.942223][ T840] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 870.942357][T12855] asix 2-1:0.84 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 870.950517][ T840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.960621][T12855] asix 2-1:0.84 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 870.970660][ T840] usb 6-1: config 0 has no interface number 0 [ 870.970782][ T840] usb 6-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=54.a5 [ 870.982652][T12877] usb 1-1: device descriptor read/64, error -71 [ 870.987073][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.017965][T12855] asix 2-1:0.84 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 19:32:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x8001, 0xffffffffffffff89) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x5}], 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x68, r4, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x300, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x5, 0xfffff801, 0x5}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xa0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) [ 871.042681][T12855] asix 2-1:0.84 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 871.053062][T12855] asix 2-1:0.84 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 871.098426][T12855] asix: probe of 2-1:0.84 failed with error -71 [ 871.100687][ T840] usb 6-1: config 0 descriptor?? [ 871.127255][T12855] usb 2-1: USB disconnect, device number 123 [ 871.148290][ T840] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in cold state, will try to load a firmware [ 871.160350][ T840] usb 6-1: Direct firmware load for dvb-usb-gp8psk-01.fw failed with error -2 [ 871.169461][ T840] dvb-usb: did not find the firmware file 'dvb-usb-gp8psk-01.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 871.184510][ T840] dvb_usb_gp8psk: probe of 6-1:0.251 failed with error -2 [ 871.242598][T12971] gspca_stk1135: reg_w 0xf err -71 [ 871.248838][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 871.255604][T12971] gspca_stk1135: Sensor write failed [ 871.261013][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 871.267459][T12971] gspca_stk1135: Sensor write failed [ 871.273045][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 871.279385][T12971] gspca_stk1135: Sensor read failed [ 871.285642][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 871.292076][T12971] gspca_stk1135: Sensor read failed [ 871.297305][T12971] gspca_stk1135: Detected sensor type unknown (0x0) [ 871.304162][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 871.310510][T12971] gspca_stk1135: Sensor read failed [ 871.315861][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 871.322270][T12971] gspca_stk1135: Sensor read failed [ 871.327544][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 871.333988][T12971] gspca_stk1135: Sensor write failed [ 871.339346][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 871.345780][T12971] gspca_stk1135: Sensor write failed [ 871.348153][ T840] usb 6-1: USB disconnect, device number 120 [ 871.351278][T12971] stk1135: probe of 3-1:0.28 failed with error -71 19:32:04 executing program 3: socket$inet6(0xa, 0x80805, 0x0) [ 871.399775][T12971] usb 3-1: USB disconnect, device number 17 19:32:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x400) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000503ed0080637e6394f20100d2000500fcb711407f480f0019010300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x81, [], &(0x7f0000000040)=0x6}) [ 871.494230][T12877] usb 1-1: Using ep0 maxpacket: 16 [ 871.536194][T26203] netlink: 'syz-executor.3': attribute type 281 has an invalid length. [ 871.612055][T12877] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:32:04 executing program 4: r0 = socket(0x4, 0x6, 0x80) write(r0, &(0x7f0000000040)="22000000140067058d000005004c0304020803130100000008000200410a0ee376ab", 0x352) [ 871.656677][T26205] netlink: 'syz-executor.3': attribute type 281 has an invalid length. 19:32:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x8) 19:32:04 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth1_to_bridge\x00'}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 871.782113][T12877] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 871.791246][T12877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.799544][T12877] usb 1-1: Product: syz [ 871.803825][T12877] usb 1-1: Manufacturer: syz [ 871.808478][T12877] usb 1-1: SerialNumber: syz [ 871.887228][T12877] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input183 [ 872.041962][T12971] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 872.150722][ T840] usb 1-1: USB disconnect, device number 81 [ 872.454088][T12971] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 872.462500][T12971] usb 3-1: config 0 has no interface number 0 [ 872.468688][T12971] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 872.477941][T12971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.520359][T12971] usb 3-1: config 0 descriptor?? [ 872.568351][T12971] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 872.812332][T12971] gspca_stk1135: reg_w 0x2 err -71 [ 872.818663][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 872.825226][T12971] gspca_stk1135: Sensor write failed [ 872.830604][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 872.837010][T12971] gspca_stk1135: Sensor write failed [ 872.842447][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 872.848799][T12971] gspca_stk1135: Sensor read failed [ 872.854184][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 872.860553][T12971] gspca_stk1135: Sensor read failed [ 872.865862][T12971] gspca_stk1135: Detected sensor type unknown (0x0) [ 872.872585][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 872.878919][T12971] gspca_stk1135: Sensor read failed [ 872.884303][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 872.890665][T12971] gspca_stk1135: Sensor read failed [ 872.897688][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 872.904118][T12971] gspca_stk1135: Sensor write failed 19:32:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) fcntl$getown(r1, 0x9) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000140)) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0x6200000000000000, 0x2, 0x0, 0x19, 0xa}) r6 = socket$inet(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007041dfffd946f61050002f80200fe02000000010800080012000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x305540, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000080)={0x0, 0xdc, 0x0, 0x8}) 19:32:05 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000480)={0xc9, ""/201}) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000200)=0xfd46, 0x4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x1000000, 0x4) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000180)}, {&(0x7f00000003c0)=""/190, 0xbe}], 0x4) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd01009341", 0x6}], 0x1000000000000006, 0x0) 19:32:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x1, 0xa, 0x5, 0x0, 0xc}]}, &(0x7f0000003ff6)='\x00 ', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 19:32:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x9, 0x10d, 0x400000, 0x3, 0x8, 0xbdc, 0x1, r6}, &(0x7f0000000240)=0x20) syz_emit_ethernet(0xffb6, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004501fec300000000002f9078ac14ffbbe00000010000ffa71ab620c3"], 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f00000002c0)) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000080)) [ 872.909491][T12971] gspca_stk1135: serial bus timeout: status=0x00 [ 872.915900][T12971] gspca_stk1135: Sensor write failed [ 872.921389][T12971] stk1135: probe of 3-1:0.28 failed with error -71 [ 872.950238][T12971] usb 3-1: USB disconnect, device number 18 [ 872.961936][ T840] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 873.014616][T26239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:32:06 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000013003586000000030000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000000c001a00080002e0ffffff00"], 0x3}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 19:32:06 executing program 0: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x31, 0x5, 0x14, 0xd, 0x6, 0x3, 0x4, 0x133}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x90000, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000011c0)={{{@in=@multicast2, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000012c0)=0xe8) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000001300)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) read$FUSE(r5, &(0x7f00000001c0), 0x1000) ioctl$int_in(r3, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r9, 0xc0106401, &(0x7f0000000180)={0x5d, &(0x7f00000000c0)=""/93}) [ 873.398071][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:32:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xb351, 0xff00000000008504, 0x0, 0x6], [0xc1]}) 19:32:06 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/keycreate\x00') r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) socket$rds(0x15, 0x5, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) r10 = dup(r9) getsockopt$inet6_tcp_int(r10, 0x6, 0x1, 0x0, &(0x7f0000012ffc)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200000f, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 873.462477][ C0] net_ratelimit: 18 callbacks suppressed [ 873.462497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 873.474699][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:32:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="001500004c00000008001b0000000000"], 0x28}}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={r7, 0x4, 0x7f}, 0x8) [ 873.731930][ T840] usb 1-1: device descriptor read/64, error -71 19:32:06 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000140)="4c5286dad6249eeedc0ca5c6ea404011fa8e5f4a4283acebe8d84b6d6ce4cd38260ec0f0a1a03ceff984f1166031e628925fe3bf78b2f60c3e3922292c3a14a47e74f3c13f948bc91ecb6ab9f4d0c98afd2b3c7d57e2f44f79bd49fb65778956a3a5619e8724228218bf163b67b28c0a8d2ce4729b2dae4534178d81cec078b1eeb9", 0x82, 0x10000140, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="24000000180007841dfffd946f610500020081001f13fe050400080008001f000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 874.105235][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 874.121072][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 874.175561][T26278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:32:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="001500004c00000008001b0000000000"], 0x28}}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={r7, 0x4, 0x7f}, 0x8) [ 874.232188][ T840] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:32:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) sendmmsg$inet6(r0, &(0x7f0000005100)=[{{&(0x7f0000001480)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000037000000fffffffe00000000140000bc8ed236c0d329b1c6707e2c5ac84000000000002900e5830b000000000004b100000000"], 0x30}}], 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x91) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x1, 0x6, 0x7, 0x6, 0x0, 0x2}, 0xeb}, 0xa) [ 874.507493][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 874.514885][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:32:07 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8b, 0x33, 0xea, 0x8, 0x3eb, 0x2, 0x4a2d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x1, 0x72, 0x77, 0x55, 0x0, [], [{{0x7, 0x5, 0x81}}]}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, "fd3092cfa6ec31675171da9c01f0ffffffd525ed9862304ba605000000ee00"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000080)={0x5, 0x2, "3b06d9bafc4b31bb9d10d03ecc754d0e0d7d089b3dfcfac267d1b3928c77d9e61c7b7db0cadf1a9cc45f7efcb182f98d9d7760cbf79c5e8c5c6a14fafd63e7c361c7595cbd2e4d51c9c0fbc526411ea08cc7ea88a285b4d4bc9c1a09b3b0dfd48a90feba5be93e235d6500652bf7ea4b1766d38ad9ee9b188eb29f015ccac657ecb1d77f3ea72bc4885302052e9297e834fc8a8f71d51d2c213c62222ac07bb99002b899c8470275fb59a471d0d41f14a62261576d35e99b86460edd24747be942d2fe08a596f4e443816a80222473eb0aeb978444f978c6efc7d984da1ef6b85afd6ffe4ab68572ae968cbc20d702b51a79cc89005c7327a62aac814ac4f96c"}) 19:32:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xff, 0x0, 0x1, 0x7}, &(0x7f0000000040)=0x18) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="1c000000150afd8da4000000000000000000ac4304000008"], 0x1c}}, 0x0) [ 874.732653][ T840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 874.741851][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.749887][ T840] usb 1-1: Product: syz [ 874.754186][ T840] usb 1-1: Manufacturer: syz [ 874.758848][ T840] usb 1-1: SerialNumber: syz [ 874.807613][ T840] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input184 [ 874.817834][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 874.818505][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:32:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="001500004c00000008001b0000000000"], 0x28}}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={r7, 0x4, 0x7f}, 0x8) [ 874.863804][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 19:32:08 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000ac5000)='./file1\x00', 0xa400295c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x1020, 0x0) [ 874.972196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 874.978497][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 874.991975][T12971] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 875.231913][T12971] usb 4-1: Using ep0 maxpacket: 8 [ 875.293703][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 875.301196][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 875.352246][T12971] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 875.360537][T12971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.370871][T12971] usb 4-1: config 0 has no interface number 0 [ 875.377149][T12971] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 875.386347][T12971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.465393][T12877] usb 1-1: USB disconnect, device number 82 19:32:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getsockopt$inet6_opts(r2, 0x29, 0x7b, &(0x7f0000000400)=""/131, &(0x7f0000000340)=0x83) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x2fa, 0x40000040, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@rand_addr="a768466a233f394790d541caa52f2fe0", @empty, @local, 0x5, 0x7, 0x20, 0x400, 0x7, 0x4020200, r6}) [ 875.553219][T12971] usb 4-1: config 0 descriptor?? [ 875.602464][T12971] Registered IR keymap rc-hauppauge [ 875.609281][T12971] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.186/rc/rc0 [ 875.621242][T12971] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.186/rc/rc0/input185 [ 875.799682][ T840] usb 4-1: USB disconnect, device number 21 [ 876.532426][T12877] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 876.681842][T12971] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 876.921824][T12971] usb 4-1: Using ep0 maxpacket: 8 19:32:10 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\xff', 0x641, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='to\x1f\x00`ded\x00', 0x200000e0) 19:32:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x802, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="2400000022000739b5f13a031dfffd946f610900000000000543000000000000421ba3a20400ff7e280000001100ff561d3b5b783fd920460000000020000000000000eff24d8238cfa40180f7efbf547d6aee1637e683f215cc8e3b9d27e78307676af758618c0bd7d0540603067adb5b4d3c8065e6083b3c", 0x79}], 0x1}, 0x0) 19:32:10 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x89}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000900)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x1a0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r1 = creat(0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000280)) sync_file_range(r1, 0x5, 0x1000, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010003000000000002000400", @ANYRES32, @ANYRES32], 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) write$cgroup_type(r3, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r2, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) 19:32:10 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x9}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x82002, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={r3, 0x80000, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x18, 0x1}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 19:32:10 executing program 0: syz_usb_connect$hid(0x0, 0xba, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a3, 0xcd0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfc, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xffff, 0x80}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x83, 0x1b, 0x1}}}}}]}}]}}, 0x0) r0 = gettid() tkill(r0, 0x12) tkill(r0, 0x1000000000016) r1 = syz_open_procfs(r0, &(0x7f0000000040)='neu/udp6\x00') r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xe5c, 0x200000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) [ 877.044824][T12971] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 877.054295][T12971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.064552][T12971] usb 4-1: config 0 has no interface number 0 [ 877.070789][T12971] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 877.080087][T12971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:32:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 877.135887][T12971] usb 4-1: config 0 descriptor?? [ 877.169483][T26337] netlink: 'syz-executor.5': attribute type 24 has an invalid length. [ 877.178517][T26337] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 877.198701][T12971] Registered IR keymap rc-hauppauge [ 877.205618][T12971] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.186/rc/rc0 19:32:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x8035, 0x2, {0xb, @vbi={0x100, 0x0, 0xfffffffffffffd30, 0x35303553, [0x8, 0x7f], [0x685a, 0x200], 0x13b}}}) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) [ 877.217940][T12971] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.186/rc/rc0/input186 [ 877.405453][T26348] netlink: 'syz-executor.5': attribute type 24 has an invalid length. [ 877.414331][T26348] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 19:32:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x100c00) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000580)) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r3, &(0x7f0000007f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3b1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000000c0)=0x1f, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() 19:32:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf}, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x102000000000b}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x10c, 0x10, 0x0, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@mcast1}}]}, 0x10c}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 877.490052][T12971] usb 4-1: USB disconnect, device number 22 [ 877.531947][T12877] usb 1-1: device descriptor read/64, error -71 19:32:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) setns(0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 19:32:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x8035, 0x2, {0xb, @vbi={0x100, 0x6, 0x0, 0x35303553, [0x8, 0x7f], [0x0, 0x200], 0x13b}}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) sched_yield() clone(0x34004102, 0x0, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) [ 877.923274][T12877] usb 1-1: device descriptor read/64, error 18 19:32:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) clone(0x34004102, 0x0, 0x0, 0x0, 0x0) 19:32:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000300)=@fragment, 0x8) 19:32:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f00000003c0)="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", 0x142) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 878.194252][T12877] usb 1-1: new high-speed USB device number 84 using dummy_hcd 19:32:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 19:32:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) dup2(r3, r0) [ 878.473968][T12877] usb 1-1: device descriptor read/64, error 18 [ 878.652487][ C0] net_ratelimit: 12 callbacks suppressed [ 878.652510][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 878.664501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 878.881847][T12877] usb 1-1: device descriptor read/64, error 18 [ 878.972323][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 878.978366][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 879.002158][T12877] usb usb1-port1: attempt power cycle [ 879.132309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 879.138553][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 879.452146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 879.458337][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 879.692128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 879.698144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 879.711813][T12877] usb 1-1: new high-speed USB device number 85 using dummy_hcd 19:32:13 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x8580) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000080)={0x6178, {{0x2, 0x4e24, @loopback}}}, 0x88) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) 19:32:13 executing program 4: r0 = memfd_create(&(0x7f0000000140)='+\\lo\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x44bdff94) r1 = dup(r0) fsetxattr$security_selinux(r1, &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:update_modules_exec_t:s0\x00', 0x2b, 0x0) 19:32:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00memory0'], 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x24000) 19:32:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0xdd) 19:32:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3", 0x43}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:32:13 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{&(0x7f0000000000)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/134, 0x86}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002900)=""/255, 0xff}], 0x1}}], 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 19:32:13 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d3d255f838f19c044dcd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x70}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:32:13 executing program 2: 19:32:13 executing program 1: 19:32:13 executing program 5: [ 880.402351][T26442] ptrace attach of "/root/syz-executor.5"[26441] was attempted by "/root/syz-executor.5"[26442] 19:32:13 executing program 1: 19:32:13 executing program 2: [ 880.593983][T12877] usb 1-1: device descriptor read/64, error -71 [ 880.951903][T12877] usb 1-1: Using ep0 maxpacket: 16 [ 881.072025][T12877] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 881.242013][T12877] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 881.251134][T12877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.259392][T12877] usb 1-1: Product: syz [ 881.263658][T12877] usb 1-1: Manufacturer: syz [ 881.268304][T12877] usb 1-1: SerialNumber: syz [ 881.315544][T12877] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input187 [ 881.515673][T12877] usb 1-1: USB disconnect, device number 85 [ 882.281956][T12877] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 882.521843][T12877] usb 1-1: Using ep0 maxpacket: 16 [ 882.642110][T12877] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 882.812128][T12877] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 882.821286][T12877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.829446][T12877] usb 1-1: Product: syz [ 882.833706][T12877] usb 1-1: Manufacturer: syz [ 882.838342][T12877] usb 1-1: SerialNumber: syz [ 882.885435][T12877] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input188 [ 883.084809][T12877] usb 1-1: USB disconnect, device number 86 19:32:16 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x7ff) 19:32:16 executing program 5: 19:32:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000280)={@multicast1, @local}, 0xc) 19:32:16 executing program 4: 19:32:16 executing program 2: 19:32:16 executing program 3: 19:32:16 executing program 5: 19:32:16 executing program 2: 19:32:16 executing program 3: 19:32:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'team_slave_1\x00', 0x9}) 19:32:16 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video36\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001b00060000", 0x23) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000000)="660f151e984e3e660f3a4270660d0fc75e000f070f32f2a666b835182a580f23d00f21f86635200000050f23f8f3ab36f36f65660f2256", 0x37}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) linkat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', r3, &(0x7f0000000540)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000440)={0x2, 0xffffffff, 0x6, 0xf34}, 0x10) 19:32:16 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 883.732127][T12877] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 883.852347][ C0] net_ratelimit: 18 callbacks suppressed [ 883.858173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 883.864265][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 883.971908][T12877] usb 1-1: Using ep0 maxpacket: 16 [ 884.093847][T12877] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 884.261966][T12877] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 884.271129][T12877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.279284][T12877] usb 1-1: Product: syz [ 884.283518][T12877] usb 1-1: Manufacturer: syz [ 884.288137][T12877] usb 1-1: SerialNumber: syz [ 884.346311][T12877] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input189 [ 884.545535][T12877] usb 1-1: USB disconnect, device number 87 [ 884.892118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 884.898462][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 885.212088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 885.218203][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 885.321914][ T840] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 885.372244][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 885.378291][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 885.571789][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 885.692051][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 885.698095][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 885.704433][ T840] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 885.872029][ T840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 885.881267][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.889413][ T840] usb 1-1: Product: syz [ 885.893704][ T840] usb 1-1: Manufacturer: syz [ 885.898320][ T840] usb 1-1: SerialNumber: syz [ 885.945059][ T840] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input190 [ 886.143918][ T840] usb 1-1: USB disconnect, device number 88 19:32:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getsockopt$inet6_opts(r2, 0x29, 0x7b, &(0x7f0000000400)=""/131, &(0x7f0000000340)=0x83) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x2fa, 0x40000040, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0xcac}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@rand_addr="a768466a233f394790d541caa52f2fe0", @empty, @local, 0x5, 0x7, 0x20, 0x400, 0x7, 0x4020200, r6}) 19:32:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90x0, 0x0}) timerfd_settime(r2, 0x2d79c0a0f97deb70, &(0x7f00000002c0)={{0x77359400}, {r3, r4+30000000}}, &(0x7f0000000300)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r7) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r8, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r7, 0x0, 0x12f}]) r9 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) io_submit(r8, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x4, r9, &(0x7f0000000140)="07e75d244eca8bb6ac93dbd7de50bda5b2655e647f6d4d2d94224deb16e4f0f000aaf28fb32638bde86aee2c0e58c37d941a66e6405353576a49539bf8b3ad47dce915f6f6a369be4cd4353f44ecb43feae43e11dc3a23148fa51fb7c3ab8c38f3173b6c062f340ddae61538b5ddf8f0355129cbd944e4db3354634ae4585f77df8de3cfccbb72e43cd005b344fd485218db869809179a50a41df523417eb42da1", 0xa1, 0x7, 0x0, 0x2}]) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r11, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000080)={r13}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000380)={r13, 0x5, 0x1c0, 0x20, 0x3, 0x2}, &(0x7f0000000040)=0xffffffffffffffbb) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000940)='%', 0x1}], 0x2}}], 0x2, 0x400c004) 19:32:19 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:19 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x95, &(0x7f00000001c0)={&(0x7f0000000100)={'xcbc(anubis-generic)\x00'}, 0x0, 0x70}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000480)) keyctl$setperm(0x5, r2, 0x20004200) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r8 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup(r8, &(0x7f0000000040)='0-\x00', 0x1ff) sendto$inet(r1, &(0x7f0000000380)="b4bbf8acf9b11c70140a6c2e98fa2dfdf476c40ed6ad4f9112cca9e080915a6c509656a1dfe57face2e8836d5a23cb5c358e18e28fdb4a60fc31cb3653f463d614d69d7834f2df9c4452cb8f7ea5032952b1c72a096594762966b9058f8aac88bae722f324db9c62e428b74ca1dd4ccc1980cee3fccc0ba1d51ce8625455a1a90683832bf1369ba22f71e116297176bd9fee56bd98fdc82edb42672a286ccd9ceb2c1d1c14ef1553b0f34cb965c501e9f87680c1e99db7d4d350aa86", 0xbc, 0x40000, &(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6, 0xfb, 0x20, 0xe, 0x0, 0x0, 0x2000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x100, 0x1, 0x3, 0x9, 0xfffffffffffffe00, 0xfffff001, 0x7}, r7, 0x9, r8, 0x0) mkdirat$cgroup(r6, &(0x7f0000000040)='0-\x00', 0x1ff) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/prev\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000000)={0x8, 0x10000, 0x1, 0x885, 0xfdc, 0x3f}) 19:32:19 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x600700, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000080)=0xdfd3effbba6dd346) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x2007, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b400c000a00053582c137153e370400088003001700d1bd", 0x2e}], 0x1}, 0x0) [ 886.584917][T26513] IPVS: ftp: loaded support on port[0] = 21 [ 886.694788][T26521] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 886.703433][T26521] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 19:32:19 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="20000000680013080000020000000000dd01fe7885b7c700080006001ed3000200000000000001f36b6744254ffe2e4173a157dcd8d2476d0c795bd3bfc6afb407dcd6d43801962cbbb4bc9481b435845656e6f859378cc70000e9a6f60d9485b06f4afb80abb4b50100000c6d757a3cc10ed9abb13edfa687bdd02808a5605d1b73d76ea549e2052287287c9acc0146bef2ec20b74203a1abef015a25a0e00a08d137d84d2864c900000000001300"/194, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) r2 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0x6b7, 0x0) splice(r1, 0x0, r0, 0x0, 0x100020008eab, 0x0) [ 886.745810][ T840] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 887.004300][T12877] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 887.011842][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 887.091299][T26517] IPVS: ftp: loaded support on port[0] = 21 19:32:20 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0xfffffffffffffdcc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x9}]}, 0xfdef) 19:32:20 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @initdev}, &(0x7f00000001c0)=0xc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200)) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) [ 887.234017][ T840] usb 1-1: too many endpoints for config 1 interface 0 altsetting 9: 32, using maximum allowed: 30 [ 887.244925][ T840] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.254813][T12877] usb 2-1: Using ep0 maxpacket: 16 [ 887.255948][ T840] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 32 [ 887.256030][ T840] usb 1-1: config 1 interface 0 has no altsetting 0 [ 887.370391][T26536] device nr0 entered promiscuous mode [ 887.372401][T12877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.387167][T12877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 887.400364][T12877] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 887.409647][T12877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.423630][T12877] usb 2-1: config 0 descriptor?? [ 887.442568][ T840] usb 1-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.40 [ 887.451847][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.459885][ T840] usb 1-1: Product: syz [ 887.464426][ T840] usb 1-1: Manufacturer: syz [ 887.469073][ T840] usb 1-1: SerialNumber: syz 19:32:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000080)) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x1d6, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1e, {[@local=@item_4={0x3, 0x2, 0xa, 'c`Vj'}, @global=@item_4={0x3, 0x1, 0x0, "0b001aa3"}, @local=@item_012={0xffffffffffffff14, 0x2, 0x0, "8c93"}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_4={0x3, 0x1, 0x5, "2fe6bc99"}, @global=@item_4, @local=@item_012={0x2, 0x2, 0x9, "e676"}, @main=@item_012={0x2, 0x0, 0xb, 'd<'}]}}, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 887.880111][T26536] device nr0 entered promiscuous mode [ 887.915049][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.923097][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.930656][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.938307][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.945918][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.953595][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.961127][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.968714][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.976337][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.976499][ T840] usbhid 1-1:1.0: can't add hid device: -71 [ 887.983934][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.984091][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.984237][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 887.990229][ T840] usbhid: probe of 1-1:1.0 failed with error -71 [ 887.997576][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 888.026321][T12877] hid-generic 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 888.034055][T12877] hid-generic 0003:0D8C:0022.002B: unbalanced collection at end of report description [ 888.044189][T12877] hid-generic: probe of 0003:0D8C:0022.002B failed with error -22 19:32:21 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 888.078155][ T840] usb 1-1: USB disconnect, device number 89 [ 888.204580][T12877] usb 2-1: USB disconnect, device number 124 [ 888.241880][T12777] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 888.491910][T12777] usb 3-1: Using ep0 maxpacket: 16 [ 888.612213][T12777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.623595][T12777] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 888.636543][T12777] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 888.636620][T12777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.672051][ T840] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 888.694686][T12777] usb 3-1: config 0 descriptor?? [ 888.913653][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 888.941913][T12877] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 889.032623][ T840] usb 1-1: too many endpoints for config 1 interface 0 altsetting 9: 32, using maximum allowed: 30 [ 889.043594][ T840] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.055338][ C0] net_ratelimit: 12 callbacks suppressed [ 889.055357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 889.055762][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 889.073349][ T840] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 32 [ 889.086366][ T840] usb 1-1: config 1 interface 0 has no altsetting 0 [ 889.231851][T12877] usb 2-1: Using ep0 maxpacket: 16 [ 889.260715][ T840] usb 1-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.40 [ 889.270037][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.278201][ T840] usb 1-1: Product: syz [ 889.282513][ T840] usb 1-1: Manufacturer: syz [ 889.287153][ T840] usb 1-1: SerialNumber: syz [ 889.372145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 889.374645][T12877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.378266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 889.389117][T12877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 889.407770][T12877] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 889.416927][T12877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.429618][T12877] usb 2-1: config 0 descriptor?? [ 889.442074][T12777] usbhid 3-1:0.0: can't add hid device: -71 [ 889.448362][T12777] usbhid: probe of 3-1:0.0 failed with error -71 [ 889.469512][T12777] usb 3-1: USB disconnect, device number 19 [ 889.532374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 889.538764][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 889.684217][ T840] usbhid 1-1:1.0: can't add hid device: -71 [ 889.690422][ T840] usbhid: probe of 1-1:1.0 failed with error -71 19:32:22 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1200000000000000080522a1711d68f5ff5fcb23030621b7730240000102030107022400010100000009040000000301020009ef52bda63275e80a921df59eaa557b583d061f401b5b0fae26dd0c61cca3"], 0x0) 19:32:22 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:22 executing program 4: clone3(&(0x7f0000000000)={0x22003000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x790c, 0x1, 0x40, 0x0, 0x4, 0x4000, 0xe000, [], 0x3}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x5, 0x0, [{0x80000001, 0x8, 0x1, 0x6, 0x125e, 0xffffffff, 0x3}, {0x100000004, 0x2, 0x4, 0xe88, 0xfffffff9, 0xf5, 0xffffffa5}, {0x4, 0x9, 0x7, 0x101, 0x7ff, 0x2, 0x180000}, {0x40000000, 0x0, 0x2, 0xfffffffb, 0x7, 0x7e, 0x7}, {0xc0000000, 0x9, 0x5, 0x9, 0xfffff800, 0x7f, 0x81}]}) [ 889.725327][ T840] usb 1-1: USB disconnect, device number 90 [ 889.792404][T12877] usbhid 2-1:0.0: can't add hid device: -71 [ 889.798669][T12877] usbhid: probe of 2-1:0.0 failed with error -71 [ 889.825783][T12877] usb 2-1: USB disconnect, device number 125 19:32:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0x7e, 0x200, 0x5, 'queue1\x00', 0x3}) r4 = userfaultfd(0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback}, &(0x7f0000000180)=0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000040)=""/100, 0x64) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) close(r4) [ 889.852256][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 889.858441][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 890.092267][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 890.098408][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 890.131994][T12777] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 890.172099][ T840] usb 1-1: new high-speed USB device number 91 using dummy_hcd 19:32:23 executing program 4: clone3(&(0x7f0000000000)={0x22003000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x790c, 0x1, 0x40, 0x0, 0x4, 0x4000, 0xe000, [], 0x3}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x5, 0x0, [{0x80000001, 0x8, 0x1, 0x6, 0x125e, 0xffffffff, 0x3}, {0x100000004, 0x2, 0x4, 0xe88, 0xfffffff9, 0xf5, 0xffffffa5}, {0x4, 0x9, 0x7, 0x101, 0x7ff, 0x2, 0x180000}, {0x40000000, 0x0, 0x2, 0xfffffffb, 0x7, 0x7e, 0x7}, {0xc0000000, 0x9, 0x5, 0x9, 0xfffff800, 0x7f, 0x81}]}) 19:32:23 executing program 1: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) set_mempolicy(0x4003, &(0x7f0000000080)=0x101, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x28}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) clone(0x42108000, 0x0, 0x0, 0x0, 0x0) [ 890.442011][ T840] usb 1-1: device descriptor read/64, error 18 19:32:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@migrate={0xe4, 0x21, 0x281, 0x0, 0x0, {{@in=@multicast2, @in=@local}}, [@migrate={0x5c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2}]}, @policy_type={0xc}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@ipv4={[], [], @empty}}}]}, 0xe4}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)) [ 890.529426][T26589] IPVS: ftp: loaded support on port[0] = 21 19:32:23 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:23 executing program 4: clone3(&(0x7f0000000000)={0x22003000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x790c, 0x1, 0x40, 0x0, 0x4, 0x4000, 0xe000, [], 0x3}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x5, 0x0, [{0x80000001, 0x8, 0x1, 0x6, 0x125e, 0xffffffff, 0x3}, {0x100000004, 0x2, 0x4, 0xe88, 0xfffffff9, 0xf5, 0xffffffa5}, {0x4, 0x9, 0x7, 0x101, 0x7ff, 0x2, 0x180000}, {0x40000000, 0x0, 0x2, 0xfffffffb, 0x7, 0x7e, 0x7}, {0xc0000000, 0x9, 0x5, 0x9, 0xfffff800, 0x7f, 0x81}]}) [ 890.753810][T26589] IPVS: ftp: loaded support on port[0] = 21 [ 890.838971][ T840] usb 1-1: device descriptor read/64, error 18 19:32:24 executing program 2: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x0, 0x5}) r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x5) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) 19:32:24 executing program 1: socket$inet(0x2, 0x4800000000000002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000008c0)={0x0, {0x2, 0x1000}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x1c, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)='rose0\x00', 0x0, 0x0, 0x87}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) 19:32:24 executing program 4: clone3(&(0x7f0000000000)={0x22003000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x790c, 0x1, 0x40, 0x0, 0x4, 0x4000, 0xe000, [], 0x3}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x5, 0x0, [{0x80000001, 0x8, 0x1, 0x6, 0x125e, 0xffffffff, 0x3}, {0x100000004, 0x2, 0x4, 0xe88, 0xfffffff9, 0xf5, 0xffffffa5}, {0x4, 0x9, 0x7, 0x101, 0x7ff, 0x2, 0x180000}, {0x40000000, 0x0, 0x2, 0xfffffffb, 0x7, 0x7e, 0x7}, {0xc0000000, 0x9, 0x5, 0x9, 0xfffff800, 0x7f, 0x81}]}) [ 891.111968][ T840] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 891.382065][ T840] usb 1-1: device descriptor read/64, error 18 [ 891.771859][ T840] usb 1-1: device descriptor read/64, error 18 [ 891.892492][ T840] usb usb1-port1: attempt power cycle [ 892.611865][ T840] usb 1-1: new high-speed USB device number 93 using dummy_hcd 19:32:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000002c0)=0x1, 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000280)={0x8, 0x4, 0x4, 0x20, 0x4, 0x7, 0x8}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x9}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000300)=@buf={0x1c6, &(0x7f0000000100)="e55b3bd6a266b037aeb6832292fc0d853642051c67c07deeb3396b7a9fbd5837dd5494b6239418cff8133439d783472f15134fdc3cf9a84511410fa84cd156a6561489b4f1527cd3fb63a3bc452577714a014be6d9259314414fdec85be22cd5f9120b9f179d0d3a395aa27c1ca589158e561dab86c2c60dd1175c9c2b9400439e2e84903f9be336b821e482c46a2c5ca366a5"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r9 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x3, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x90) 19:32:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x5, 0x40, 0x0, 0x0, 0x9}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x8202, 0x101, 0x45a3}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:32:25 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$CAPI_INSTALLED(r3, 0x80024322) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0xc0, 0x0, [], [{}, {0xffffffff}], [[], [], [], [], []]}) 19:32:25 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:25 executing program 0: syz_usb_connect$hid(0x0, 0xfffffffffffffd89, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0xfffffffffffffd7d, &(0x7f0000000000)={0x0, 0x0}}, 0x17a) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2, 0x3, 0x4}, 0xc) 19:32:25 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200002, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000002840)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000002880)={r2, 0x3}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={r2}) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0xe, 0x4, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}, {[@noop, @ra={0x94, 0x6, 0x9}, @lsrr={0x83, 0xb, 0x0, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x0, [@broadcast]}, @generic={0x89, 0x9, "22a027156a7546"}, @end, @end]}}, @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x3e120b168aa07157, 0x68, 0x0, 0x2}, {"69b322e796540d3224f590b5dd1023fc20eb36c4f7049e808753f2bb78a7ead2a313"}}}}}}, 0x0) 19:32:26 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000001b80)=""/4096, &(0x7f0000000040)=0x1000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="5d5fa93a", 0x4}], 0x1}, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xa7) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)=@newtaction={0xe2c, 0x30, 0xad5a46c8169e3b7c, 0x70bd2b, 0x25dfdbfc, {}, [{0x130, 0x1, @m_ipt={0x12c, 0x13, {{0x8, 0x1, 'ipt\x00'}, {0x18, 0x2, [@TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}]}, {0x104, 0x6, "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"}}}}, {0x5c, 0x1, @m_bpf={0x58, 0x4, {{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x9}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x30, 0x6, "d4ad6db98c72d91f28eaff33e81780ab7a49cf9e3a5deb26ddc78519f32d94af9729f49b4f196c040ba17e"}}}}, {0x900, 0x1, @m_police={0x8fc, 0x11, {{0xc, 0x1, 'police\x00'}, {0x814, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x3f, 0x9, 0x1, 0xbcc7, 0xffffffff, 0x6cac7316, 0xffff, 0x5, 0x3, 0x1000, 0x1ff, 0x90000000, 0x1, 0x5, 0x4, 0x400, 0xfffffe01, 0x4, 0x4, 0x20, 0xfffff4ce, 0x7fff, 0x6, 0x3, 0x3, 0x0, 0x8000, 0x9, 0xfbc, 0x37, 0x5, 0x2, 0x9, 0x5, 0x9, 0x6000, 0x40, 0x3f, 0x7f, 0x6, 0x3, 0x2733226b, 0x7ff, 0xfffff000, 0x7ff, 0x1, 0x7, 0xa88e, 0x8, 0xffffffff, 0x8, 0x1, 0x4, 0xfffffff9, 0xcad9, 0x9, 0x0, 0x8, 0x9, 0x7, 0x0, 0x10000, 0x96, 0x2bb, 0x9, 0x0, 0xfffffffd, 0xe98b, 0x3, 0x101, 0x10000, 0x7fe00, 0x6, 0x6, 0xec3, 0x1ff, 0x7, 0x20, 0x2, 0x3f, 0x7fffffff, 0x40, 0x20, 0x4, 0xfffffddc, 0x400, 0x3, 0x4159, 0x9, 0xff, 0x20, 0x7, 0x254, 0xff, 0x0, 0x7ff, 0x3e99, 0x7, 0xc865c, 0x9, 0x6, 0x6, 0x8001, 0x1ccd, 0x1, 0x1f, 0x6, 0xfff, 0x0, 0x8, 0x56, 0x40, 0x7fff, 0x4, 0x0, 0x6, 0x9, 0x1, 0x1, 0x5, 0xaac5, 0x2, 0x6, 0x7, 0x5, 0x800, 0xf6a6, 0x8, 0x7f, 0x7, 0x3f, 0xfc0000, 0x9, 0x1ff, 0x7, 0x20, 0xc, 0x9, 0x0, 0x52910ac, 0x0, 0x7f, 0x1, 0x1f, 0x9, 0x401, 0x10001, 0xffff, 0x7fffffff, 0x100, 0x1, 0x7, 0x200, 0x62, 0x7, 0x3, 0xfffffffd, 0x3f, 0x400, 0x2, 0x6, 0x2, 0x0, 0x7fff, 0x5, 0x1, 0xbdc, 0x7fff, 0x89e, 0x2, 0x9, 0x10001, 0x9, 0x3ff, 0x8, 0x4d7, 0x9, 0x3ff, 0x7fff, 0x82be, 0x8, 0x7ff, 0x1, 0x4, 0x8, 0x7, 0xffff, 0x101, 0x1, 0xffffffff, 0x2, 0x2, 0x5, 0xa1, 0x800, 0x81, 0x4, 0x4, 0x1000, 0x0, 0xfffffff9, 0x4, 0x0, 0x0, 0x6, 0x9, 0x8000, 0xb0, 0xa4e1, 0x8, 0x9, 0x3, 0x1, 0xecd, 0x4, 0x0, 0x13, 0x46, 0x3, 0x0, 0x8, 0x0, 0x1, 0x2, 0x3f, 0x5c, 0xffffffff, 0x8, 0x96188b8, 0xfff, 0x1, 0x0, 0x3d, 0x8001, 0x4, 0x9, 0x14fb, 0x5a, 0x8, 0x9, 0x0, 0x80000001, 0x1, 0x69, 0x5, 0x5b8a, 0x5d9d6b3a, 0x1, 0x9, 0x4, 0x3f, 0xd39, 0x8, 0x3, 0xc0]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x6, 0x2, 0x2, 0x7, 0x3, 0x1, 0x9, 0xeb25, 0x5, 0x4, 0x1, 0x10000000, 0x400, 0x38, 0x3, 0x2, 0x20, 0x1, 0x0, 0x4, 0x1, 0x3, 0x5d58, 0x800, 0xfff, 0x401, 0x1, 0x7fff, 0x4, 0x80000000, 0x20, 0x8, 0x3, 0xfffffffe, 0x100, 0xdf0, 0x2, 0x2, 0x4, 0x1, 0x0, 0x3f, 0x0, 0x7e2, 0x2, 0x6, 0xfa, 0xa2b, 0x3, 0x4, 0x3ff, 0x3, 0x2a80, 0x3, 0x1, 0x1bc, 0x1, 0x1, 0x10001, 0x493, 0x5, 0x80000000, 0x1, 0x7fff, 0xa31, 0x8e4, 0x101, 0x5, 0x5, 0xfffffffe, 0x3f, 0x0, 0x71a2, 0x58, 0x8, 0x400, 0x10000, 0x2, 0xfdc, 0xffff, 0x200, 0x15ec3b9f, 0x5, 0x9, 0x89, 0x1, 0x4, 0x4, 0x0, 0x7, 0x2, 0x6, 0x4, 0x4, 0x3, 0x6, 0x2, 0x3be, 0xbc, 0xef8, 0x2, 0x1f7f, 0x0, 0x200, 0x8, 0x1000, 0x400, 0x0, 0x80000000, 0x8, 0x8, 0x25, 0x34, 0x2, 0x0, 0x8001, 0x8, 0x7f, 0x59, 0x8, 0x2, 0x1f, 0x75ff, 0x4aed, 0x7, 0x4, 0x8000, 0x0, 0x2, 0x3ff, 0x88c, 0x1, 0x10001, 0xf8, 0x7fffffff, 0x7a220cea, 0x0, 0x4, 0x7, 0x1, 0x7, 0xfff, 0x9, 0x5, 0x7fff, 0x2, 0x2, 0x1, 0x7, 0xffff, 0x2, 0x4, 0x1, 0x3, 0x4, 0x2, 0x20, 0x3, 0x8, 0x4, 0x8, 0x2, 0x3, 0x2, 0x400, 0x8b, 0x9, 0x80, 0x9, 0x100, 0x1f, 0x3, 0x2c, 0x81, 0xb8be, 0x7c19, 0xafe, 0x80, 0x2, 0x3ff, 0x1, 0xda, 0x9, 0x1, 0xc1, 0x3f, 0x40000, 0x401, 0x6, 0x9, 0x0, 0x7, 0x10000, 0x2, 0x1, 0x20, 0xffffffff, 0x80000001, 0x9, 0xfffffffd, 0x7, 0x3f, 0x6d7b, 0xffffffff, 0x1, 0x0, 0x6, 0x3ff, 0x1a, 0x2, 0x6, 0xb6, 0x580a, 0x800, 0x4, 0x67, 0xd16c, 0xff, 0x0, 0x2, 0x3, 0x80, 0x800, 0x7, 0xeba, 0x1, 0x3, 0x2, 0x80000001, 0x4, 0x101, 0x8, 0x7, 0xa88, 0x55ce, 0x2, 0x7, 0x200, 0x2, 0x84a0, 0x9, 0x7, 0x6, 0x1, 0x401, 0x4, 0x2c1a, 0x5, 0x571, 0x2020, 0x15b3, 0x78, 0xda, 0x683]}]}, {0xd4, 0x6, "e71b54d3b87bda56fc93073c172083bc9fc90ba7d9dcac59d44bb7a3561a03a18b6f3f5db66c82b9abfa39e41f351c45651401e1e83b93841f47b495134d2d2a1fd0bc298ce6f4178283f0ac54f25282d8b0de2d927a480a365b7c54f26da1c4d2334f592f4330af436ddd4d9fa5ce45154064f03d9dba4f2fd3c3364bf517b05eb90525020b62c6560c5f31e877550165e2bbcd68833df95705fb174f80f32c3e4de5faabfc5cf3e72931398f39ffb47932fb60512835d9ef8fab2252c9a842f84167970f9e29dc020abe72972f"}}}}, {0xa8, 0x1, @m_connmark={0xa4, 0x9, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x7, 0x4, 0x964d}, 0xf09c}}}, {0x6c, 0x6, "712de5c267bdf79bc8f28a4a5741b9744663c52f5b1cd39be3f80095d63700f6cfe8e42275247a93a62f3b2f045ea2578d0713baa71607c56a6ac17c708d1355829b7b29ebfb80cf0d1a1ac1ecd844762b82862cc271b368fb4edf5f8886fa0d2511738f381e55"}}}}, {0x19c, 0x1, @m_ife={0x198, 0x17, {{0x8, 0x1, 'ife\x00'}, {0xb0, 0x2, [@TCA_IFE_SMAC={0xc, 0x4, @local}, @TCA_IFE_SMAC={0xc}, @TCA_IFE_SMAC={0xc, 0x4, @random="53a82d6ce3e4"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0x2, 0x20000000, 0xc5, 0x8000}, 0x1}}, @TCA_IFE_DMAC={0xc, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8001000, 0x7fff, 0x2, 0xfff, 0x8001}, 0x1}}, @TCA_IFE_DMAC={0xc, 0x3, @remote}, @TCA_IFE_SMAC={0xc, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_TYPE={0x8, 0x5, 0xe}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xd23e}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fffffff}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xd8, 0x6, "ed15db4d071b47f1a1aceecf22d65e443a9483bbdb251816757c57153a85c34dd07fc2a65667bdc40eea0e9e8e4a499233603d127a6ec9f337c4554b345513dec587207628365b1b8e36244595302f022afcfdf764f255db6a370869d69a4ffe3a0813e2a03704c38c8c4da1ff2aac22ea1345ad783f3d2e31d750b8e4f83e0a478f18aa78047d8e7bb709141db56c93d5aa287bd4c69795e5a4d06ecaa6a8a7baa6fb86c60d91f679c1d101e544765427554079700a4fd3f590bfd42c2ff3733dc6d7000c5171a09a0e5fdb89a1534cfc"}}}}, {0x148, 0x1, @m_gact={0x144, 0xf, {{0xc, 0x1, 'gact\x00'}, {0x64, 0x2, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xbc, 0x0, 0x8000, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x5, 0x0, 0x3, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x262b, 0x8000004}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1409, 0x7ffffffffffffff5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3ff, 0x1, 0x7e724a1bf4c34542, 0x45, 0xfffffc01}}]}, {0xcc, 0x6, "cbea262df2f72d5f6e651782a55c59d6e4a769f27242ddf809018b789ba1c87da455d4c1b7f062c2fc64792a473376ca325aa152032fc47ae08f603923e5a4b649f32ca8b19839fb985787901060478df366b959ff014ac4fb17dc7b56bcd9926f6c97d0e2fd0fb5672b745ea3593248e293bf6772ce916d2ff99e3fb4c1c2607e25064cdeeb221218b7ae0d73f801ce2761e097c8bd1ecd5a55855a1a6ce08f2177ddbe51512f05ee2f7382f5d1856248a74a79466cd5948f5df9a59c3dd02516371ebfb76763b7"}}}}]}, 0xe2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000810) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f00000002c0)) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f00000001c0)={0x8001007, 0xc000, 0x31a5505fe243697}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00231ffac18f08696dedb0c3acbd8f48a5c93d"], 0x90ad) 19:32:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa341, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xff, 0x3, 0x3f, 0x4, 0x81, 0x8, 0x7, 0x2, 0x8, 0x9}, 0xb) 19:32:26 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, "ed6121", "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"}}, 0x110) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 19:32:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) sendto(r2, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x6, &(0x7f0000003700)={0x77359400}) 19:32:26 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109023f000101000000002002060005052406000005240000000d240f010500000000000000000424130009254aecf7e921b40d090503020000000000000000"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='vlan0\x00', 0x10) [ 893.233263][T26663] IPVS: ftp: loaded support on port[0] = 21 [ 893.277773][ T840] usb 1-1: device descriptor read/64, error 18 19:32:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x16, 0x13, 0xa1, 0x20, 0x2040, 0x2950, 0x8723, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0x4d, 0x9f}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000040)={0x1000, 0x0, 'client0\x00', 0xffffffff80000003, "c7ecff38fcbff6f1", "4ca0b0e7c76a9eeb7ae3f7727cb5bb674600", 0xfc, 0x4}) 19:32:26 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 893.764418][T26683] IPVS: ftp: loaded support on port[0] = 21 19:32:26 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4400, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xf3e1bff67399a4ab, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) pwritev(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)="81", 0x1}], 0x2, 0x0) [ 893.872204][T12777] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 893.922096][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 893.932889][T12877] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 894.082489][ T840] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 894.090578][ T840] usb 1-1: can't read configurations, error -22 [ 894.121929][T12777] usb 3-1: Using ep0 maxpacket: 8 [ 894.142364][T12971] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 894.172066][T12877] usb 2-1: Using ep0 maxpacket: 32 [ 894.252569][ C0] net_ratelimit: 18 callbacks suppressed [ 894.252591][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 894.264651][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 894.270853][ T840] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 894.278691][T12777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.288935][T12777] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 894.382112][T12971] usb 4-1: Using ep0 maxpacket: 8 19:32:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x24200, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1, 0x414082) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040)) recvfrom$inet(r0, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00aa7) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 894.452191][T12877] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=87.23 [ 894.461509][T12877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.469854][T12877] usb 2-1: Product: syz [ 894.472396][T12777] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.474354][T12877] usb 2-1: Manufacturer: syz [ 894.483227][T12777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.483298][T12777] usb 3-1: Product: syz [ 894.491463][T12877] usb 2-1: SerialNumber: syz [ 894.499484][T12777] usb 3-1: Manufacturer: syz [ 894.499557][T12777] usb 3-1: SerialNumber: syz [ 894.514322][T12877] usb 2-1: config 0 descriptor?? [ 894.542310][T12971] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 894.550497][T12971] usb 4-1: config 0 has no interface number 0 [ 894.556833][T12971] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 894.566857][T12971] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 894.572097][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 894.577919][T12971] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 19:32:27 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 894.596128][T12971] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 894.605306][T12971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.640664][T12877] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 894.686317][T12971] usb 4-1: config 0 descriptor?? [ 894.764206][ T840] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 894.772477][ T840] usb 1-1: can't read configurations, error -22 [ 894.785642][ T4610] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 894.791896][ T840] usb usb1-port1: unable to enumerate USB device [ 894.794910][ T4610] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 894.810242][ T4610] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 894.819381][ T4610] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 894.829319][ T4610] pvrusb2: Failure uploading firmware1 [ 894.829335][ T4610] pvrusb2: Device initialization was not successful. [ 894.829352][ T4610] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 894.860984][T12877] usb 3-1: USB disconnect, device number 21 [ 895.016764][ T840] usb 2-1: USB disconnect, device number 126 [ 895.023595][ T840] pvrusb2: Device being rendered inoperable [ 895.113423][T12877] usb 4-1: USB disconnect, device number 23 [ 895.292464][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 895.298633][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 895.622235][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 895.628462][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 895.702066][T12877] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 895.772332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 895.778439][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 895.861918][T12971] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 895.931970][T15947] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 895.942038][T12877] usb 3-1: Using ep0 maxpacket: 8 19:32:29 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x20002000}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="937ab5f5dbf5faf0047349fdcb5162eb"}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) restart_syscall() bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) accept(0xffffffffffffffff, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) 19:32:29 executing program 0: syz_usb_connect$hid(0x2, 0x0, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000010c0)=""/4107, &(0x7f0000001080)=0x100b) 19:32:29 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 896.072707][T12877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.083101][T12877] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 896.102315][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 896.108545][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 896.121951][T12971] usb 2-1: Using ep0 maxpacket: 32 19:32:29 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x400, 0x3, 0x0, 0x81}, {0x8001, 0x96, 0x48, 0x94e}, {0x400, 0x5, 0xe1, 0x960d}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r12) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000d7c000)={0x0, r12}) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f00000000c0)={0x3, r10}) r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r13, 0x40000000af01, 0x0) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r14) ioctl$VHOST_SET_VRING_ADDR(r13, 0x4028af11, &(0x7f0000b04000)={0x0, 0x4, 0x0, &(0x7f0000000280)=""/107, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r13, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r13, 0x4008af30, &(0x7f0000d7c000)={0x0, r14}) r15 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r15, 0x40000000af01, 0x0) r16 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r16) ioctl$VHOST_SET_VRING_ADDR(r15, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r15, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r15, 0x4008af30, &(0x7f0000d7c000)={0x0, r16}) close(r15) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x8, 0x1a, @ipv4=@remote}]}, 0x1c}}, 0x0) [ 896.172216][T15947] usb 4-1: Using ep0 maxpacket: 8 [ 896.253157][T12877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.262552][T12877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.270585][T12877] usb 3-1: Product: syz [ 896.274936][T12877] usb 3-1: Manufacturer: syz [ 896.279571][T12877] usb 3-1: SerialNumber: syz [ 896.322118][T15947] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 896.330338][T15947] usb 4-1: config 0 has no interface number 0 [ 896.336570][T15947] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 896.346397][T15947] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 896.357468][T15947] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 896.370920][T15947] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 896.380123][T15947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.391265][T15947] usb 4-1: config 0 descriptor?? [ 896.464278][T12971] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=87.23 [ 896.473548][T12971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.481626][T12971] usb 2-1: Product: syz [ 896.486090][T12971] usb 2-1: Manufacturer: syz [ 896.490787][T12971] usb 2-1: SerialNumber: syz [ 896.499402][T12971] usb 2-1: config 0 descriptor?? 19:32:29 executing program 2: syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x201000, 0x4) r4 = fanotify_init(0xe55ac4325fefc2d2, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000080)={0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 896.526609][ T840] usb 3-1: USB disconnect, device number 22 [ 896.561569][T12971] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx 19:32:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x80, @empty, 0x5}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000015ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000ff0a00000000000000000a000000fffffe0121000000354ba86149690484979e620ffc595e9f7855bb3a5005e775ffaaf8a083a04b7f11d37b25f0ce2292c41ad7886992478645598d2b84dd342513ef1c3bcf81675a154fb5cfe867"], 0x1c}}, 0x0) [ 896.688138][ T4610] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 896.697508][ T4610] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 896.706371][ T4610] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 896.715479][ T4610] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 896.725357][ T4610] pvrusb2: Failure uploading firmware1 [ 896.730913][ T4610] pvrusb2: Device initialization was not successful. [ 896.737673][ T4610] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 896.749126][T12971] usb 2-1: USB disconnect, device number 127 [ 896.756095][T12971] pvrusb2: Device being rendered inoperable [ 896.813002][T15947] usb 4-1: USB disconnect, device number 24 19:32:29 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:29 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:30 executing program 3: r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9, 0x24, 0x3, 0x0, 0x300}, @feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @processing_unit={0x7}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x0, 0x1, [0x3], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0xff5e}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001500)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0003040000c69cbf0424"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1e, @lang_id={0x4}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x83, 0x2, "eb8f"}, 0x0, 0x0}) 19:32:30 executing program 1: prctl$PR_SET_PDEATHSIG(0x1, 0x32) r0 = socket(0x10, 0x803, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x20102, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0x12, 0x0, 0x0, 0x1d4) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/119, 0x77}], 0x100000000000015d}}], 0x1, 0x0, 0x0) r1 = semget(0x0, 0x1, 0x42) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x7f, 0x1, 0x40, 0x1ff]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x37, &(0x7f0000000200)=0x4, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e22, @broadcast}, {0x306, @link_local}, 0x1a, {0x2, 0x4e22, @rand_addr=0x3e7}, 'batadv0\x00'}) 19:32:30 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:30 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:30 executing program 1: syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, 0x10) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 19:32:30 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)={0x8f, 0x8d, "16c676ba981e834ebaec7e70a9b113b4937d5e6de3b0ce0484ab87910cca9603a5451fcbf3234f42eb6be32284a313a7e24008d375d1dcd0ea3a3aa6389f2048279f0cf5d72dda49c3992b9ba0b937ac441a7518c8fdd3e0bcd246af761aa29e7f91d7eca61e9537beea8cb89d42dfa663fb6c9e69824dc502c85e992cc65717657b65b920122d"}, 0x12000) 19:32:30 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:30 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000001c0)={0x847e965e8159602a, r4}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x401004, 0x4) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) [ 897.391952][T15947] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 897.491943][ T840] usb 1-1: new high-speed USB device number 95 using dummy_hcd 19:32:30 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2c, 0x200) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000200)="54e8e57b8a738fa4c6ed200af6f298433de8d024e3c517ed2e5b76273d31b1bba9891900e8022fb775fe73c3429f172e4fc8defb31167887894a66e5d8ada21ddfd01cf122087491297a1a73c6f3175c5e2fb3d636693852524c46ac5817d87784c72f7bb7481e449e232b1b8f1636fcdcfeb2ec7f3a4d2c0b6af34a0d977ef831e2b477716970a7810aff3434f6a0a14ef4f313b04b2d30b8", 0x99) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x54}}, 0x0) 19:32:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0x1015, 0x4, 0xfd, "ddd88e794c25cbdd85c40de4c52a0938", "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"}, 0x1015, 0x1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x34d, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) [ 897.751923][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 897.751985][T15947] usb 4-1: config index 0 descriptor too short (expected 157, got 155) [ 897.765713][T15947] usb 4-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 897.776107][T15947] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 897.788843][T15947] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 19:32:30 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 897.850046][T26803] Started in network mode [ 897.855313][T26803] Own node identity , cluster identity 4711 [ 897.861248][T26803] Failed to set node id, please configure manually [ 897.867929][T26803] Enabling of bearer rejected, failed to enable media [ 897.882458][T26802] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'. [ 897.904247][ T840] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 897.920430][T26807] Started in network mode [ 897.925480][T26807] Own node identity , cluster identity 4711 [ 897.931472][T26807] Failed to set node id, please configure manually [ 897.938180][T26807] Enabling of bearer rejected, failed to enable media [ 897.952274][T15947] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.961599][T15947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.969869][T15947] usb 4-1: Product: syz [ 897.974259][T15947] usb 4-1: Manufacturer: syz [ 897.978946][T15947] usb 4-1: SerialNumber: syz [ 898.072005][ T840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 898.075838][T26812] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'. [ 898.081127][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.081169][ T840] usb 1-1: Product: syz [ 898.081209][ T840] usb 1-1: Manufacturer: syz [ 898.081246][ T840] usb 1-1: SerialNumber: syz [ 898.146198][ T840] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input191 [ 898.347029][ T840] usb 1-1: USB disconnect, device number 95 [ 899.111914][T12971] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 899.351839][T12971] usb 1-1: Using ep0 maxpacket: 16 [ 899.452163][ C0] net_ratelimit: 12 callbacks suppressed [ 899.452176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 899.464123][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 899.472190][T12971] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 899.641988][T12971] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 899.651244][T12971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.659412][T12971] usb 1-1: Product: syz [ 899.663627][T12971] usb 1-1: Manufacturer: syz [ 899.668263][T12971] usb 1-1: SerialNumber: syz [ 899.716498][T12971] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input192 [ 899.772339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 899.778687][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 899.913972][ T840] usb 1-1: USB disconnect, device number 96 [ 899.932118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 899.938157][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:32:33 executing program 2: r0 = memfd_create(&(0x7f0000000080)='/dev/aut*Sofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r0, 0x0) rt_sigaction(0x29, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x8}, 0x0, 0x0}, 0x0, 0xfffffffffffffecf, &(0x7f0000000000)) clone(0x200407fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40000, 0x0) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000001280), 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x92a}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x5, r7, 0x10002, 0x9}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x3, r8}) getsockopt$inet_dccp_buf(r8, 0x21, 0xd, &(0x7f0000000280)=""/4096, &(0x7f00000000c0)=0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a2f000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f0000000040)=[@efer], 0x1) 19:32:33 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x367, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002203000326bd7000fedbdf2500000000efbac43098b4bf"], 0x14}}, 0x180) 19:32:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x5}}, 0x93608c3fef000090) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x4}]}}]}, 0x38}}, 0x0) r5 = epoll_create1(0x80000) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r10, &(0x7f0000000640)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r12, 0x40000000af01, 0x0) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r13) ioctl$VHOST_SET_VRING_ADDR(r12, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r12, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r12, 0x4008af30, &(0x7f0000d7c000)={0x0, r13}) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r14, 0x40000000af01, 0x0) r15 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r15) ioctl$VHOST_SET_VRING_ADDR(r14, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r14, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r14, 0x4008af30, &(0x7f0000d7c000)={0x0, r15}) r16 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r16, &(0x7f0000000640)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @link_local}, 0x14) r18 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r18, 0x40000000af01, 0x0) r19 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r19) ioctl$VHOST_SET_VRING_ADDR(r18, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r18, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r18, 0x4008af30, &(0x7f0000d7c000)={0x0, r19}) clone3(&(0x7f0000001940)={0x2000, &(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800), 0x33, 0x0, &(0x7f0000000840)=""/218, 0xda, &(0x7f0000000940)=""/4096}, 0x40) r21 = geteuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000140)=[0x0, r22, 0x0, 0x0]) r23 = gettid() tkill(r23, 0x12) tkill(r23, 0x1000000000016) r24 = geteuid() r25 = getegid() r26 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r26, 0x40000000af01, 0x0) r27 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r27) ioctl$VHOST_SET_VRING_ADDR(r26, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r26, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r26, 0x4008af30, &(0x7f0000d7c000)={0x0, r27}) r28 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r28, 0x40000000af01, 0x0) r29 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r29) ioctl$VHOST_SET_VRING_ADDR(r28, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r28, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r28, 0x4008af30, &(0x7f0000d7c000)={0x0, r29}) sendmsg$unix(r2, &(0x7f0000001a80)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000440)="14577bce02f646425ba38feebe74e5f45190627b5679b21c67015de5ad3bdbeaae2aeea355edbc27dc1a509866520d235a1762794d2cd4a0b55fd3aec62fbd92b82c092a46ebef34a71de401abb7dcb07eeefdca06b33479380152723aaaab5328ca0f4db2f4a924473e68324d00d2122773e1c4782f65e323341ee73c954de7b6525ac820629653e336ed9372b56ceab6290b867cf03052aa09d2ce42ba6a95b4d09abcb792c4b401c99731d2c057429940f257708ceaf49ba24e89f4a3e8d0d0a3847840b7f6e2ee19083e334d5fd0b555cc4ec618919106b99355e5f6bb1a5859427d701cd4db70c070", 0xeb}, {&(0x7f0000000540)="839b9981582634ec190f259366c7f8529c7aaa5056c3fd3047719fc9142ccaba9fb8c5ef4b06c5c35d7e8073ecefe2d0cfd0713cab903d4314762451dd6b97f8957dce2930e0d1633f89acf3a8340e09a04b03edcd30ca0874a49c3946a74ddc5a80db77fb67e298384355905c2435a506f8200c8fe3a7013ed000066965add4543e", 0x82}, {&(0x7f0000000600)="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", 0xfa}, {&(0x7f0000000700)="898287e55d591da5d15dec16a188be0368aec950192d33bfb82c743d1ef567a5e39663a70da7e4bcbc9414fbfab7b8064d24e6e98c224f0f499711aa3ec40a19d672f3bf6381e34a3c9c10dcc0b77eb35888c79a7c943750", 0x58}], 0x4, &(0x7f0000001980)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r5, r2, r6, r9, r10]}}, @rights={{0x20, 0x1, 0x1, [r12, r2, r15, r16]}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r1, r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @rights={{0x1c, 0x1, 0x1, [r26, r1, r28]}}], 0xd0, 0x40}, 0x0) 19:32:33 executing program 1: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x800, 0x400000) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0xffff2e2e, 0x4) syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x442) r9 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x3f, 0x0) r10 = dup3(r9, r0, 0x100000) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x0, 0x1a, 0x0, r0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x3, 0xdb}, {0x161, 0x20, 0x7, 0x7}]}) ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0) clone(0x42108000, 0x0, 0x0, 0x0, 0x0) 19:32:33 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 900.145202][ T31] audit: type=1326 audit(1571513553.197:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26822 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 900.201582][T26831] IPVS: ftp: loaded support on port[0] = 21 19:32:33 executing program 0: syz_usb_connect$hid(0x0, 0xfffffffffffffe5d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2cf6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x24, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x94ab, 0x0, 0x1, {0x22, 0x585}}, {{{0x9, 0x5, 0x81, 0x3, 0x271}}}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x17, 0x6}) 19:32:33 executing program 2: mlockall(0x2) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000100)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) 19:32:33 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x200000000000007) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xb779ef21efb66f11}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x41000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x200040, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x80, 0xc8, &(0x7f00000000c0)="643b31974a1b3998b0da35287aa46f71d0f5196c3face9e38edb01bd8c97e7d6f744058b10a3e4d93abbbe4b7ac621805a1786ef9bb9b2cf89398014afc4c316bebbf38f0fb930d5b21ec3ca15ec57ea6168139ab81a455a2fbbeeac183a45bdca40dcef1f527fb200ecc266a2e897e235ea2af89383c9506cec239cdaa48527d9c3247c24334da26aaf078126580a2f6bb3510cff2eabb908b70974fdd8bdaac1f68c3f623272718c5bdeef31f1158d797243b7b9fdb88bcb8361191249e5f9520a6c6528ad4f99", 0x3, 0x8, 0x18, 0x366, 0x2, 0x3, 0x81, 'syz0\x00'}) [ 900.252551][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 900.258823][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 900.334068][T26846] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.341631][T26846] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.349340][T26846] device bridge0 left promiscuous mode [ 900.402444][T15947] usb 4-1: 6:0: cannot get min/max values for control 2 (id 6) [ 900.445437][T26852] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.452707][T26852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.460413][T26852] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.467689][T26852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.475705][T26852] device bridge0 entered promiscuous mode [ 900.492303][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 900.498687][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 900.508113][T15947] usb 4-1: USB disconnect, device number 25 19:32:33 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x80000042801, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18}, 0x18) 19:32:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xa) r1 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ba02000000000000001c857b02adc2f2", 0x10}], 0x1}, 0x0) [ 900.647664][T26846] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.655369][T26846] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.663118][T26846] device bridge0 left promiscuous mode 19:32:33 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x8, 0x2142, 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000)=0x401, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 900.714185][T12778] usb 1-1: new high-speed USB device number 97 using dummy_hcd 19:32:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x26f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x46, {0x46, 0x0, "a9bb1c505c52e7294e3951b67f16f0cf682cf64db21f05de030ab2cfb7da7eab9c78fc085fea35740f865785e6620f478cfe47809f8ae8c7e5b623089a72f6b4468c5c2d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x7, 0x8400) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x401, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000140)={0x39900612, r2}, &(0x7f0000000180)={0x84, 0x20, 0x6d8a, 0x3, 0xffffffff, 0x10001}) [ 900.758793][T26852] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.766105][T26852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.773884][T26852] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.781066][T26852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.789249][T26852] device bridge0 entered promiscuous mode 19:32:33 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 900.889967][ T31] audit: type=1326 audit(1571513553.937:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26822 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 900.960536][T26873] IPVS: ftp: loaded support on port[0] = 21 [ 901.027950][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 901.202389][T12780] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 901.232319][T12778] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 901.240319][T12778] usb 1-1: can't read configurations, error -22 [ 901.402637][T12778] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 901.452104][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 901.461148][T12780] usb 4-1: Using ep0 maxpacket: 8 [ 901.582244][T12780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.593324][T12780] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.606400][T12780] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 901.615534][T12780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.625325][T12780] usb 4-1: config 0 descriptor?? [ 901.671964][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 901.832352][T12778] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 901.840464][T12778] usb 1-1: can't read configurations, error -22 [ 901.847887][T12778] usb usb1-port1: attempt power cycle [ 902.107443][T12780] smartjoyplus 0003:0925:0005.002C: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.3-1/input0 [ 902.119418][T12780] smartjoyplus 0003:0925:0005.002C: no output reports found [ 902.305824][T12780] usb 4-1: USB disconnect, device number 26 [ 902.561927][T12778] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 902.801955][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 902.972330][T12778] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 902.980386][T12778] usb 1-1: can't read configurations, error -22 [ 903.082043][T12780] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 903.131960][T12778] usb 1-1: new high-speed USB device number 100 using dummy_hcd 19:32:36 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe4, 0xd7, 0x6d, 0x40, 0x61d, 0xc020, 0xcddd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0x49, 0x96, 0xfd}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0xac, &(0x7f00000000c0)={0x0, 0x0, 0x3, "49ef87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000100)=""/183, &(0x7f0000000000)=0xb7) 19:32:36 executing program 2: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x23, 0x847, 0x70bd29, 0x0, {0x2804}, [@generic="7fdd1f14f960e1d13f28bb37195bda8addbbaa7dd8612314d14d79ba3572387f3332a7d330ac816e"]}, 0x3c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_script(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x7b) 19:32:36 executing program 1: syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x33c1fcc3, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fstatfs(r2, &(0x7f0000000180)=""/121) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c4c0d09a29b8983169914d8df86417a802b772bb638f72ccdcbb", 0xf2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000140)=0x7006) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:32:36 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 903.321929][T12780] usb 4-1: Using ep0 maxpacket: 8 [ 903.374496][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 903.405471][T26891] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 903.449066][T12780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.460324][T12780] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.473349][T12780] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 903.482545][T12780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.505554][T12780] usb 4-1: config 0 descriptor?? 19:32:36 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010001000000106d041a1040000102f60009022400010100583f000000000000010200092100000001220200090581030000000004"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x2, [0xe0, 0x1]}, &(0x7f0000000040)=0x8) [ 903.548627][T26895] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 903.632056][T12778] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 903.640005][T12778] usb 1-1: can't read configurations, error -71 [ 903.664623][T12778] usb usb1-port1: unable to enumerate USB device [ 903.672421][T12777] usb 5-1: new high-speed USB device number 25 using dummy_hcd 19:32:36 executing program 2: syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003b8c7708e3058846e8140000000109023600010000000009040000040991d0000905000300000000000805000700000000000905003b0000000000090500010000000000"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x101}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$rds(0x15, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = dup2(r2, r4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x4, 0x5f, [], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/95}, &(0x7f0000000280)=0x78) r7 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xdf7, 0x2300) ioctl$VHOST_SET_VRING_NUM(r7, 0x4008af10, &(0x7f0000000040)={0x6a104e2ffb0a5fa1, 0x1}) 19:32:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400124862426e2d6e6400"/32, @ANYRES32=r4, @ANYBLOB="0800010006000000"], 0x44}}, 0x0) 19:32:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = dup2(r1, r3) ioctl$KIOCSOUND(r5, 0x4b2f, 0x200) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @sint}]}) [ 903.812764][T12780] smartjoyplus 0003:0925:0005.002D: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.3-1/input0 [ 903.824830][T12780] smartjoyplus 0003:0925:0005.002D: no output reports found 19:32:37 executing program 3: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x1000, 0x0, &(0x7f000079b000/0x1000)=nil) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0x127a80, @empty, 0x20}, @in6={0xa, 0x4e21, 0x9, @local, 0x5}, @in6={0xa, 0x4e21, 0x0, @rand_addr="6af37a023b7789ea978bed5c6bc7aa68"}, @in6={0xa, 0x4e21, 0x1, @remote, 0x203}, @in6={0xa, 0x4e23, 0x1, @remote, 0xe72}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}], 0xffffffffffffff74) mmap$usbmon(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x8, 0x1010, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) getpid() r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000600)={0x5, &(0x7f0000000200)=""/16, &(0x7f0000000580)=[{0x1, 0xdf, 0xffff0000, &(0x7f0000000240)=""/223}, {0x5, 0x23, 0x8001, &(0x7f0000000340)=""/35}, {0x10000, 0x14, 0x9, &(0x7f0000000380)=""/20}, {0x80, 0xb5, 0x9, &(0x7f00000003c0)=""/181}, {0x715771fb, 0xe3, 0xffffffff, &(0x7f0000000480)=""/227}]}) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/215) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0xfffffff7, 0x8, 0x1c6f, 0x3, 0x0, 0x5}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xc524be0fa1284c4f, 0x0) [ 903.908609][T12780] usb 4-1: USB disconnect, device number 27 19:32:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000100)=@delsa={0x28, 0x11, 0x581, 0x4, 0x0, {@in=@loopback, 0x4d2, 0x0, 0x32}}, 0x1}}, 0x4b1a0c4dd4087584) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) [ 904.032096][T15947] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 904.032313][T12777] usb 5-1: config 0 has an invalid interface number: 139 but max is 0 [ 904.048232][T12777] usb 5-1: config 0 has no interface number 0 [ 904.054526][T12777] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 904.063717][T12777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.073124][T12778] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 904.087435][T12777] usb 5-1: config 0 descriptor?? 19:32:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@xdp, &(0x7f0000000200)=0x80) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2c408}, 0x2004805) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001440)={0x2c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@generic={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x0, 0x0, 0x3ed7}]}}, 0x0, 0x0}, 0x0) write$hidraw(r3, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) [ 904.137345][T12777] ssu100 5-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected 19:32:37 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 904.294258][T26926] cgroup: fork rejected by pids controller in /syz5 [ 904.312197][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 904.322220][T15947] usb 3-1: Using ep0 maxpacket: 8 [ 904.352456][T12778] usb 1-1: no configurations [ 904.357356][T12778] usb 1-1: can't read configurations, error -22 [ 904.452813][T15947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.463465][T15947] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 904.474022][T15947] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 904.484626][T15947] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 904.497675][T15947] usb 3-1: New USB device found, idVendor=05e3, idProduct=4688, bcdDevice=14.e8 [ 904.506817][T15947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.516344][T15947] usb 3-1: config 0 descriptor?? [ 904.522033][T12780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 904.532953][T12778] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 904.562959][T15947] hub 3-1:0.0: ignoring external hub [ 904.652159][ C0] net_ratelimit: 18 callbacks suppressed [ 904.652172][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 904.664437][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 904.781964][T12780] usb 2-1: Using ep0 maxpacket: 8 [ 904.787321][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 904.832165][T12778] usb 1-1: no configurations [ 904.837012][T12778] usb 1-1: can't read configurations, error -22 [ 904.843841][T12778] usb usb1-port1: attempt power cycle [ 904.902137][T12780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.913261][T12780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 904.926457][T12780] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 904.935713][T12780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.948499][T12780] usb 2-1: config 0 descriptor?? [ 904.982440][T12777] ssu100: probe of 5-1:0.139 failed with error -71 [ 904.997575][T12777] usb 5-1: USB disconnect, device number 25 [ 905.062529][T15947] usb 3-1: USB disconnect, device number 23 [ 905.434211][T12780] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 905.447934][T12780] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002E/input/input193 [ 905.542936][T12780] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 905.558044][T12778] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 905.638584][T12971] usb 2-1: USB disconnect, device number 2 [ 905.692278][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 905.698432][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 905.741928][T12777] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 905.822110][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 905.852359][T15947] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 905.863063][T12778] usb 1-1: no configurations [ 905.867745][T12778] usb 1-1: can't read configurations, error -22 [ 906.012485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 906.018637][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 906.026108][T12778] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 906.102082][T15947] usb 3-1: Using ep0 maxpacket: 8 [ 906.122090][T12777] usb 5-1: config 0 has an invalid interface number: 139 but max is 0 [ 906.130462][T12777] usb 5-1: config 0 has no interface number 0 [ 906.136801][T12777] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 906.146000][T12777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.156104][T12777] usb 5-1: config 0 descriptor?? [ 906.182329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 906.188532][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 906.195409][T12777] ssu100 5-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected [ 906.232154][T15947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.242732][T15947] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 906.253365][T15947] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 906.264507][T15947] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 906.271943][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 906.277687][T15947] usb 3-1: New USB device found, idVendor=05e3, idProduct=4688, bcdDevice=14.e8 [ 906.277767][T15947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.301517][T15947] usb 3-1: config 0 descriptor?? [ 906.323977][T12778] usb 1-1: no configurations [ 906.328651][T12778] usb 1-1: can't read configurations, error -22 [ 906.336702][T12778] usb usb1-port1: unable to enumerate USB device [ 906.353294][T15947] hub 3-1:0.0: ignoring external hub 19:32:39 executing program 4: syz_emit_ethernet(0x6f, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 19:32:39 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="407788079c13c41699062e8e75367feab7a0038abcd8afc0e0d42b133b317742c5abfa1a1a7e2268aaa5002998a02fdbb08b981a58f4cbcf9611d703b750ef1b812058d47208980ba23d89ae2303e37c37da0695e4737e14bc82969a7b690d3fcc0799e9a83840519c3951667f03") 19:32:39 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 906.481944][T12780] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 906.492468][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 906.498744][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 906.505823][T12777] ssu100: probe of 5-1:0.139 failed with error -71 [ 906.516236][T12777] usb 5-1: USB disconnect, device number 26 19:32:39 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 906.732878][T12780] usb 2-1: Using ep0 maxpacket: 8 [ 906.752603][T12778] usb 3-1: USB disconnect, device number 24 19:32:39 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac05730240000102030109022400010100000000000000000301020009218103000000000018b0cecb19ec3d20a89c791d4eafc396ea612d3ed9d68ea48053039b64a34f2284cc06cf690a5b950b51883f822d2e02d747faa3b27b5d935e2032ddb934a24644aaf2398449d173e55d33af441cc84b97b9896d4a0c0e0c67070a8e0ba42284a6f72cc06e1d77743655841a2cfc00c3cd6aa8a8f47cd5f8bf88"], 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) 19:32:39 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0xac, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x1000000000016) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x1, 0x1, 0x0, &(0x7f0000034000)=""/95, 0x0}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) recvmmsg(r6, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/146, 0x92}], 0x4, &(0x7f0000003440)=""/138, 0x8a}, 0x200}, {{&(0x7f0000000640)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001840)=""/204, 0xcc}, {&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000700)=""/78, 0x4e}, {&(0x7f0000001940)=""/208, 0xd0}, {&(0x7f0000001a40)=""/192, 0xc0}, {&(0x7f0000001b00)=""/244, 0xf4}], 0x6, &(0x7f0000001c80)=""/168, 0xa8}, 0x7}, {{&(0x7f0000001d40)=@un=@abs, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)=""/170, 0xaa}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/69, 0x45}, {&(0x7f0000001f80)=""/29, 0x1d}], 0x4, &(0x7f0000002000)=""/169, 0xa9}, 0x36f}, {{&(0x7f00000020c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002140)=""/52, 0x34}, {&(0x7f0000002180)=""/237, 0xed}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/116, 0x74}, 0x9}], 0x4, 0x2100, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) r9 = fcntl$dupfd(r1, 0x203, r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 19:32:39 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 906.852240][T12780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.863712][T12780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 906.876725][T12780] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 906.886086][T12780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:32:40 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 907.037001][T12780] usb 2-1: config 0 descriptor?? 19:32:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 907.221967][T12778] usb 5-1: new high-speed USB device number 27 using dummy_hcd 19:32:40 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0xfffffffffffffed3, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x6, &(0x7f0000000280)=@string={0x5, 0x3, "68dac2d6"}}]}) [ 907.317676][T15947] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 907.404389][T12780] usbhid 2-1:0.0: can't add hid device: -71 [ 907.410754][T12780] usbhid: probe of 2-1:0.0 failed with error -71 [ 907.442507][T12780] usb 2-1: USB disconnect, device number 3 19:32:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 907.492033][T12778] usb 5-1: device descriptor read/64, error 18 19:32:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="861ff4b12e95a812349fab6e3d4cd831c2294ef1fc404c0654473aaed01092f5c6a6dd6023b8b8289d286f46f085951dbfc9007cdfdca18c9f73dbd57c0026a0bd45260ff366dfee887263a032b89d386559e9459976425f35de5d9738625c82b4072c84c511bed555395d951e4dd3eec410572366e6054d0b15e1867c8fb4482d2b0ed5d2ebdc17cb10197b4953808bf2b6c30cd41e6e79c7623c9d63ce690bf4af570ec9ef5f9398d43ee318750698f515582512acc2fe8337e4fc1e36d9e4074fbc4ab77f01182fcc448863512e1c6c827d03c3c215f71cfe6b11810969623275ecf3bb3d6bc3422f480ab6cace71e3666084e555d13eb4ccadf546adb7c2af6d70d7761d68fe1b11b9ca8230b1c7a8137b5fa5a997e38abe8a43fa2aa944f86d92e9269ce1f96735dde7505cb39012c86f96c27588b9802af1eec06ca65dbb420b36ee299a047febfde568b996c20ea9ef2f39848dfd6d652c59a0dfc8045fbdc55f5ef80b1572669c660cff6e347fd4ccfc09f074c3f3217032dd5323e85961641b2e789eab0d4b465cb117b4b67c750f995e43d2c0a247ba129f255dc9c31c21b6b41d33f6ce6df05152ec4290fcd241d7a1075d93a6ca7ec29306456244ad2d66e858336414f683484038c2d5ef1e8b6cf8d495ff867044cd8fff65f3330588ab9139f894e1d49f6e9c3ee21922124a1706f66fe20507db4224d148f1da8e0c61ad7ef60019645746109fa18291467e47da2e6d57199c32129ef43949d24a50050ec8ad7b60c29890d8de9e2858b5ef2884a205ef38343d77d1f894f4e2af02c1fd4178a186ff8b7e9df253d9bc4507c419c06a117276814364b3c51de1035b1dc4e297c19d19d369a679108b2eadaec19faaff605dad156c779ef534da5d35f0b4c11811eb626860b87271e3b25add44f7cf043e1ee920c25dd8b771fca38502ff3d325b3205e7ecca3d5dc222ac61bb2df67d69d52b0429b3af6ff798295607e860ddb3cc035f9c0f67f509729bd0944ceda53e7af67cffd8f581f001fdf45d58d5eb610f9fec8d20108a57aaf7125dc900b3c0f71e71023c0649d6c87a211307658a07b744ebf3b82a693d0632b31e0d6f7d7a38fe61767cea84a8d14e9136c7db479d245e249564cd11a5cc4f4d14c723c0ca79cbd31a994241d09d44a8aa66ef65481f813ef4419f6a775a4233e716ce802d6d33f5d22b54b403462c1c7ee282bf85232b400373167a6d305d6300c65cc6227f275dce934fbd08f8c097d55e81a367953a9465c82a2f07fd49f3f8653d7b983bdd5028cd5fd02c26bd90cc6d92d484291bce897bf49ac61bebd3bf878c3ba0c05e5f88cb9341bc80e70cc0b4380cefcf7292102821e3efcc642560f75d23d0d53c353df033504f6ad7b7ff0ceb98b389c0532e178dabfd66109752a02a958da8cab28bb27dd94e74cbaec67bfdf7812de86fc4ef7f9746a80a51c31b65f830d235067ffafd8daeeb33999b7640d49170bb46a2af3fbf73c75cba8a0a5ddbcd0e682cb495c9c145ab54fbdf4ec0b8a19e183a70587c5b63e3e75caea1d5d16b50fac463c58a90440666a3e0660ccf9a92c5790572cdd64649c574f7ad4fdad922553edef8ac604cb8816371c974d726e418b735ad317816bee8e91b776470dc9bd2b1665d5d1e11b6ff0af13adede0197c75bee1b20388c722e82aa8dd8a346faaa5e333c40127cca760898a11f4ed8ba94c70501dc1e6f6a2fa9ab6ab3996a9de4df09af1e56bd4c0255da220f6e0e323d9deeaf611702a9481bafce1129b69caa82b106cffea8a1eb139690d386c89390b67dc81040fcfad587dbbdf866cdad311123735f772f6fff113a23f819c53431d115e6f0070049bcc7e5881c7f4e88ecbb1f98302fc171bbb9125ff6beeb6dfaf64cc420216b3cbdb1c5e00180afc00f1b7777a15223de05fb64142bdc88af3bee7c8e2fc89777b985b150e3860798f33cf6eff676a794dbfc3cd3f4edfe3747eba2ac0a522c9c05962b95893e51f2b8325177ee01155b66924f0bddac905edac6f305c7d47954eae721c0ba0c4b348d9a8742d0237fb98eac642c4c5ec7723aaed249b6ae43da2d77cff46741ceff17635b55bee517300204072d0e1a2ea4324aa834de25530740fabb179da7aaeb83666b4d808e3dc03a158841a39653d16b33fea5a1961a9374aa9b22cb734727f21982100accc1e307953b14cae7363f3f423944574e43949560089746c9ee02696ec249373f72d701bbd4d120cf090edb1ad2ac442e95d2080e5a3df58467b52086a9ca9d6e9537ea842cc2d783ae982fd30bf70ee8fb2d2fc816c90c5cafbdb5bbe97a1bddb3ca1054fbf22575f6c3df96eb35af6a3d034f650799aec2fc6764fb806b6d4ffd8097e5e4eb4d2bdc6a2d288acdd252e4fdb7153424dc48fc8a223d8c7e960cdbe0f8cb4e2d8f559e11ae920c5418166d452e865ab40625801cb019a77fa90366c43d9e4043cc8e25e6b74c108ccdd4a300191e7c6b9eebb6015698a70553f0dc531231349af59e3f724771828c850c006b42e5a260e5e991fd309f703fb81d60909c0c4cba71a42ddceef71a5e2f7a37f08db300efad34851b1e49f1589b159b46e96f82180655fb2c9f571e23613ae9bbf2b08ae6fad76cb3918c21a1abeccf81e59e9f2dc4be17f86c9d4fb90b9a696bbec6422429a430dfa953476b6e3d57fa3f69eb0ee3d290e08fcba2d9821b276f92f6dd177173fde37ffe2e1c6570dbf9bd61c5fd589930f75eb0c0a18dd98cba325dc5e66cfdebec85a49f2b20f630e9f81c295f0165f738799fcbbb472d839465a91b31b497ed924da58203cac0ab49416a594ea1055dc80752c6b1d1d5a06c5a6933ca821e80dd1808c4fe8de22f0992682959182e4990c84a9e6fdacc44c73b33f1efa641d3cd0cceb452b005c68f18a711eebeac5ccbac03e827edfbf78e076b01b3fb3fa3443f494cd94347aa39f494e00e09dcd9b765c77dcf7eef1cdb40a5871fbfb0407f920ba59fb29efa23d07bf12d7c4da9d8e78f32c238c57f442c80c16aa00be50a11eeae5a86cc7d7001fadb0c0c60e46f22e3979eb9b2d2ec5b470132d8d1d4fa4f5115d918f5f3282b67c7fee77b82d8fe52ab724bfb42e307179fbb82bf4e507d087b5e102210773f5f1f9c691a951bc0919bae131b245fb20fe636bcb023adf36219e799faf894e9619b40a7ab5bcc2839db316d08c4faae480408119e6dc1c488be3301cf5637513f5581f55e88ae06a2d6965172e0e71ec78d06a114b96bcd54c8347cb5ac3c9289618144445381601922cd681d4af415725b18143fc90ce55482922a53c0352c48afce4220255b914fd61aaee647c45770007ef9c0de304f0dccd0c05a422e0d753f7cbdff2388f114972babb20a3d0873dbd7170d4bd97758ceeae098561b50783a320ecee7d3012b4dddd4bdbd0b2301e98841917b03b8133b33b355f8bb5cdd5f0787d3fd74516e75761301b0e5d8b54dc2d5542f146520f4575e1a7d2882a64563799ab7bbeecdc186f8798dcf3d818449419afa3e6e07fc0aeb6b1663c99d1ec9084c91b278963c9c03c06a8a8ac7790db4a58fdacb575640a24901825b74465da14195cb7284294b0d8e8a88941725c17ee14a0d52a6cef68d815cd90447268e6b984d320a99100f61004a12e6aebb161831d6a026e21ced8d13668b5f6fc1fd1e7107d05fab065468cbc01b9e601331ecc3fe3d64554e64fddef0da2d80c918ac4351a67aed7da69c04227e62ff64e5be90cd2f56a5664730724222e41a629a8473d9f8dc607fbce6d8265e87522c3672b212271d4e0490247ff6b29f0410f3651b48e1ca36e3b922cf303960e3fc1fb8c853907ff70d28140e258160cae3ca107e2c16a397e32c1ddd5fa9a94311e56e5ea4c8a99c27485376ea8fca198e90a926091c2106a5b6bcbe5871abcad0f69bdc46e0048d6f5591f6e996f252c56088377e8d2c76c9a13be52c0999fb2fc91df09213d3ede2396e1d05c9e7b4b48fdc13fd0a9eee54e212b1e10ee8ea7ee23f8e4541952480a90a5a94337381ef63c173feffda01148af5520e15d46477d39b8b32cc591edf0723be02125af3e10890747104e03aec9fd6ddc50ea1ba866b2d65ae1ffa4321fa5c4941b408c380a82911122d487972cf657a665795403376da4d80bf4c5ff2aa0fa60d53a737206f57970da476f469b2776c444e22a0820ab3434b98ee9706a31465fe3eae9f60ba1fdb5145a51622b9db1f4b2ef53ca2fad75c58a46f7282c3c473f9af22e47620b45632a5f4f77afc0511810d91b3a2d0222529c2305c39580bb579b44f0bd258ca9950984f7a04835642dbc14b3f159bb4b74be3ad20ce28bbb80daeb0df5ea863d4ab81e19574dbb3fced434b6bfef529d7526b129af8404e2815aaac06b3862fd041bed7d1c0836975e51ffbec8fa308504dc9563042b6d3f7d4698a1bc219153056a450836aec96ad47972980b560eadb82c3aaae31792033b6c956c849f2047a98b9b80a5383faa65b2762c3d998d9ffb2380f656700e3cb06c6c7563d51e7e21ddf6b53b35b75d0c1acb4ba690c3255d571f9c5586690684671ceecb82e4e05e9c6856c3ea3a836e3603d12851f4bec0ba7ea0c5d522b1d41304957d6266eb0553504ee2e689bebd281024f1ae8d2c77d50f4f9879f7bfcc32111a1a707eb6b06f4f913155b283ceeda984b2b8a211d29d08f5ca318917cc43c8c2e09251ae1ceef7b904ceb061a62b6f2c1c4cd07079d551d08ddc8519d8bb75cd9fca71b33f47472b751b5fea69ac0757dfc4e6375b1464c4726527a530bd772c04d17db86de7a401fd17e9bff006e65b9e4df09a7442a9233bcd80a9b762f4cdd109274e7e620b1fe91432b02429eb4d4ab89814abc2dde39b45ede8fdacfa852269b0cd8ff8d3a24ef5c52f1e1db2b3e29d9dc1aae77fe4b5bd61978e21ca096c3f981a359b5ace6642f435676e82c5558e694fc24e409a7669aede9ebeb24bdbbae315d1a53215ddcc2cd9275d7707ccdb173ee70a295f7983e0fa93e79b822be7180e06bf4445dacff0bc04ae6c194ac5b4b3703f58bffb629c1277a9d7af8064b667262cfe6b1167e38ddaab9782e29e18272853d62fe54115fffca859a68e1792439ad924c9705e3d9d2ab1c6bfeaa1fcd45f624d0ab105c6b785be9cc48d5c6e7b40d00c150ca7d9455145717875c01cf26698c9b0e478d37a9aeb04dc46247b3b52825bf060e70d4f8dfc19b4ad33969c653f8bbaa3fdf6c40adeea4675bda59c20893fe9ebd1ed3c3afd6bb38f52feb5aa155bd7ddac253265b6bf7ed573f0a33bffefa6837f18461100b9d56f6add503660464de5f8562fa20cdb076485c602cb6dcef5d2b614148104eaffe5594aee39629b8885ebf8ed4593c2eaecdb59391cedbf548520e0ed056f234212ff0c6555265b99cc33c67513119d27ac3fa6035fd8961c9a35e5fa488b7b0ff18513871194ddb4403419b7a0df3104f549792d7a8892b9166f0fc3180cdd4b451b440a189a18bd43681e09cf4bcbe1306968bd339ef37e60739985a52f334f7d2f7e411849d5d64695cf95992a18521ad76e29d16e51de7fa4da8995fa1721291694f510b462e9dce600d60b03b9b98f2ef6d5d3bc5b00d603d850601226ca1b6bf500a0955da25f13771df9a21960850d0b5c9d4e2748efb76c25494c125dbcc61e64e5d5132b741428cfa915ce9ade86b95bb241803f5218b88a599d5a25bffc9a61c599416a3bb09f01c18", 0x1000, 0xfffffffffffffff8) modify_ldt$read_default(0x2, &(0x7f0000001100)=""/15, 0xf) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000010c0)={r1, 0xaf, 0x6b}, &(0x7f00000012c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6e68706f6c79313330352d617678320000000000000000000000000000100000000000000000000000000000000000a5a5a3858d8636b1a9f30a1f00"/91], &(0x7f0000001180)="847a5887aad04108cc26501f6c86f1edf789f71bb193200bfe4b1ecc0793de3a5e6f2b6057f784190731c86390484b90ad746bad49ae52c53babb707d1d410517e70de00c78502793d80c4cf759a3bab38ef9326d194ab95cdff37d442412b82b5516b6e51cd8fc9c4efee10c86112f7cdec3b42396947e16b4e73e2a139a4120acfaf022fe967db78e371f9594d731ff90a548bb5a2fce357de3381a833b87c1c3a46b7bf3463810b71c169cbb5e1", &(0x7f0000001240)=""/107) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x8, &(0x7f0000000000), 0x20a154cc) [ 907.564177][T15947] usb 1-1: Using ep0 maxpacket: 16 19:32:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:40 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) [ 907.692404][T15947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.702945][T15947] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 19:32:40 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 907.822175][T12780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 907.881967][T12778] usb 5-1: device descriptor read/64, error 18 [ 907.892429][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 907.901715][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.910368][T15947] usb 1-1: Product: syz [ 907.914704][T15947] usb 1-1: Manufacturer: syz [ 907.919422][T15947] usb 1-1: SerialNumber: syz [ 908.066553][T12780] usb 2-1: Using ep0 maxpacket: 8 [ 908.154079][T12778] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 908.192380][T12780] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 908.202348][T12780] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.220100][T15947] usb 1-1: USB disconnect, device number 105 19:32:41 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 908.402292][T12780] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 908.411631][T12780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.420027][T12780] usb 2-1: Product: syz [ 908.424332][T12780] usb 2-1: SerialNumber: syz [ 908.442310][T12778] usb 5-1: device descriptor read/64, error 18 [ 908.759438][T12780] usb 2-1: USB disconnect, device number 4 [ 908.834017][T12778] usb 5-1: device descriptor read/64, error 18 [ 908.954800][T12778] usb usb5-port1: attempt power cycle [ 909.011874][T15947] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 909.271840][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 909.401989][T15947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.412221][T15947] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 909.541882][T12780] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 909.572055][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 909.581210][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.589399][T15947] usb 1-1: Product: syz [ 909.593707][T15947] usb 1-1: Manufacturer: syz [ 909.598500][T15947] usb 1-1: SerialNumber: syz [ 909.672105][T12778] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 909.781984][T12780] usb 2-1: Using ep0 maxpacket: 8 [ 909.843902][T12777] usb 1-1: USB disconnect, device number 106 [ 909.852341][ C0] net_ratelimit: 12 callbacks suppressed [ 909.852362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 909.864191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 909.922351][T12780] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 909.932271][T12780] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 19:32:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getuid() 19:32:43 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000000)={0xfffffffb, 0x9, 0x40}) 19:32:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000f10f003b0600000000000000000000c2be6a00000ddca771d29791dd8f4002355e41a3cd9601b4acead4b887c183ae6109645c29a5d9589940abca005c2c457b7ec30a7796a52d4d7f", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001200080001007369740020000200080008000000000014000a00fe8000000000000000000000000000bb"], 0x4c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r2}) write(r1, &(0x7f0000000280)="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", 0x1000) 19:32:43 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 910.121170][T12780] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 910.130452][T12780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.138587][T12780] usb 2-1: Product: syz [ 910.142869][T12780] usb 2-1: SerialNumber: syz [ 910.172145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 910.178291][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 910.217786][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 910.226893][T27309] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 910.273261][T27309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 910.332340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 910.338663][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:32:43 executing program 4: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e21340000000001000000482fb89d5f770f719977e1dae22a4f4c2280c0a702a3a2967427a715249537044f53a011334f5bf9953a1ae88007adca882cc5a4a030c0c9967338dd549d72d4a67f4d4c564400"/181], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x4, {0x2, "de95"}}, 0x0, 0x0}) 19:32:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x89fb, &(0x7f00000000c0)={'ipddp0\x00', @ifru_data=&(0x7f0000000080)="3fb270db4d3d23ca101caa6d2e2d5697e3022ef3e8aac403b966ef27638c795c"}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") clone(0xa0980000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 910.493048][T12780] usb 2-1: USB disconnect, device number 5 [ 910.503948][T15947] usb 1-1: new high-speed USB device number 107 using dummy_hcd 19:32:43 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 910.652216][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 910.658366][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:32:43 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 910.752043][T15947] usb 1-1: Using ep0 maxpacket: 16 19:32:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x282401, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r6, 0xfffffc01}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xfff, 0x1ff, 0x3, 0x6, 0x7, 0x1, 0x5, 0x101, r7}, 0x20) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) 19:32:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) lsetxattr$security_smack_transmute(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r5, 0xfffc}, 0xffffffffffffff16) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r5, 0x0, 0x30}, &(0x7f0000000040)=0xfffffffffffffd9a) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r6}, 0x10) 19:32:43 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 910.872225][T15947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 910.892151][ C0] protocol 88fb is buggy, dev hsr_slave_0 19:32:44 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sysfs$3(0x3) dup3(r1, r0, 0x0) 19:32:44 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 911.042223][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 911.051475][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.060058][T15947] usb 1-1: Product: syz [ 911.064230][T27445] debugfs: File '27444' in directory 'proc' already present! [ 911.071825][T15947] usb 1-1: Manufacturer: syz [ 911.076516][T15947] usb 1-1: SerialNumber: syz [ 911.187832][T15947] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input194 [ 911.460633][T12778] usb 1-1: USB disconnect, device number 107 [ 912.271905][T12778] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 912.521897][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 912.642123][T12778] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 912.832046][T12778] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 912.842102][T12778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.850131][T12778] usb 1-1: Product: syz [ 912.854404][T12778] usb 1-1: Manufacturer: syz [ 912.859071][T12778] usb 1-1: SerialNumber: syz [ 912.915332][T12778] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input195 [ 913.114731][T15947] usb 1-1: USB disconnect, device number 108 19:32:46 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:46 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101480, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x783) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x0, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @dev}], 0x20) 19:32:46 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x16c) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x38b2, 0xb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) r3 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}], 0x1c) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e23, 0x1, @local, 0x72}, 0x1c) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) listen(r2, 0x200000000002) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}], 0x1c) getsockopt(r6, 0x1, 0x8, &(0x7f0000000480)=""/126, &(0x7f0000000040)=0x7e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '*'}, {}, {0x20, '/'}, {0x20, 'trustedcpusetppp1'}, {0x20, '([)lo!'}, {0x20, '(--eth1#)'}], 0xa, "545d4d56448e9826a1bc64dba2855056fc5dd2e6e9d770ce06cdbbb23f61f66c7ee58cafe01c2fb800ad6ad9894d0ada169abc2b35c36510846738d17b3fcbbc14c459051d5cd6ca8ef97d94c18da8d9e618bc2f081215d819ac5e01442026416db5376f5247"}, 0x99) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:32:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000009640)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x1b7, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="32beb707418f7595576a5dd4f7bd642258a0a9c0fffd9f753aedc458d00eb0da815c49238a0ebd57", 0x28, r3) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r4}, &(0x7f0000000280)=""/243, 0x63, &(0x7f0000000140)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$update(0x2, r1, &(0x7f0000000000)="a3ed95cefe876f52541d06b5ce4cc034fca0196e83673e842c07ebfe36b9e234cf4f1b90a1169057fa159d2195dfaae5a6a6c4bb68613e435bbf26ed2816365a7e423b35c2aec23e0c8233d41e289fc43048f0a6f66c6e494ffaef3847ada398cb467d6e4d6def41a42154183687d0b783c0cbdf86c8f5ee37f009fe20c13ebb27a28275d71291687b53a2b7a74cb7240fc2c1388b711a43a4", 0x99) 19:32:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r5], @ANYRESDEC]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000040)={r6, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x4, 0x100000000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r10) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000d7c000)={0x0, r10}) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x8}, 0x28, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x60, 0x0, 0x0, 0x131) 19:32:46 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x5) 19:32:46 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 913.466200][T27470] could not allocate digest TFM handle '¢‚uבh{S¢·§L·$ÂÁ8‹qC¤ 19:32:46 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x707}, 0x20}}, 0x0) 19:32:46 executing program 3: r0 = syz_usb_connect(0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYPTR64, @ANYPTR64, @ANYPTR64, @ANYRESOCT, @ANYRES64, @ANYPTR64]], @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 19:32:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x2b, 0x1}) r3 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000001051900001f00"/20], 0x14}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="6b9d12093d5396d3864cc6c1e91ee5d5ae66ed", 0x13}], 0x1, &(0x7f00000002c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0xfffffffb}, @iv={0x28, 0x117, 0x2, 0x14, "d3423e68208f0f7c9a0c3e4e0342d1908b679c60"}, @iv={0xc0, 0x117, 0x2, 0xaa, "9fa1bcd20eb066a7e0f80c9fe27cee9e7aed3800438937a8f9b4427c242021cc435f653a9f0e9ee274ba3f47e2261b0cdedfe99eb6e3dc126f4f7dc4eb7c4942ea24ed084edcb747e55e3c606949a4d533991c5ef2a45a08ed16143a0521551954c49e7a386bb55a4d6c12d107e24a76752c33d21dd23a47091e34feca99193548ba3243313aec2bcb8de7e63d3c3d30234585c1e8e25f0148c56c81602d5401f33d482454ea58672af2"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x98, 0x117, 0x2, 0x7f, "3b66a857e18a622d166961f48547b1df604900d960333da0e18de05dcf0d21668f9d7e08f12161d5af03c1ed3e3db0eadc8b4ab26be974d3a5448ffe1708a8a545e406bc6dd7662ace788b05e2dcd447ad83b5476de3153dae7bda71d64161a114359083971f2199ff147c2e8290c7052fa77e3aed114512d2763cfa2bea23"}], 0x210, 0x800}, {0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000180)="641eb26f6c4d75d37b97caccb9c01251752cf6fdeb1ab866c0e88d0df7448d23abfa7d1106efec2c78a41119700652a9990505b582e44f48aa58a9ae7b059fa3fd39d8fe834cd3ea80630a4210825b527120c2ec3cd219ac35774462d3bb2b84a64573f64b7d4327369cc60b63b5ac7695fb348cac79df1a702762e3075775080b52da7a8cea74b2f9358a34dbf2f7e697c7d616bfdd806cc394f4f0d6618e55acab9117fd73788155dfc89e4374dff41eb30b355be05d085c87dec4ce7e24c079804795e8aeca778779a5345b464cec1a6c8bf6a3f5e6129a44", 0xda}, {&(0x7f0000000500)="34a4fe5c945088d7c4210a7b03cc195ef81217129e9e86915b07de9e621e46aff81b3c7709ec6f7debfedebbca6740b350d9f418cc3f427ee8e78111c99a0c9e4a4c7aeed652afa88abb7538cf99f3b4d83c9ac28d776caf81dc242dbb2d49c26abb9426be262782c644b5824a664791f0bfdfeae060f40a612bbd883746e7557fd2d9165d9c0c2e27f606b58353fcaab81a67", 0x93}, {&(0x7f00000005c0)="17cc7e1660862840211450cbc1b09a1c8aa5013e7d95a993173e55c487da133524f10217a7851608c47ce4112ce46261f04c0898b2aff5cfe11ba2ef753be9e8ce4821b9fe433ec1279f8c394c767ee160374e1da62cb071372cf87196e0b45344eb552e05de30d187bebe7463567c61113e54d4465c9b1eb76ed1d4868b3df11f95f82ab0a7f90bbd3bbfcdc11a", 0x8e}, {&(0x7f0000000680)="c34246e46ae814893024ccc18106080378269043c3c187d518197aa86ca4d2211e53309505c71008f0b388faf5c84729f0092bcfabc9523113d6723caf3fbcfafd77870bccabf51b5a087d8e0b62b85211a567d4876966a24d44ca24fd9c4fcc417f35a754520400a767d148060d5b8826e78eb7ef42914b4037dbc56263229507b8aa8e049842b12866fa65c7b6509e6ff54ae9d53e580e1dddf8c1c1b311b870c4ec980b8f591947d837834ca74e9dc265b5cd2af357a29d462796baafe0334c8b49ef9a0a4924dc4c02cf47aa0b8eda16698ecd8f94798ea1017ce9", 0xdd}, {&(0x7f0000000780)="2f6008273b6865ad7ab6a50c2a2d9320efbec098db508bf519fc2680311d54ef930e7a808f6f974f321bb3eb752609e7bd214aa26b48ade20755e44541c99cf0b2429e18bd69f5e31c64069515f89b76160465cad95c02a43c95b1e48e46501fed1113a6d377e3b02925ed84da4dc54e550456266debf2a5137645f497f7d2363d1084239fefaa19f22739e3f13ddeceb528004670ef5fa24bf4e2bf1e58bd0312e15dc786893546247cd19e53d9d0d217e3ddd74a32e1051be3fb2023edded264b4aacc333c85e9feddbde3a222a71b1a9c8175cf5276ae981ab14ee0e9b37d", 0xe0}, {&(0x7f0000000880)="6a517def025bb7ae0da648c7acb262eccf18db2c5e75a80db36a6435b08f1893fe3861a7d2ce5229db8f1edf20e246088d3e432ce2928be28a6e8b1ddf298771708daa32a7970871626a1aeb9d104c0cbebe519637db6c68296a56864036dbc77752dd80dadb79ebc4fa95", 0x6b}, {&(0x7f0000000900)="e0487c498ef0b4a291c75c11760adacaeb4bc166f8137175111b3d218066e61717c2bba0df351f70f7e70859662b89909be8c00e827422c9e038c6fb9ffb4b5cce5347e526c5", 0x46}, {&(0x7f0000000980)="d0a688c35efd21e5be050e81f74f55d4eed8886682ae0c3eb10891d9ba491c97b980dd10d4cd499eefaa833f4e3c0d98710683dc40f078cc88323699ded32ec901bb7ff2eee89a4f43d5c8d3521e166a62b75b3b71da6454705bade3c93039367d1170c9dece655df1f0675a", 0x6c}, {&(0x7f0000000a00)="700dd56aba02a5a6da02693d9070c4b0c614eb8fa1d750e4cfde131d975c73bbc90e2e32bc29df44de559b64e54dcfeebf9e2c114a4d3729593ba7c908767383de3bafd475e560579f6a9507e6560f7bddf5d47f29753ce84f0883e4ae3b6a6a489df189a497f9998b842712f1ed2d6e9b914d5a766ff9f59197522a372e673a24e35c2e624ee9aadb3d5309bc647c77ad25798f9790ad8efbe711b0da0ae2273901e59e2339750286b09762102534e407b87c1ed9856fc020e48580748ae46e091c94cea3", 0xc5}, {&(0x7f0000000b00)="9fc45d9575e561b3528c09fe56127d00fdef2722e1b3d1fb67adf2f85ec0a3119b96b3c527769e12f82a8110193f83bcc21bf7e4e329eead0bd5d1eb419bf6b143353b23495fa737c09031c3488d675951a735a5c27a6fa16da9b60d36bcf2ec6644ae659346f58d6c17ef17e639ee99b049a71954e7a8869ccc4575d8f7009a15295382f566ec1b9192a5130a267579ea9ea3f6aeb92461a5b985f35f495882f0dc46c71191cdf64dd20b7da683c0810afb12d144998536e0fefc6746138045025056a3c16f0ad3a24d4db3b5a384c472", 0xd1}], 0xa, &(0x7f0000000cc0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x4c498}], 0x2, 0x4) 19:32:46 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 913.683356][T15947] usb 1-1: new high-speed USB device number 109 using dummy_hcd 19:32:46 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 913.921985][T15947] usb 1-1: Using ep0 maxpacket: 16 19:32:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="310000000000000069110000001a00009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101002, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0xffffffff}, &(0x7f0000000140)=0x8) 19:32:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28, 0x3}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x341eb26b99bfb477, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) fadvise64(r1, 0x0, 0x400, 0xf2ecb45ff8380611) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x3, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) sendto$inet(r7, &(0x7f0000000100)="394f4dc13cb15ed4f836bb1b024689dde06138d12467fa01440b687dbb7d985ce771b363a256a6b1c40eb5f5a35f196c286732b3603c3210ec91424d6c9a2031ba26a21f125b06e785a8870fb9ae246d848bf14fbcf14ac0e41519ba2ed081cb90630ad7b2187e70b13df6605cc5cd456c02118086faeb6f51ef7cbd679af7bc3418292c46a134e44ff81b8ef986a9cd2991b3da5dea722cc921860bbe66b4683409895ba5f4fb2864cea58de8fe91a1f1d9dc1402702100617cd67c53", 0xbd, 0x34000000, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000680)="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", 0x1000) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r3) 19:32:47 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:47 executing program 2: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x70, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1f9e) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f00000010c0)={&(0x7f0000001180)={0x1d8, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x50843c29}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff800000}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x198cee1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xfffffffffffffcc4, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0) [ 914.042210][T15947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 914.222283][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 914.231664][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.239850][T15947] usb 1-1: Product: syz [ 914.244414][T15947] usb 1-1: Manufacturer: syz [ 914.249097][T15947] usb 1-1: SerialNumber: syz [ 914.306473][T15947] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input196 [ 914.727155][T15947] usb 1-1: USB disconnect, device number 109 [ 915.052323][ C0] net_ratelimit: 19 callbacks suppressed [ 915.052346][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 915.064319][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 915.702322][T15947] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 915.941934][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 916.061974][T15947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 916.092296][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 916.098459][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 916.231975][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 916.241077][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.249279][T15947] usb 1-1: Product: syz [ 916.254141][T15947] usb 1-1: Manufacturer: syz [ 916.258764][T15947] usb 1-1: SerialNumber: syz [ 916.316214][T15947] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input197 19:32:49 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac02730207000102030109022400010100000009210001000122000009058103000000000000000000000000000036cdef91250f5503c546a066c1f4"], 0x0) 19:32:49 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000440)={0x7fff, "7141296068dca902d8c648fa9c4c35ab7886dc8c8e8b84ee46800297efe7dff6", 0x0, 0x1}) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xe2bb, 0x111001) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) r8 = openat$cgroup_ro(r7, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x0, 0x0) r9 = accept4(r4, &(0x7f00000004c0)=@generic, &(0x7f0000000540)=0x80, 0x80800) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000580)={0x4}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r12) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000d7c000)={0x0, r12}) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000240)='syzkaller\x00', 0x10000, 0xe9, &(0x7f0000000340)=""/233, 0x41100, 0x4, [], r10, 0x16, r12, 0x8, &(0x7f00000017c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x0, 0x3, 0x80, 0x3f}, 0x10}, 0x70) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x3f, @ipv4={[], [], @rand_addr=0x614}, 0x7}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x5, @local, 0x5}, @in6={0xa, 0x4e22, 0x59, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}], 0x74) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) sendmsg$nl_route(r13, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0x334, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00070f7c4900000000001807000000", @ANYRES32=r14, @ANYBLOB="000003000a000200aaaaafaaaaaa00009c008000000000000007d09d01fdb78eeb099efa6a7db5b5d5b3a557afeb0f41f4e6064c0e0ac47d8aa03ed6814a8c2987aa51a64a90b0d52c671403ca01424838ca1b"], 0x42e}}, 0x0) 19:32:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10a) faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x126, 0x1a00) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) syz_emit_ethernet(0xbd, &(0x7f00000000c0)={@local, @random="192bce5e2dfb", [], {@ipx={0x8137, {0xffff, 0xaf, 0x81, 0x14, {@random=0x6, @broadcast, 0x4}, {@broadcast, @broadcast, 0x1b}, "30c94bb43ebfe4292b4b1c9479d5da609a283e1fcf7438f80784478ea54ddb996f560b3534e3e2cf54c64051e85648fbac41305d0d26d347b111046d1f8decd4e801c3a5738f9722497575b3eacd5b83a7b8129e3b00f5385bba853055addb0cdc5288e50384777de68c82ec4289299aa091d0d37072189c1a875b8e66e8d8d8d615189a6c0d2a282c4455dc865235a09f"}}}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0) 19:32:49 executing program 3: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000340)={0x1, 0x70, 0x3, 0x9, 0x80, 0x8, 0x0, 0x9, 0x8000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2d, 0x7ff}, 0x22449, 0x8, 0x0, 0x6, 0x3ff, 0x5, 0x3}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x71, 0x2, {{0x110, 0x4, 0x4}, 0x3ff0}}, 0x18) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x4, 0xc4, [], 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/196}, &(0x7f0000000000)=0x78) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x1}) 19:32:49 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3000008e80401a11bcf020000010902120001201000000904000000ff96fb00"], 0x0) r0 = memfd_create(&(0x7f0000000100)='system.posix_acl_accesswlan0,@[\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd3, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$TIOCCONS(r7, 0x541d) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x1, 0x9, 0x1, 0x1, 0x6, 0x837, 0x1ff, 0xffffffff, 0x1000, 0x9, 0x1, 0x8001, 0x7fffffff, 0x1000000, 0x8, 0x10}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 916.412410][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 916.418523][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 916.489536][T15947] usb 1-1: USB disconnect, device number 110 [ 916.572481][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 916.579017][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:32:49 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x8, 0x3, 0x6b97f07d, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x47c1, 0x9}, &(0x7f0000000280)={0x8, 0xee, 0x0, 0x3, 0x6519, 0x7, 0x1, 0x6}, &(0x7f00000002c0)={0xcc29, 0x0, 0x9, 0x800, 0x81, 0x8, 0xfff, 0x7fff}, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000340)={0x3ff}, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x15, 0xfa00, @id_afonly={&(0x7f0000000100)=0xffffffff, r3}}, 0xfffffffffffffd24) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 19:32:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffa, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffff36, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000001ac0)="8c5e9e81e0f7ab32", 0x1192aca8268c9077, 0x4, 0x0, 0xfe5f) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000240)=0x1f, 0x4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4c003010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x0, 0x0, 0xfffffffffffffe3d) 19:32:49 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(0x0, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 916.764261][T12778] usb 5-1: new high-speed USB device number 30 using dummy_hcd 19:32:50 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x800, @empty, 0x2}, @in6={0xa, 0x4e22, 0x1, @empty, 0x6}, @in6={0xa, 0x4e21, 0x80, @rand_addr="611a35da977e2d5db653fe6fbb981715", 0x6407}, @in6={0xa, 0x4e21, 0x3f, @mcast2, 0x400}], 0x70) r3 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e80000ff000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f198808b355f7b815bdb2281145dd68875994499bd09b0f55e7ca54b07bd9189de8daeb173aca3ffffbca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d9129"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000180)={@dev}, &(0x7f0000000280)=0x14) socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000060008000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r5, &(0x7f0000005c00), 0x40000000000037b, 0xc000) [ 916.892429][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 916.898790][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:32:50 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(0x0, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 916.999649][T15947] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 917.031960][T12778] usb 5-1: Using ep0 maxpacket: 8 [ 917.233506][T12778] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=cf.1b [ 917.242776][T12778] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 917.250869][T12778] usb 5-1: Manufacturer: syz [ 917.331940][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 917.463818][T15947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.474098][T15947] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 917.554147][T12778] r8152 5-1:32.0: Unknown version 0x0000 [ 917.577735][T12778] usb 5-1: USB disconnect, device number 30 [ 917.652326][T15947] usb 1-1: New USB device found, idVendor=02ac, idProduct=0273, bcdDevice= 0.07 [ 917.661651][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.669825][T15947] usb 1-1: Product: syz [ 917.674153][T15947] usb 1-1: Manufacturer: syz [ 917.678837][T15947] usb 1-1: SerialNumber: syz [ 917.936511][T12778] usb 1-1: USB disconnect, device number 111 [ 918.271822][T15947] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 918.541857][T15947] usb 5-1: device descriptor read/64, error 18 [ 918.702120][T12971] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 918.931844][T15947] usb 5-1: device descriptor read/64, error 18 [ 918.942012][T12971] usb 1-1: Using ep0 maxpacket: 16 [ 919.062188][T12971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.072546][T12971] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 919.201942][T15947] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 919.232090][T12971] usb 1-1: New USB device found, idVendor=02ac, idProduct=0273, bcdDevice= 0.07 [ 919.241314][T12971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.249707][T12971] usb 1-1: Product: syz [ 919.254021][T12971] usb 1-1: Manufacturer: syz [ 919.258691][T12971] usb 1-1: SerialNumber: syz [ 919.491895][T15947] usb 5-1: device descriptor read/64, error 18 [ 919.506974][T12778] usb 1-1: USB disconnect, device number 112 19:32:52 executing program 0: 19:32:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) dup2(r6, r5) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000000)={0x2cc9028b, {{0xa, 0x4e21, 0x40, @mcast2, 0xfffffffe}}}, 0x88) 19:32:52 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(0x0, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:52 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x29}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x10100) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = gettid() tkill(r3, 0x12) tkill(r3, 0x1000000000016) r4 = syz_open_procfs(r3, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x6c, 0x2, 0xd401, 0x0, 0x0, 0x0, 0x3fc]}, 0x3b, r1}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r5, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') ioctl$int_out(r7, 0x5460, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x1400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r8 = accept(r5, 0x0, &(0x7f0000000080)=0x10058) bind$bt_rfcomm(r0, &(0x7f0000000340)={0x1f, {0x8d95, 0x80000000, 0x84, 0x9, 0x0, 0x175a}, 0x1}, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000200)={r9}, &(0x7f0000000240)=0x8) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r6, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 19:32:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400120008000100677265001800028004ff1200080013000000000008000c628e50744a11244155a10a0000000000"], 0x44}}, 0x0) 19:32:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x5) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000000500)=""/237, 0xed}], 0x6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000080)=""/179) [ 919.655394][T27614] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:32:52 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/192) 19:32:52 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, {0x0, 0x0, 0x0, 0x2}}]}, 0x24}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "486b549a3f0a72aa", "8cad41285d2311a37f5567de6b5d992d", "5bfe6afa", "ab27366221a0b295"}, 0x28) 19:32:53 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0, 0x52f4d44320dfd03f}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syncfs(r4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r5, 0x800}, &(0x7f0000000180)=0x8) syz_usb_connect$uac1(0x2, 0x93, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, "92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x304, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x28, &(0x7f0000000040)}, 0x10) 19:32:53 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x829ef336f93986f3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x3a, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xdc136881569c57e}, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x81, 0x3, 0x418, 0x1, 0x1, 0x2e, 0x10}}) 19:32:53 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 920.162770][T12778] usb 1-1: new high-speed USB device number 113 using dummy_hcd 19:32:53 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 920.252471][ C0] net_ratelimit: 12 callbacks suppressed [ 920.252540][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 920.264737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 920.313841][T12971] usb 4-1: new full-speed USB device number 28 using dummy_hcd 19:32:53 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 920.404108][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 920.525005][T12778] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 920.572428][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 920.578695][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 920.702090][T12971] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 920.705205][T12778] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 920.711428][T12971] usb 4-1: config 1 has no interface number 1 [ 920.711528][T12971] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 920.720620][T12778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.720692][T12778] usb 1-1: Product: syz [ 920.726857][T12971] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 920.739646][T12778] usb 1-1: Manufacturer: syz [ 920.739718][T12778] usb 1-1: SerialNumber: syz [ 920.740193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 920.740597][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 920.817946][T12778] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input198 [ 920.992403][T12971] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.001641][T12971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.009903][T12971] usb 4-1: Product: syz [ 921.014213][T12971] usb 4-1: Manufacturer: syz [ 921.018882][T12971] usb 4-1: SerialNumber: syz [ 921.030097][T15947] usb 1-1: USB disconnect, device number 113 [ 921.052265][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.058458][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.292572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 921.298849][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 921.492367][T12971] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 921.499938][T12971] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 921.532091][T12971] usb 4-1: USB disconnect, device number 28 [ 921.821868][T15947] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 922.061875][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 922.181964][T15947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 922.221890][T12971] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 922.352200][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 922.361416][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.369619][T15947] usb 1-1: Product: syz [ 922.373931][T15947] usb 1-1: Manufacturer: syz [ 922.378551][T15947] usb 1-1: SerialNumber: syz [ 922.425401][T15947] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input199 [ 922.592089][T12971] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 922.601239][T12971] usb 4-1: config 1 has no interface number 1 [ 922.607587][T12971] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 922.620553][T12971] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 922.634684][T15947] usb 1-1: USB disconnect, device number 114 19:32:55 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @empty, @empty}}}}}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x60200, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000001080)={0x1000, &(0x7f0000000080)=""/4096}) 19:32:55 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:55 executing program 4: r0 = socket$inet6(0x10, 0x100000002, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd508fe01b2a4a280930a06000000a8430891000000390008000800020000dc13382d0010009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x10000) [ 922.792128][T12971] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 922.801312][T12971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.809657][T12971] usb 4-1: Product: syz [ 922.813946][T12971] usb 4-1: Manufacturer: syz [ 922.818626][T12971] usb 4-1: SerialNumber: syz 19:32:56 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r3], 0x1c}, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000140)=[0x0, r4, 0x0, 0x0]) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0xfffffffffffffffe, 0x2, {0x0, 0x0, 0x80000, 0x0, 0x8000, 0x3, {0x3, 0x8, 0x0, 0x7, 0x0, 0x2, 0x128, 0x40, 0x1ff, 0x400, 0x8, r3, r4, 0x7f, 0x2}}}, 0x90) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000d7c000)={0x0, r9}) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000040)=0x313) ioprio_set$uid(0x5, r10, 0x8001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="f30f09b9dd090000b810000000ba008000000f300f00db0f001f1a5b000f01d8c4e209bbbe04000000b90f0400000f32d0a09b000bb8260f01d1", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffe73) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000", @ANYBLOB="00b62d0000000000140012000c0001006572737061594c62"], 0x2}}, 0x0) 19:32:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "923ab0a7209b3e67b425cae2185f8fb413c34eefdfba6fc47f2e845c45b164a1b29bc0ec356c8516152c37ff105c55d44a55d63c3c6b2bb53fd75d77cbbc330498f691478f6f12d7d9e1f9bd32b23d8208538502dcf146b5adcfb0419e627d0f77db073bb0b23aa9c8ee87e0c6eee77768c4f561647c8c4ef4835ca3f2b514c23757fa0c0a750c413eb8fc65e7283b17fceb9967f03ce3e894e161dbf8779de91e2783848e264440585e76982c5a294e9a790e099b5e1264bb4d5cfe2ddff0aceddb4a7c9e15f1f36aa2d466a8096026d80be35bfddd0bcf77900a07b37d00d5d4557ff639e907ef21a53c4bf1e28c53e3fe893b75647e8661cf0289b2c8774e7f14a8cc8525bea5d77b0f9c3b16ddcba77ebb1680524bbede2161fc83550e0653fb8f4915c63e61ab64d5c101dd9bfd83a5ab1bb6b5eefe6671f239ed41a96c15722dd7435024b34d1219b30ad79e5ed268e4a67c41b9927e62a4603afb9412351d1e515a03afe89b9dea3a010ab5cd1a3ab2290a85b4b01aa53b8a91bffe2cdbe973d8477998a75bf7f23d9c1e1aba08b88751d2f3c30efc1b02d1005c08308fe9ceb636327958c22e83c8a86504a1ca22293adc0ce926b714bd41f8557166fbec3bf787a6170d9195bc29dd0b3a11bd50b4bb7f1a030ffb2e421659edfd989a5b12f429b0574afb6b5ed16114ff3958c9dfb2db965e9aa6e59c07c20bca53627f5967c4d8506d3581f58f038db4853d7d35578bd27e12bacabc596c82c288b8bbe3479f304865eff7118b53358c28f089fd2dcac74b36d75ab09d9dbd83e273fe53d5968aad60aec3a4e025360f3f133498120bd91cae2389ac54a509903099820f0541bba86db84945bdc0cab0a8d5840dfe0bcac82e1720fa30ec65ac6869db26e8968f9bc9dd51a54ce6e6934881b225b044732fd87fb96fbdfad022b2b19a0017c0e5ca9ceff6d935833dde118315ebaba77de826277370212b25747b7cd25dd9ed17b5b1153ff5832fdfccd92bf14e9f7313f40b90ee38aedef1cd7269b75cbf308b5c42c8f7942a3f9405f98434c303310c99ec2c5d475648fffd1d60dc4e6dd91fd6b7f91d7dc861eb5965cd7188f4c5d63c0cba927f226ff339a16088fad36d7cc5e8b58e316562cda99a939b17e025aaffbff6fafec408530a607d70803616d2b66cdc13a5a17f291067e1fc3ac83915100f2fb04c57a89c858e53bc011e38ca7ff42a3225e86b83d537af55998f588d79868f1a46c813ced003a464cd23c5492b7393ede2fb0e87622f0d15f6dd9e848e023bcf8b928d9053a8bbaf89680168277cea996c7994992ff51a96407c587a7749ff94571431184f142ea26646ae566584c312ae712ce0f38fb62ffc685fa2c7d05750c987422d0ca7c39ec995190bbb5002832cd5cdf8acd62af0092eb3f499595ecac9948648c495e253ebfa36aa655c1aaf25efbc4ca0c84089172a79c2468eccb75e751ed25255510868109bdce4cda177bb5d2eaa05f6f2154379ee708cc017f7a58a525f6644f6a59040917df5fb2b54cc60d9078d632a5c225bcd756d5d52781a67ac497d73e73a64fea18a824690244050e45d22c20c89138cf0b7dd39bee68b926b2d0b8df3929c38c0a0f3697ea0a59afe9ff6c18da19298ea108002cd438a80b8926ad62e60ea8d674be53dc5dfafb0c99cd066dc53c195421d164a0697ed128324cac878299b823800e72f92445217dee1c024983ca0721077857da5be429ad7d9495c6adc1892f7fa6ba521fc9cb06dd6758d5ae84e0d0949e33a09724026a6f0ab5e702b07ca137d91894f37004dd1655948abcefe92771ed18ccf8ad1511531c81d9b9d6305412f735bcdc13a8d55eaac7d469fa8db248fe775bbda269a4efc1c6eae4ed474054bb354b8ab21e51f5859ea79baa9c24d2a69215873ab155fd625ed4078cafb7ba32c667bcf417b5306ae4ae4702f29d5dd963dd91047b0441dff824a065c8008b6a092c8ef4bee5f14c89e290a73c2e3bf60e9637d65adee080074310dd8a96aa17d5c1673e50aa9c9f94bd3682923a2785a14ee1236584d4e2a2422dd71fa5fc111407d2b805995585c791e12b9f310b1877649d90d65e6aee46489665f65bc3ceb186b88ba50213a08567161bab61786fda674ad8f2941c17e303de350507530c5ced476ecd5c0d5e6c6f4b1a860448bc7901da74b3165217988eb1215ade8dda3959e7dfcfe3108c17e4c9705c2a709ffcbab97497dbb62926f1c0f35c1e7dfdfeaf8e7b0f393fbd2475eb77d87689fa4111f823fa82de4ee3c3e64b4df6cb28683d17e636862009f657758a344bec131f91dd9455f4ea65b00524d80ca06b9ab38b5956d765a4914f1978e7f4bf19477b78a6d799e4ec658bf44b94b053fd8ba8c3e2fdd3eb57b6c2ad15469a51ed7fecfd431db9154263de1863767cbad25bfeb392e621bb66f1136ad366a62b13cfad02608beeb87a0e64f0cba4a7994031b0617ee730b04dd6f71061cfe4a763c3fb95cf50873e28b1137b75bef2102fcc3c386245d59c511275b84fe79926d8b7bcb65c1886ff98a9e5ff08f34e0602cba5ad570be2912264512c48b8425256d5b4853e117d3d77b642c5b652afdbd12ae21c74748b65330efec576b1c3e0bcb1ae95d380e56e43f59427266819105f928f4481fcf110d862c990a3cf62cfe3d3f560ea2cf78992a1d3a03da5de573311dffbb58679b4afb24a19ffa28a45aee2e6713db30bc7276b8c2406c028597a4e93063ac5299f6a7b0d17aed7c982fa8fa1300e9443d15db68ada39b50e4494b3e7a9f16ad2e9703712251b6613ca8446398fb81dea739b5f25b3d0ab6721952cfc3bf72f71e004f3e1059807c2e39f5ec7e837c9c61140551a17fdfc569ebf398552c4100b23ddcd6e4a0e17f92995c11b1d5bd7caba7f0354a39f5f9d8547fccf8f7e51b1dc85504bc71a9834492e8a20433e3d5a4d8f78bcf7924f141621086c6d00d31390ee0d1d68d151b4183bab923ce56718977d2612cd0a8bb926fd199ee5f490dce2cca054df31ac6c61ccc8a469b94503532870f18ac1feade09a1d2ded40aa101815ba96ad1099d04ee73fdc89704d622fddc6a41b1d5bc0f843ad9264fc3cec3b744bd1779bdf46a243bb608b2a355807de5e3ee362fcde84bb62ccb916352a63db440e00646df0ea57b445b53e576fbd5f303c36fd18068f5547c182e69f738f04da68aeabd55a80791095930391045e4580f82c9a585bb07f4822aae61ba52dc812f22f5e885e440eac36d8707d354d97abd5d1c07ac2cb859474be038d8321ab927e280a358ab154f4ff300b6d0a2bdafa41177bb231847adeebaf3a6efda81486992eb786e687da1c9e2bbd98014c41f1889327d371d3d477d3f472caf369a9f2ee52b493b291eea9cfeb0e7b80759cb29f5dd28fb27f2d72660b65abd635b789ad4a431450f4c64ea26bfecde797ce68705cffb065a179d94c410dfbb2a53edc8c2accd13c8da9e23365e5e1ab3031086307dfb4ffa644c30ff2782b46207aa7fee2b2c5bcb268b0d3a6e61dcecd15bef44bb632c5340c37bffb4bb81c0f6f994a3be9876db5624bc90f45e2569afa80fe7f6ec42ed4df1c16d0683d207ed952a8970463eb56401078214f39ed02d452fd3be45ccce2f7e64638434366b574a9d0e137d4355711bf143ccbfdf11e80c1564ec371671fde4120e65f7d4d0f2fcbffe91f4ea5c0d342c71368f0803dfd3e9e871b1e1595c16f7f623bb8cbdf09b04b86ab10fd17a4ef852fcc4d75727d0e968db25228fa8eae294e4cb05815c5d889a9f616c8d0f95db59438bfe965ae64713f89572a71fd22abb33f125ed5a4ebc151beb3d8a14d1c0631b816932fcb41a996b685f8399748d837f6c2d467d085e7a4a44c16bc6ee92cb9378b7e6ea16c22b0d150b656cf969e2450f625e477bc5c04d58681ac73d8b12048ade7f9d613a45787ba8fa15304a0c53c222ddae6cbf88a5eb57662903f974105b044fecd08460b83d2f896c90cc99e6669adc856e25351a9d53724a74dab849fa2f0b5e5a0e0ce094e639aaed341fadc4f7d05e8f96ff2142e01e02063d4247763db929017f89a417b0f1518f5fdbd2f1e1e4850ff5dfd0f79521431f847efef60f6538aef820bf16dec72ac199d98bd5f7f2104eb26a0b33d037def8dee34bb56dc330016eff56c279b43bfd4fce00336680dfc378338b66fef049e9b4e694b305ea0c72d7ef9252087ad19210088fcbb804d22b9a46e2a6917e6d36733d6a38738612a7fe3ca3456bb343ed4f492651db125f84ea665c532458ca571f29cf2489de44ce8095bc53b37fb85b019cf2bfb4326c6523e7138c4382993966a96a6d7625ee349d3d83f4e5bbb3590321f7c4bd0bf96bbfaf8d1408551479cb3bfac3526c3774b2e09846f19335c5748e73cabb2605f3fdcda5576f3c5e667d287dd32ea7796e768deb642f2d0fc47343c61a7d2a4f548bf0cfe2cc14f3581174cf71c10e2ab4e2b3249dc6c4a0a88308b3346167b0d5bc0c9e036c4fe31c0566986be6dffe26b39fa222a5cd1bf00644da20865fc0ef0000f4411f86e9676f855e08374553c9aceae46cc05a0640e0d8a22171f685112a42a1a12382c9cae50dcc6622dfd4bc93756b04363a694fca570970bad0e49a429d9d0fd37b481f4793d525e835f9a698e2fccffb442af412531bf411e32d01e39b80f9dec85078be1d1e5bf2b1e787fe8e4f730fddf726bce61597b4f32d4cafe7824560acaa46259799aeaba821bb97cdc59879754f7e5c104a5c219ae7fd35ff390160b8d0c1d77818524a5887403875484d52856da872d1eba0b0dc1439f61b7942ca58310839849eca696afbd3b5432dfe6b38a5bff2f8da694e477d4feafd51781010397a60cc03e340bfc1bee29da0843d163d183bb22a903b456e9525d5e28240a8d458334eba18d9b0613f79a417a43271154843427740edbc5549a87de2798e04798abfdeceb286a9a47e32ea597f694e4462a370e2c358332e87269fa83b3b15324732160c7634ead2529a986016c40e7997ee48c63ba5c7f972d92349fabf442edfdba70720df1e5504f075ee8874af5a61804ee8d65fc4dc81cde135e1f17c136a64271f891ec69b2c88522deef8a39af98f4be874c10a2c0c21f420eaf043cc6fa82b35d33b65686892f153ec811914d25eca37cd84b6beab274c028cd0ebbed352dc3f61c59e11b1767a0f5efe7db2342930485cd563d6ba834258365480b270fbecbb2dd686bb2f308343420c46d6ad09d497be0945b3be8b87f410c19b7cbb41b9855937b4b3e523113911af506c489cfa6938422804ec304886e3b925ca27bc12b3394f177138fdcd1aa83e2facfd9373133019367e618ad0eec5cf4c6a4ac93cdbc8a3575ae227c8c14e085706398b0d3692d6f4dad3538ed9809cad76e81d4c50fd81f990a55cbe900a54c5850eb77dc87817642f80469117120b3d7a406e4db50bb6348070f638e66c1c5accdec16d97d95a0261ddc92562006941c2e18c6470d1aabab1c5ef1ec31b2f1b38dfc2c32046b668674c0412eb31b5d291d3ef7c252a7e6b3ebc3a77c01169c7127bba6874f455f2ebc099f8c0700ba8c3d7ccc3def304f71e6d8749dbd1aca3fe0f804549dcc7be83f02f6a84a4fbdd07ae262226e1169186eb34d4d447962e44ef8d2c5936354bedaa019c54046ae158a5cc3bc5d2a23dfcba305d46f21c5ee5bc1f977c0280cc675b354e452bb977a90cc9975654f0daf561fe2b"}, 0x1004) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000001080)) r1 = syz_open_dev$vcsn(&(0x7f00000010c0)='/dev/vcs#\x00', 0x1ff, 0x400) r2 = getegid() lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() stat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0, 0x0}, &(0x7f00000012c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() setgroups(0x7, &(0x7f0000001380)=[r2, r3, r4, r5, r6, r7, r8]) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001480)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000001580)=0xe8) getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)=0x0) stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() lsetxattr$system_posix_acl(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='system.posix_acl_access\x00', &(0x7f0000001740)={{}, {0x1, 0x6}, [{0x2, 0x4, r9}], {0x4, 0x4}, [{0x8, 0x0, r10}, {0x8, 0x7, r2}, {0x8, 0x2edf00afab5c3478, r11}, {0x8, 0x1, r5}, {0x8, 0x2, r12}], {}, {0x20, 0x4}}, 0x54, 0x5) r13 = syz_open_dev$cec(&(0x7f00000017c0)='/dev/cec#\x00', 0x3, 0x2) getpeername$packet(r13, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001840)=0x14) ioctl$RTC_PLL_SET(r13, 0x40207012, &(0x7f0000001880)={0x0, 0x6, 0x3ff, 0x5, 0x8, 0x9713}) syz_open_dev$radio(&(0x7f00000018c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000001900)) r15 = accept(0xffffffffffffffff, &(0x7f0000001940)=@can, &(0x7f00000019c0)=0x80) setsockopt$inet6_int(r15, 0x29, 0xd0, &(0x7f0000001a00)=0x8, 0x4) r16 = getpgid(0x0) sched_setaffinity(r16, 0x8, &(0x7f0000001a40)=0x400) r17 = syz_open_dev$vcsn(&(0x7f0000001a80)='/dev/vcs#\x00', 0x20, 0x36d0cc4291c07959) ioctl$KVM_REGISTER_COALESCED_MMIO(r17, 0x4010ae67, &(0x7f0000001ac0)={0xd000}) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000001b00)) r18 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'team0\x00', r14}) recvfrom$packet(r18, &(0x7f0000001c40)=""/175, 0xaf, 0x100, &(0x7f0000001d40)={0x11, 0x8, r19, 0x1, 0x2, 0x6, @random="d0bcff40c0e4"}, 0x14) 19:32:56 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x67, 0xb, 0xdf, 0x20, 0x1c04, 0x15, 0x233c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x62, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) 19:32:56 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0492aed08d592a8b378348a53a32ccabaa976d06d76e634a514ffd64153c70795de583bed7e320dbeb947074160344cc4e9ce5581326d7dfbae54add45b4532e5c77b334d8f9e44a7642833b2703971ab2fe91a2f04a9d83832ec06624b6f685d58e921ff7b3212291a0"], 0x3, 0x3) 19:32:56 executing program 2: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x1, 0x8) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3f, 0xf0300) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000002c0)=""/172, &(0x7f0000000380)=0xac) r2 = gettid() tkill(r2, 0x12) r3 = gettid() tkill(r3, 0x12) tkill(r3, 0x1000000000016) tkill(r3, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:devicekit_var_run_t:s0\x00', 0x29, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x6, 0x0, 0x1ff, 0x5, '\x00', 0x5a}, 0x1, 0x10000000, 0x0, r2, 0x3, 0x764, 'syz1\x00', &(0x7f0000000040)=[')\x00', 'vmnet1', '.security\\@}*\'.\x00'], 0x18, [], [0x40, 0x0, 0x1000, 0x2]}) [ 923.062789][T12971] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 923.070437][T12971] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes 19:32:56 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 923.143577][T12971] usb 4-1: USB disconnect, device number 29 19:32:56 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000040)=""/153, &(0x7f0000000100)=0x99) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x49, 0xf7, 0xd7, 0x40, 0xeef, 0x1, 0x26f4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x3, 0xab, 0x28}}]}}]}}, 0x0) 19:32:56 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe9}}}}}]}}]}}, 0x0) 19:32:56 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 923.412682][T12778] usb 3-1: new high-speed USB device number 25 using dummy_hcd 19:32:56 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:56 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 923.582050][T12971] usb 4-1: new high-speed USB device number 30 using dummy_hcd 19:32:56 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:32:56 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000504ed0080648c6394f20531d200060010800000009700d0bd00000200"/46, 0x2e}], 0x1}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd4, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb30}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xdb9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5dc}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x615}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40080}, 0x1) [ 923.652855][T12778] usb 3-1: Using ep0 maxpacket: 32 [ 923.672135][T12780] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 923.692098][T15947] usb 1-1: new high-speed USB device number 115 using dummy_hcd 19:32:56 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 923.772608][T12778] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 923.780943][T12778] usb 3-1: config 0 has no interface number 0 [ 923.787483][T12778] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 923.796720][T12778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.818437][T12778] usb 3-1: config 0 descriptor?? [ 923.841876][T12971] usb 4-1: Using ep0 maxpacket: 32 [ 923.942091][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 923.962107][T12971] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 923.970447][T12971] usb 4-1: config 0 has no interface number 0 [ 923.976798][T12971] usb 4-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=23.3c [ 923.986055][T12971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.995898][T12971] usb 4-1: config 0 descriptor?? [ 924.042216][T12780] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 924.050497][T12780] usb 5-1: config 0 has no interface number 0 [ 924.056863][T12780] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=26.f4 [ 924.066053][T12780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.076722][T12780] usb 5-1: config 0 descriptor?? [ 924.082170][T15947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 924.127686][T12780] usbhid 5-1:0.119: couldn't find an input interrupt endpoint [ 924.245443][T12780] usb 4-1: USB disconnect, device number 30 [ 924.272174][T15947] usb 1-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 924.281453][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.289666][T15947] usb 1-1: Product: syz [ 924.293955][T15947] usb 1-1: Manufacturer: syz [ 924.298608][T15947] usb 1-1: SerialNumber: syz [ 924.345217][T15947] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 924.365683][T15947] usb 5-1: USB disconnect, device number 33 [ 924.522124][T12778] CoreChips 3-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 924.545378][T12971] usb 1-1: USB disconnect, device number 115 [ 925.022049][T15947] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 925.171876][T12780] usb 5-1: new high-speed USB device number 34 using dummy_hcd 19:32:58 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000082900000004040100e691400000000000"], 0x18}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x2, [0xde50, 0x9]}, &(0x7f0000000180)=0x8) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[{0x30, 0x10f, 0x0, "f21c13c4ddfaffffff302be0b12ac4c0b33a65765018e87f8130ab995c"}], 0x30}}], 0x1, 0x0) 19:32:58 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 925.263101][T15947] usb 4-1: Using ep0 maxpacket: 32 [ 925.312018][ T840] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 925.322428][T15947] usb 4-1: device descriptor read/all, error -71 [ 925.452432][ C0] net_ratelimit: 18 callbacks suppressed [ 925.452451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 925.464408][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 925.542051][T12780] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 925.550412][T12780] usb 5-1: config 0 has no interface number 0 [ 925.556686][T12780] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=26.f4 [ 925.565882][T12780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.574752][ T840] usb 1-1: Using ep0 maxpacket: 16 [ 925.580575][T12780] usb 5-1: config 0 descriptor?? [ 925.627223][T12780] usbhid 5-1:0.119: couldn't find an input interrupt endpoint [ 925.692269][ T840] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 925.853947][T12971] usb 5-1: USB disconnect, device number 34 [ 925.872178][ T840] usb 1-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 925.881363][ T840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.889896][ T840] usb 1-1: Product: syz [ 925.894219][ T840] usb 1-1: Manufacturer: syz [ 925.898879][ T840] usb 1-1: SerialNumber: syz [ 925.945629][ T840] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 926.143898][ T840] usb 1-1: USB disconnect, device number 116 [ 926.502166][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 926.508223][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 926.812109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 926.818383][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 926.972144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 926.978117][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:33:00 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000011c0)='/dev/vcs#\x00', 0x7, 0x420000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = gettid() tkill(r4, 0x12) tkill(r4, 0x1000000000016) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000003480)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/79, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1d) process_vm_writev(r4, &(0x7f0000002300)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/221, 0xdd}], 0x8, &(0x7f0000003440)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/188, 0xbc}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'caif0\x00', 0x1}) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x200, 0x20) 19:33:00 executing program 3: syz_usb_connect(0x3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x0) r0 = gettid() tkill(r0, 0x12) tkill(r0, 0x1000000000016) r1 = getpgid(r0) wait4(r1, &(0x7f0000000000), 0x12100000a, &(0x7f0000000080)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0xffffff02, 0x24, 0x6, 0x0, 0x0, "45f6215d1e00"}, {0x5}, {0xfffffffffffffe4d, 0x24, 0xf, 0x1, 0x0, 0x856f}, [@mdlm={0x5}]}}}]}}]}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) ioprio_get$uid(0x3, r4) 19:33:00 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x48}}, 0x0) 19:33:00 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) r1 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x121c6067af1c8204, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000200)={0x7, "9ba9a4f3938df1060bc453e3b78080cdee86d7fc0b8d24cf0f85a5affe2f5cdf", 0x0, 0x1}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='Cdev/\x00\x00\x00\x00sho\xca\x8d', 0xf7d545e1093039c0, 0x0) ioctl$sock_netdev_private(r6, 0x89f2, &(0x7f00000000c0)="fc0845c9380ae1e3266c372e91deb3a1d600e5ebdf883d6b49cb8d216aea873148c3f40421195666cc0c81a8fb20e30cb90a0dbb04bc5cd45702809706d8cd2a22111125cc99839f46183ceea03fdadb6ec0c11fece4b218196cf16e7fba90e61211d4e5536146f639e8a3c85450f02696f24c072ef0865925e2") close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='.dev/audio\x00', 0xc4543, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0, 0x10000}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={0xa, 0x6, 0x7, 0x4, '\x00', 0xffffffff}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'hwsim0\x00', @local}) 19:33:00 executing program 0: syz_usb_connect$hid(0x2, 0xfffffffffffffdf0, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000106a056b0040000102030109022d0057c19409d9caf364000003010200092122fcdf090581030003050100"/63], 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x400) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8000, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x200) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) [ 927.076194][T12778] CoreChips 3-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 19:33:00 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 927.130975][T12778] CoreChips 3-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 927.143008][T12778] CoreChips: probe of 3-1:0.159 failed with error -71 [ 927.164943][T12778] usb 3-1: USB disconnect, device number 25 19:33:00 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 927.292254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 927.298485][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 927.392074][T15947] usb 1-1: new full-speed USB device number 117 using dummy_hcd 19:33:00 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet6(0xa, 0xa, 0x8) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000100)={'bond0\x00', @ifru_map={0x1ff}}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x6dbbce78125ac468}) 19:33:00 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:00 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20800, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2b4, @mcast1, 0x80000001}, 0x1c) syz_usb_connect(0x2, 0x0, &(0x7f0000000080)=ANY=[], 0x0) 19:33:00 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 927.782464][T15947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 927.913997][T15947] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 927.922475][T15947] usb 1-1: can't read configurations, error -71 [ 928.621887][T15947] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 928.982041][T15947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 929.101903][T15947] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 929.109637][T15947] usb 1-1: can't read configurations, error -71 [ 929.117627][T15947] usb usb1-port1: attempt power cycle 19:33:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4280) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x10) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00ff0022ff03ae1d000000ff01e4ca9861"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180), 0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x2, 0x3}, 0xfffffbff, 0x53, 'id1\x00', 'timer0\x00', 0x0, 0x9, 0x0, 0xb33d, 0x81}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:33:03 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be9a4a2a8c51d2199b") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:03 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x400, 0x101000) write$UHID_INPUT(r0, &(0x7f0000001480)={0x8, "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", 0x1000}, 0x1006) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='-selinuxb):\x00', &(0x7f0000000480)="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", 0x1000) 19:33:03 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x947f, 0x4) 19:33:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) fcntl$getflags(r2, 0xb) 19:33:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x20}, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = accept(r1, &(0x7f0000000280)=@caif, &(0x7f00000001c0)=0xfffffffffffffe39) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) connect$caif(r6, &(0x7f0000000040)=@rfm={0x25, 0x1, "7e2685efcfb165e08b69458c3d409c03"}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = fcntl$dupfd(r4, 0x406, r7) ioctl$TIOCGSERIAL(r9, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/171}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 19:33:03 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:03 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 930.382389][T27834] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 19:33:03 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f00000001c0)=@generic={0x10000000001e, "010000000000020000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xb32f, 0x901800) ioctl$RTC_VL_CLR(r2, 0x7014) 19:33:03 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 930.492104][ T840] usb 3-1: new high-speed USB device number 26 using dummy_hcd 19:33:03 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='=']) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480)) acct(&(0x7f0000000040)='./file0\x00') r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000100)=0x1a0d) [ 930.572099][T15947] usb 1-1: new high-speed USB device number 119 using dummy_hcd 19:33:03 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x171142, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0x7fffffff, 0x21b6, 0x0, 0x1}) 19:33:03 executing program 3: syz_usb_connect(0x5, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) [ 930.652382][ C0] net_ratelimit: 12 callbacks suppressed [ 930.652403][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 930.664419][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 930.821996][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 930.855026][ T840] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 930.863504][ T840] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 930.871844][ T840] usb 3-1: config 0 has no interface number 0 [ 930.878121][ T840] usb 3-1: config 0 interface 148 altsetting 0 endpoint 0x1 has invalid maxpacket 1131, setting to 1024 [ 930.889611][ T840] usb 3-1: config 0 interface 148 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 930.899991][ T840] usb 3-1: New USB device found, idVendor=17e9, idProduct=c9ad, bcdDevice=38.3f [ 930.909159][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.918651][ T840] usb 3-1: config 0 descriptor?? [ 930.972425][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 930.974785][T15947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 930.978661][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 931.022018][T12971] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 931.132236][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 931.138226][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 931.145114][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 931.154377][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.162510][T15947] usb 1-1: Product: syz [ 931.166820][T15947] usb 1-1: Manufacturer: syz [ 931.171478][T15947] usb 1-1: SerialNumber: syz [ 931.216506][T15947] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input200 [ 931.232359][ T840] udlfb 3-1:0.148: vendor descriptor not available (-71) [ 931.262259][T12971] usb 4-1: Using ep0 maxpacket: 16 [ 931.263965][ T840] usb 3-1: Read EDID byte 0 failed: -71 [ 931.303522][ T840] usb 3-1: Read EDID byte 0 failed: -71 [ 931.324754][ T840] usb 3-1: Read EDID byte 0 failed: -71 [ 931.330486][ T840] usb 3-1: Unable to get valid EDID from device/display [ 931.391949][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 931.392102][T12971] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 931.408701][T12971] usb 4-1: config 0 has no interface number 0 [ 931.415023][T12971] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=c6.ca [ 931.424199][T12971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.438802][T15947] usb 1-1: USB disconnect, device number 119 [ 931.441980][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 931.461681][T12971] usb 4-1: config 0 descriptor?? [ 931.462886][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 931.463694][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 931.504076][T12971] usb 4-1: Expected 3 endpoints, found: 0 [ 931.531510][ T840] Console: switching to colour frame buffer device 100x37 [ 931.621932][ T840] usb 3-1: fb0 is DisplayLink USB device (800x600, 1880K framebuffer memory) [ 931.651930][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 931.660737][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 931.697156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 931.703434][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 931.709473][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 931.718081][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 931.726690][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 931.731439][T12971] usb 4-1: USB disconnect, device number 33 [ 931.736044][ T840] usb 3-1: USB disconnect, device number 26 [ 931.754000][ T840] Console: switching to colour VGA+ 80x25 [ 932.131898][ T840] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 932.321923][T15947] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 932.512011][ T840] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 932.520470][ T840] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 932.528792][ T840] usb 3-1: config 0 has no interface number 0 [ 932.535051][ T840] usb 3-1: config 0 interface 148 altsetting 0 endpoint 0x1 has invalid maxpacket 1131, setting to 1024 [ 932.546401][ T840] usb 3-1: config 0 interface 148 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 932.556623][ T840] usb 3-1: New USB device found, idVendor=17e9, idProduct=c9ad, bcdDevice=38.3f [ 932.561922][T15947] usb 1-1: Using ep0 maxpacket: 16 [ 932.565778][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.579558][T12778] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 932.591088][ T840] usb 3-1: config 0 descriptor?? [ 932.682126][T15947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 932.832009][T12778] usb 4-1: Using ep0 maxpacket: 16 [ 932.852108][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 932.861341][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.869881][T15947] usb 1-1: Product: syz [ 932.874336][T15947] usb 1-1: Manufacturer: syz [ 932.878989][T15947] usb 1-1: SerialNumber: syz [ 932.912262][ T840] udlfb 3-1:0.148: vendor descriptor not available (-71) [ 932.926589][T15947] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input201 [ 932.950678][ T840] usb 3-1: Read EDID byte 0 failed: -71 [ 932.982419][ T840] usb 3-1: Read EDID byte 0 failed: -71 [ 932.988397][T12778] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 932.997262][T12778] usb 4-1: config 0 has no interface number 0 [ 933.003515][T12778] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=c6.ca [ 933.012683][T12778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.022651][ T840] usb 3-1: Read EDID byte 0 failed: -71 [ 933.028394][ T840] usb 3-1: Unable to get valid EDID from device/display [ 933.037596][T12778] usb 4-1: config 0 descriptor?? [ 933.091988][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 933.124130][T15947] usb 1-1: USB disconnect, device number 120 [ 933.152649][T12778] usb 4-1: Expected 3 endpoints, found: 0 [ 933.161998][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 19:33:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000a6b0b0000000058650000000800100000000000", 0x24) r3 = socket$caif_stream(0x25, 0x1, 0x5) sendmsg$inet(r3, &(0x7f0000001500)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001480)=[{&(0x7f00000000c0)="148a48c3d6cf429ff767983d5ead680aab3811ef51d8ffaf22246fbe1062d1af4d6ef25432c223450dd213b684b4c298673d81c081449a74a47a7e7552705c80bbe3b3a6895a0fc3074d48b11470ec80e1d654c4c9a5dce943b001dffdf138b037248c15ca6786e60e80c2186835ee2bbf857a9cbe66ab47c6a4e562b089824ab8a09252d41fc96ab88b07df5eec4f207f89255e477de57c3e703716d2130a2a4f84d7223792", 0xa6}, {&(0x7f0000000180)="83d4285ec6d0e8386559945633b434eff01841bb8dc3ed30c263572b052155bea75fb6c1eda27fef363aa83cde8f186c8102209651cd783d1b92ed4221eed72c023413c919f66c", 0x47}, {&(0x7f0000000200)="9e5bd1d9dc1d9fe449475d5d8f9c4bd56323b0d8de9e5a755601570cae16af4e31672c0864a01791bb83443079257b36d2c3eada0df400eab3ce4bf85c1a96cbadf6dee5e6de1bac38a85ea3d7a4f2d0ebf4719873000fa59bab44c60f951bdfbea9692732f6d89d6053018e2185799509cd3b60d3110571051f4267dc600a2b2a55707eacbcacd7b65c789dab9f558fe34fc38638729701deb925b4c83e8bdf7960d6409320faf7fcb9271fe43ecf0632b1daee284e9546a96b910f4a5abb7a661a0ac5bc7872d7fb6f86834504d959127a7659d9018ce3734aa5b452a6ca94e5f4c2a3a988400f9ec93aed20f5a4409c3b7a0361ea8d1601030bcadace70ea9fdb6bc29361dd73f65c9e3c7f56bf167d1199e78b2b5153ccd6a76873bb6cf323300de10212ddd0392990a0027f010a6ab04be80de99a021172b3999f54235bc49a9d051c9ca160c31f2000a84c16708c68171e6e77ee4f4f03aaaf00420916d457d3744fb842356abaa9ebda99dddfb58deb091e998f16fc0dbc0c3a599669e6e2cdea82f881c48168f0f2b54a525e5ded78b68b7fd0635b6a1e1105e920151127ea372ab3f10d544e16a56facf23169d4709947e068ac0c6da6a700ba9294d0d78dc331d94f75439aa441466ee6d044cea1f0d33c3a8b40315db143ca7f75177826bd1f7de6ee93fdcdef6df2381d6904bd2d5c348f206e8b185b6caa1a02881a20f742d122a3e9150d36195ea59222322de609173605d2bc2c8675e4af546db0c5cdd67c43930e5a9a9499361fc31f285262a0aa71939126cb108f39baa947494063558fecba9863402cd6bae6109ee58975311fd1b52add168dcc9ca6b4cc5e41f43b0e5c3897ad61394c4b186c3a852fb113a92d9837c1c6580189e80f46e29550a9362b4a99403d3531b590692dd1bcdadf83e23492cc614d0d4b1600553cd25e94a72b080bb90ef5b5f7b90c0a82c05d3839588cb99815253a8b8cb0dbd2fba290207dc9ff0efcc72d7a509b610b3861d5374a5594860280a1509a1126b54c4ead8013f1e7b9ce0951985a62c4dafe5e30b77fc5a8b8b1962ef8d2b27d3f45504d572c8cd996aafd993bb04db362084945d817cb0f7a245790d5d80cad2cf8e95f7cef32745840728b4e3dc1cfe30a9fcf635fb7ddb40fed3b64ca05b7e1ccfbebe1b90f5ccc13ec06337956e4c14ca14ee2a5edbda42e1afa47a586eb09a81dd60e93c811c91995e38cb223c56546cd1f8d62290f3e15d4f5b83f3b9d486732c4f07967c2c861c9d7029452bf92caa23a43383dbd4ddadd8955115403cad7d97780e4a553b3cd0a9923bca3686d5a41d683f77b0bb5690e38bf0d8e64ddf60f167a6fc2476384efbf186b423ec7db1a3c20377ad7bc1a3620c3e3377d2ff6bb5a56fbcbbe8579b7cbf4aff8fe9e6cd8cd7de36e5b06cad3f272ae6b89ae12281122c5d314be5e2142202a3b86edd98c31b50339f97f3eaab82bd0812441263922954d5b66b4bc6bc677a61dda4f1dcc2699083063d209833d0ac3543af5a12a1db652f2b4aaa47ce07381340a750f28307b01289b752780962036027005b98f7371868e02cbda4878a0dac8b819f0b2340d1465843e508f7993e120d48b331c4963207083a9d3af0a157b5f64f0ab08dc35830b8d8ed9f10291acdc9b00f6203226fed1a0fd7ab1987065af3a8c3f09f849350e82694099a63fd88801aa61965033bc8e286cefb55a502b4814938f09b94413a6840ebb8579a727b224d3178550676bd1ba15f14cecb12d10093a09d53e3c8a8e971fd28603e1f40534d1fc007ff985ee286afc80caac7eb8ed4a0c4a6269af7e6c29e399adcfd0050e82906aadaf7f0347f6476b2508c7328c5da3fc706ceae2e269355ebc6088ccd2279dca4c398bf0e931db5b1c976c882e3853d2e19c7bfaab6540d275b226ff734fc65c7f5d07dbbe4572c1bc476eea64784ffe678b3d960827236b1e51ac87f4b0024f2e243f88bdc5b0dbddb655b003de2a0380a91afe2593970e13d51a334130ec96e99645e0d7a17adf247ce8919ee8a24502d714bc75cf1875f83ef651b9e2aa16188b1147d79cfe242559639eed47778123b35ccbcd3e41e56e9a8bc9907bc653fa32abd56ee5d893880efae744ef7652c989a4281e95f27ba1fd0531dbe013815622e2dd4264296baabf845d728f13d384767491a49278343fd83ae296e45923c5d12cf7e1f119a3b218110eccea9dcc8ae42956bf612c672f093f45618218fd526c38a8675b2100526c59876b3fff6a472fa8e7f6b405cdcdca02f637406165f4a6708fb90a8683f29fedadec4ddcf7128296015afcf02bec8cc8932b8bb27193b5e7a34bc492e9e2c46f87d7127d29e93754a25bc748ede6a10a8fa5a50847b9d29bcfa9c9107782940924a950581c11eabfe056ff2211005b7e5997577815b68965178750179115d306af6aa994de232cf19685282b77b8077937292164c1e44423e075a0ed4cfaeaf9f0b93b83a3897e3e396347d7da2535eb96e83a0fa878c75b452699468beb07ad3fbe1be90cca8b31654782fed0ab83478608d325640640059dfe9347d3856b214f7626ee1367d878b0059d77934adaca35e2e46fee33f5b5e46bb1ae18195c1949806a58563addfacfc839e224e247718d59673f7f63cd1ed151f335d0794c83ef41448bc3cea325ddb99da43452c3a5fc2f7cb789a69186ddf7a2671533b4be55f0cf8722de7e97c90d80224f4a6b9142ae74dcc96374273ed436226484522a39c8f977eae435cd4734e99c8529a8937d746facd77a19c57d26c9c0df596e45e3d2e656dfa1f3206e3eaabb35e2c15bfb5f6df8c30362b5ae5b3503092e0db77d165425e46aff4249740caf0122151d3a20a5d16d3ace5e16dbde27fb570ec6897e8a8012808d84d1153e0e3ec9e258662268310198dbd3090146a724290f2135ce80554917630bd2dc4079b66d1134b1cb3d7ae84513ade696dd31ffa145c10f2559363977d81ed4795e2c50161e8df52993ecae791dbb3c34f2a58ce366a5e31c6d3bc4f6d85fc263ca2774a9b42e19d49b675095fb9a07ced240564c64d272e6cc49426dcfe7463f240a961f73f91fd808ccd98f1627fe252e8075bba3f3fc81adde24f80b5b1df2d903ef2f8649627a295e6b9154c48652bb6d8f25175580ca5166be5a101b207916f4ad6b2201716e8458ea9488976b32d1949dfa5148320ddd96e2fa58041076a322e9ab389d5d221f9bdeb706ceeb12848331952c39c68b78c2e357f9aeb415fdf02756d6675de1f6a0369ce5a40b212ccf2312cf91c30fb646542d897258312dbe5f2ba3474b5732413a8d3b448073ca8c73a06701eeec4ee00366834c112e6db856358cdba94a3402af01d31d446dbfe91857c45e4b1012a0b63aaa8202bf33c251102aedadb742d14104fb765d56ab9dade0ca04a540c2aece280daba0a545658b311799b55656ba7c3823b353f7ee3c23f338bc798a305e07b789e6f038075362bc2d314c64c02d42f216ddad1027aa7d3bb2768ba605ed2d0fb7317e24f6efc052ca1385fd82da0c50e1ee13c2e12c27612a77f140f6a736692b52a4eb5521de098b93f7a6e9a6f9572196d8469808a73cd57265579a098013854e03d5ae09acda29a9ae3637503cfd1d76d47dd6dc4a959cb9394437d64129bc53e3b6dc62b1e56dcaf130087a4ab7e238cd8e3437ec6de3205d9f7c17ac3ad084b88c23cbae88bea22193bebb1ad1c59a27ef55691065fb165934ca47823d85a432827cfeb2fab02a81b3411438920db384496757ec603160bb2d0d8be9a410ce529dcf610bbe157bcfe2baabf4e1d6f3417ed64507d0f226bf0f8d8f325556f72db1243e5341812ee60d76ded82472c61ae2de9437c961114eb99f85231b51d94077389c53326acc4a260d568228aabe0050644d3c24253cf95246c548dc37272e37cc784b9b5b4a50f90dcf364c902a77d36ccadc82fd8815a5850e9f05b23f89b24a88372d8637ec8fb6059bd4d80ca0bf423d2fc330a974ff9cf6ab4d183ef0eb7184486c960d28be9c216bcac02786b54b7a5d032e9fd7cec7eb74a2bbf3ae71b11ee2250a41437d3b5acfb208bb973c105560dac2852d9a56a11313807aaf25e07dc0e6cc59f750d400e367e191c65f519f10828b733a37fa9642c20466e5b107c6838fa87db7ed6f471924e990411c2a430273bf03681dc2be12772ee822af362d7a94ab9c70f4113d9006729a64ec9a3c9517a0cc3ef9ae2d1882a675864ea430a462b60fc8908be1891e91ae2fec15e57d1e36100c0dd4db7f8fd44a6345b6ef7e54bedb934f0cc2fd6b908b1e1c74f06b8457d5d480581487c03281637e27ce870ab449ecd5d2c800b5e25f50b15cc8c4eaa411def27de3155206563097ae0390f9d7b6a6f7daa9468c3c2b01d11899e572e4884d1e65d38a971c6512dbd62984e9972545c174c1429639943a4779585bb8977098dd87bb6e54000c914646bc2f8a8471bb65eb939e318954f886012a125ca0069e2e27162aa0bbc548a2c203857d4c7ca443b1454d25fad1f419e8f33467af061d33051b81e9a9a11d65e7d9cbc015e19726d9dd8fd71155d77818469276aa05d13b3b947a16aaa51de0eb4c3645422180800de6bf26362abeeda69091d6c2713cd51c748699ede44cff4e20a4939905f3c6b8c8bd558316c83a8bbec0717a7dea21df3f175462bd3c435bc831ecb23ee24b5e3038fa864d6341125e98e81b02038b5bf5e3518e23d7894db0fa2fb6ef37eb49ff0cbf1007a795e4eb27b636d008edbc22857eb36b63cd49633441bc34815aee9b201bc193397fa6b3ac8171accbcbcf13c6f4d5c24784d0b186e1f084004ee322904661a1cbd48475806033f870575b96e1b76f7940690a4996a969c8c43a5092e0ebc7417a931d2007b41d244b6b2e26e70918a942a538cb183ea8f383588ed4ce8aa540de2eba48b38e46427beec7edf00f52c17bb8f5d82d5fcfa256a63b1ffc5ca871056f80fccfc2b97d597a164fa8c48c1bdcc5b4291f3953795fab1d35996f2a2f007642509363970223b685ca40ec3da6c5ff6705526b0eeb71fc5e70458aefc7a9d77ff0dfd2b9f137907877b3df6f0d9b0871b7c04ef7e3938f6ce4147500be10ec6fcbce3140c2fc0cc7c88fe109744c5e84633fe591c92014afb98e1509d288d7bdb5e88c1691b4da6f755b529c2412604d2dbd60cb5e829d93d0c9a9542573a44d959b2af2ce777d32f874979d92387ad7146f5716daef4a01a1221de3704b5803f0bc7b31b7e72a0ddb29fd51da1c51bda2099ed962e6bf2d70bc219e52f0bcfd9383afaf41d00a14fc29cf96368624ebe9d338ff01a86781661e7a644a487ce20835cd656dd17dbc66bfb721f014c87206791c3f5dc10bbf6475a3968035c5b8e891cf3f70ac64c79e1f42104894e84f0d11a9452e28fd9314a25241151ede45fa7bfd71df26ad91d886f0300ca79524b63622f439714577389de90a2efa4198028d82c034b9af03f27e01594cbd5e0d135e68363389b4d4841e13f7d1aed81c45d4ba627ceaff54c70df0d34515e39fefa19bcaf9dd130aa86fe2a0ff6624bfe516d863cfeadd93762258cd2caec15548c551192ab9c07d3fb7859e45271d65fecba5281ec7ac6d8620d588463e95bc383179afb312d5c52df6eb908a59c30469237b4ba52db6d3f46591e3e6d7c16d83747434b08fb32da5438a70610a0a9a6b4a0631705903fd621e8df4a4b352c679b19e9529a8", 0x1000}, {&(0x7f0000001200)="5187f99b8331e879ba96408ac9f031a76e8d4cd9256e90d12739c2c3c93a389528c482ef764e31039c58ecc11df0ea8324f414bdcd14b672594b9fc78562cc8d342e61367b2891f379efa04db4879420fd2a05e7f3af6bb83be0fb1fe0d7e49c62a9305ac3ffafa177f56a5ae90e7e14715bb9bdd016dd6fb1e2a5d47949709a52fcb77c1d94d47fc25b8c0289568bbe88dff03c08d7db7f340ebcf65e", 0x9d}, {&(0x7f00000012c0)="ec2216de181d8c23790514153681880d20c1f9eba3ac80a5e35d6f48337765fb9c29a7111efc4aa4c4470b648d814b21809310a3eba7f0c2caeed9ce42c1869c9dbab7578a245608ae6742ab2ec2aca13ce01ca8dbe21f09c360e121ba5aa51f8001fd3ffcb74283f4e3557c53b6fd399aa26216ec40d3f21894f9274af661eec90ce03d9523011481d67b93cede376164bffb09136238043b9b5994289e5608fe893e5c39b01ceb", 0xa8}, {&(0x7f0000001380)="704542c88c45551f75ffee2e0b0fb84d615874ec09c393aa3bacac97fc887b51a883a77504de73f1c443130dc14abc2493577d232167b271d89b1611596c22c2cc810a21f78a83095f12414b0ba2b694fd47018f28a8920dea7ea1da6902f44276a5614a40a9456fd43d2631ea8cb0399eca0b06a6201792a8c3c0f1545f46d95948873f73ec6f6fbcf4beecec408f40e8789829bb04219376c7aa8d069a2dbec4acd638a8f46be66619df6c1b5ac892fc6bab016326da26", 0xb8}, {&(0x7f0000001440)}], 0x7}, 0x40) 19:33:06 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d6070000a46dc8b8af3b1d45253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r1 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000080)={0x8, 0x2, 0x78}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r6, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x214}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)="02a71aad7e9ab7ffc1a1b98e97cf560f54f3c29d6b9ca6f648e22ac4931e19269a7a6c78b8c38fe6266cd5cc8ddc067d141a10312ba424c499d9711c88a0acc0d91d8ef742581b7f08dfa84ddcf69b6059806d047529ef0af83eb80728c8fd35677ad0", 0x63}], 0x321, &(0x7f00000002c0)=ANY=[@ANYBLOB="20000000000000008400000007000000a9643ec31b5e6ee7075ac185b65bdc7ad83f3fe0293c0025f036e924f94a81f377e30c226c795927fdbc6db6b75635d818cdc1a343d70635a430067b0000"], 0x4e}, 0x0) 19:33:06 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = gettid() tkill(r4, 0x12) tkill(r4, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000ea808c30108c00"/118], 0xb8}}, 0x0) 19:33:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x3ff, 0x6, 0x99, 0xfa, 0x3f, 0xc1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) [ 933.292543][ T840] Console: switching to colour frame buffer device 100x37 19:33:06 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) dup2(r0, r1) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3, 0x200000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x1, 0x9, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) [ 933.325611][T12971] usb 4-1: USB disconnect, device number 34 [ 933.495769][ T840] usb 3-1: fb0 is DisplayLink USB device (800x600, 1880K framebuffer memory) [ 933.543035][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 933.551834][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 933.592414][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 933.601082][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 933.609715][ C0] usb 3-1: dlfb_urb_completion - nonzero write bulk status received: -71 [ 933.620753][ T840] usb 3-1: USB disconnect, device number 27 19:33:06 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 933.644419][ T840] Console: switching to colour VGA+ 80x25 19:33:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000040000000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) open_by_handle_at(r0, &(0x7f0000000180)={0xac, 0x2, "f3a4e746cecc05598e264b466d5853f8208274907200a46b1eab2d8d9bfe52b2c2bf35103714865e97b9f866e1fe0eeb605242673dc6aad4b0e3c8d1136be033d16fe15ea6b6625dc3daf2f12f4b3bc02c81d76dfd053f72a1ea73590974232deb640b33a65cb1ff5d3853a3ef418c5c5de9235af34364da2c2953524edeb11f83dd88fba2be4270651dda67644bd54a6f13b08c4e971fe59957bbf7b682daa7c7560ec0"}, 0x4a0000) 19:33:06 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 933.828524][T15947] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 933.830530][T27917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:33:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}, 0x8) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) fsetxattr$security_selinux(r2, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:usbtty_device_t:s0\x00', 0x25, 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000140)=0xfaa0, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x20) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2, {0x101, 0x3, 0x7, 0x5}}) [ 934.027503][T27918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:33:07 executing program 3: socket$inet(0x2, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x9) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000f85200000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000000100"/36, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 934.071980][T15947] usb 1-1: Using ep0 maxpacket: 16 19:33:07 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:07 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce332") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:07 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, &(0x7f0000000480)=""/175, 0xaf, 0x0}, 0x40) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0x5, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 934.192121][T15947] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 934.231547][T28035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 934.362496][T15947] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 934.371817][T15947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.379888][T15947] usb 1-1: Product: syz [ 934.384247][T15947] usb 1-1: Manufacturer: syz [ 934.388931][T15947] usb 1-1: SerialNumber: syz [ 934.412261][T28035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 934.437190][T15947] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input202 [ 934.655092][T12778] usb 1-1: USB disconnect, device number 121 [ 935.421926][T12778] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 935.662012][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 935.792069][T12778] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 935.852186][ C0] net_ratelimit: 18 callbacks suppressed [ 935.852216][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 935.864255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 935.962372][T12778] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 935.971628][T12778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.979852][T12778] usb 1-1: Product: syz [ 935.984115][T12778] usb 1-1: Manufacturer: syz [ 935.988729][T12778] usb 1-1: SerialNumber: syz [ 936.046157][T12778] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input203 [ 936.243763][T12778] usb 1-1: USB disconnect, device number 122 19:33:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x700, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000200)="c441f928fd66ba610066b803c066ef48b803000000000000000f23d80f21f835800000b00f23f8c7442400ad1eea5dc744240200000000c7442406000000000f011c24440f20c03508000000440f22c0420f795be60fc769ee66ba6100b867000000ef48b8ea130000000000000f23d80f21f835c00000600f23f8f3430f09", 0x7f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:33:09 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000033e450e60010ac05730240000102030109022400010100000009040000000301020009210000000122000009058103000000000098453b4c71caabe561d52a9179da4d02729c8b5d4a5e7554719c932a27d05ff287a2dd701b5925cbec6de21470a014cac36f2d9e9e822c89b0f49a40453b404329248e76300a4c0a76fe4cb7b6a87265e724eb7cfb798843a057a1af5793"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:33:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0x8, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_VLAN_FILTERING={0x8}]}}}]}, 0x3c}}, 0x0) 19:33:09 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce332") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2b, 0x1, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080}) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000002340)=""/101, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000040)={{0x3, 0x1, 0xe9, 0x4, 0x6, 0x8}, 0x7, 0x92, 0x5}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) accept4$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x800) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) r6 = gettid() tkill(r6, 0x12) tkill(r6, 0x1000000000016) waitid(0x2, r6, 0x0, 0x2000008, &(0x7f0000000200)) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00', 0xffffffffffffff18, 0x80811, 0x0, 0x0) 19:33:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000d7c000)={0x0, r4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r8) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000d7c000)={0x0, r8}) r9 = gettid() tkill(r9, 0x12) tkill(r9, 0x1000000000016) fcntl$setown(r7, 0x8, r9) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) r10 = gettid() tkill(r10, 0x12) tkill(r10, 0x1000000000016) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{0x9, 0x1, 0x80000000, 0x6, '\x00', 0x7}, 0x4, 0x40, 0x3, r10, 0x3, 0x3ff, 'syz0\x00', &(0x7f0000000040)=['wlan1\x00', ')-systemcpuset\x00', '/dev/vhost-net\x00'], 0x24, [], [0x4ea, 0x1, 0x200, 0x1e0e]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000b04000)={0x3, 0xfffffffd, 0x0, &(0x7f0000034000)=""/74, 0x0, 0x3000}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x7}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800010000000000008000000a000000000000000000000014000500ff050000000000000000000000000001"], 0x30}}, 0x0) [ 936.484278][T28067] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 19:33:09 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce332") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:09 executing program 2: r0 = syz_usb_connect(0x0, 0x320, &(0x7f0000001f40)={{0x12, 0x1, 0x0, 0xfd, 0x77, 0x89, 0x40, 0xac8, 0xc301, 0x8b4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0xd6, 0xcb, 0xa4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0xac, &(0x7f0000001700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x5, 0x9}, {0x1, 0x6}]}, 0x14, 0x1) syz_usb_control_io(r0, 0x0, 0x0) 19:33:09 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = getpid() ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 19:33:09 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe4") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:09 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe4") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 936.895604][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 936.903038][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 936.912526][T12778] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 936.984068][T15947] usb 3-1: new high-speed USB device number 28 using dummy_hcd 19:33:10 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe4") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 937.224617][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 937.231999][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 937.241516][T12778] usb 1-1: device descriptor read/64, error 18 19:33:10 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) [ 937.353995][T15947] usb 3-1: config 0 has an invalid interface number: 22 but max is 0 [ 937.362257][T15947] usb 3-1: config 0 has no interface number 0 [ 937.368458][T15947] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=8b.4c [ 937.378239][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 937.378668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 937.390506][T15947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.432805][T15947] usb 3-1: config 0 descriptor?? [ 937.476944][T15947] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 937.662015][T12778] usb 1-1: device descriptor read/64, error 18 [ 937.692174][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 937.698336][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 937.943351][T12778] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 938.231947][T12778] usb 1-1: device descriptor read/64, error 18 [ 938.562044][T15947] gspca_vc032x: reg_w err -71 [ 938.566870][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.572367][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.577708][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.583272][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.588577][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.593916][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.599215][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.604732][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.610029][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.615424][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.620738][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.626153][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.631462][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.636836][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.642206][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.647503][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.652913][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.658222][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.662842][T12778] usb 1-1: device descriptor read/64, error 18 [ 938.663661][T15947] gspca_vc032x: I2c Bus Busy Wait 40 [ 938.675003][T15947] gspca_vc032x: Unknown sensor... [ 938.680189][T15947] vc032x: probe of 3-1:0.22 failed with error -22 [ 938.689394][T15947] usb 3-1: USB disconnect, device number 28 [ 938.782315][T12778] usb usb1-port1: attempt power cycle [ 939.311916][ T840] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 939.491917][T12778] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 939.692145][ T840] usb 3-1: config 0 has an invalid interface number: 22 but max is 0 [ 939.700465][ T840] usb 3-1: config 0 has no interface number 0 [ 939.706796][ T840] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=8b.4c [ 939.715951][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.727244][ T840] usb 3-1: config 0 descriptor?? 19:33:12 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) 19:33:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = getpid() ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 19:33:12 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000d7c000)={0x0, r7}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16=r1]) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000d7c000)={0x0, r5}) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f0000000100)={0x86, 0x3, 0x26, "2dde86675cbc4b194291a04a90ed76a203e88754e6e227f2e87a9ffc00223f97467d92faf04d5f36675cc3a6a72c3c3e34bde3e72eda103e86005adb", 0x2, "d1f98c1e36f37d7000d3d61880575961547ebb7811e103e303e82471858efa360b2b657af80757ac6f986021e42e647463937312e1327af6d3574977", 0x18}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 19:33:12 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:12 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="02070009020000000000000000000000664235b32f4403ad8ee5d59659ab95c6d4b2f5259364549683296346337a89a893fc8576a67c1032495bfa69f7da0b6f21a72ae6ad5e6352bbbfaf040042ee7145b193a8c113e0e98ae5abb42e176deaf23925ec3d959962a795251a6890815a568e118aab905f833adf24cbf334c7bd38ee5eb84599d479f5569e7105009031d95239d093ee4b0ff1839156844c55708a4762da79b76bd66cee413314531849ac2a2053addc2680d741ded1963330d7698073ea2f628bf33976f174904920658b735c4e79e84fd61f7e2e50bf16ab478b4a1460e05e701975162fa916a893d54bafaee8a8bdea0ba7a7d8e1e483cfabf6"], 0x10}}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x200000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb51}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xf3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x986}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c052}, 0x810) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x4d4, 0x32}, 0x0, @in6=@rand_addr="00c8e8767e00", 0x0, 0x0, 0x0, 0x5}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8001) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000d7c000)={0x0, r6}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@multicast1}}, {{@in=@empty}}}, &(0x7f00000000c0)=0x4) sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') [ 939.784830][ T840] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 939.792148][T12778] usb 1-1: device descriptor read/64, error 18 19:33:13 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000400)="806e554068d95910af4ef90091fe8dd82d0a1fe4033209ace443876e259f24811b3163a0c1f77d52e2885f93b344c9c28a1e4cd6b88b75dc7edf52bd7cd93636dddbe00d15bcc7d0b4b9e099a61b4503b4eea989d18c069f4e841998babb452084534c806ce3328694b7b591472d972f3fcc4bbff67d9fe447ccc86f34d3b0a8be") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000100)={&(0x7f0000001300)=""/4096, 0x1000}) 19:33:13 executing program 2: r0 = syz_usb_connect(0x0, 0x320, &(0x7f0000001f40)={{0x12, 0x1, 0x0, 0xfd, 0x77, 0x89, 0x40, 0xac8, 0xc301, 0x8b4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0xd6, 0xcb, 0xa4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0xac, &(0x7f0000001700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x5, 0x9}, {0x1, 0x6}]}, 0x14, 0x1) syz_usb_control_io(r0, 0x0, 0x0) 19:33:13 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x800000000080003, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006a0003216c464200a9001000000000005551f2ca08000500", @ANYRES32=0x0], 0x20}}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) getsockopt(r3, 0x5bc, 0xc8be, &(0x7f0000000180)=""/239, &(0x7f00000000c0)=0xef) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 940.252098][ T840] gspca_vc032x: reg_w err -71 [ 940.256837][ T840] ===================================================== [ 940.263892][ T840] BUG: KMSAN: uninit-value in read_sensor_register+0x4b7/0xd30 [ 940.271440][ T840] CPU: 0 PID: 840 Comm: kworker/0:2 Not tainted 5.4.0-rc3+ #0 [ 940.278892][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.289020][ T840] Workqueue: usb_hub_wq hub_event [ 940.294050][ T840] Call Trace: [ 940.297363][ T840] dump_stack+0x191/0x1f0 [ 940.301740][ T840] kmsan_report+0x14a/0x2f0 [ 940.306266][ T840] __msan_warning+0x73/0xf0 [ 940.310781][ T840] read_sensor_register+0x4b7/0xd30 [ 940.316002][ T840] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.322341][ T840] sd_init+0x2cf3/0x4530 [ 940.326603][ T840] ? sd_config+0x270/0x270 [ 940.331127][ T840] gspca_dev_probe2+0xe93/0x2230 [ 940.336092][ T840] gspca_dev_probe+0x346/0x3b0 [ 940.340877][ T840] sd_probe+0x8d/0xa0 [ 940.344874][ T840] ? sd_s_ctrl+0xdd0/0xdd0 [ 940.349305][ T840] usb_probe_interface+0xd19/0x1310 [ 940.354526][ T840] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.360428][ T840] ? usb_register_driver+0x860/0x860 [ 940.365797][ T840] really_probe+0xd91/0x1f90 [ 940.370426][ T840] driver_probe_device+0x1ba/0x510 [ 940.375557][ T840] __device_attach_driver+0x5b8/0x790 [ 940.380940][ T840] bus_for_each_drv+0x28e/0x3b0 [ 940.385782][ T840] ? deferred_probe_work_func+0x400/0x400 [ 940.391511][ T840] __device_attach+0x489/0x750 [ 940.396273][ T840] device_initial_probe+0x4a/0x60 [ 940.401288][ T840] bus_probe_device+0x131/0x390 [ 940.406129][ T840] device_add+0x25b5/0x2df0 [ 940.410656][ T840] usb_set_configuration+0x309f/0x3710 [ 940.416152][ T840] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 940.422286][ T840] generic_probe+0xe7/0x280 [ 940.426782][ T840] ? usb_choose_configuration+0xae0/0xae0 [ 940.432496][ T840] usb_probe_device+0x146/0x200 [ 940.437337][ T840] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.443221][ T840] ? usb_register_device_driver+0x500/0x500 [ 940.449105][ T840] really_probe+0xd91/0x1f90 [ 940.453781][ T840] driver_probe_device+0x1ba/0x510 [ 940.458891][ T840] __device_attach_driver+0x5b8/0x790 [ 940.464261][ T840] bus_for_each_drv+0x28e/0x3b0 [ 940.469098][ T840] ? deferred_probe_work_func+0x400/0x400 [ 940.474812][ T840] __device_attach+0x489/0x750 [ 940.479571][ T840] device_initial_probe+0x4a/0x60 [ 940.484580][ T840] bus_probe_device+0x131/0x390 [ 940.489421][ T840] device_add+0x25b5/0x2df0 [ 940.493946][ T840] usb_new_device+0x23e5/0x2fb0 [ 940.498805][ T840] hub_event+0x581d/0x72f0 [ 940.503248][ T840] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.509121][ T840] ? led_work+0x720/0x720 [ 940.513433][ T840] ? led_work+0x720/0x720 [ 940.517828][ T840] process_one_work+0x1572/0x1ef0 [ 940.522859][ T840] worker_thread+0x111b/0x2460 [ 940.527643][ T840] kthread+0x4b5/0x4f0 [ 940.531703][ T840] ? process_one_work+0x1ef0/0x1ef0 [ 940.536897][ T840] ? kthread_blkcg+0xf0/0xf0 [ 940.541480][ T840] ret_from_fork+0x35/0x40 [ 940.545887][ T840] [ 940.548197][ T840] Uninit was created at: [ 940.552428][ T840] kmsan_internal_poison_shadow+0x60/0x110 [ 940.558219][ T840] kmsan_slab_alloc+0xaa/0x130 [ 940.562966][ T840] kmem_cache_alloc_trace+0x8c5/0xd20 [ 940.568322][ T840] gspca_dev_probe2+0x30d/0x2230 [ 940.573255][ T840] gspca_dev_probe+0x346/0x3b0 [ 940.578004][ T840] sd_probe+0x8d/0xa0 [ 940.581975][ T840] usb_probe_interface+0xd19/0x1310 [ 940.587166][ T840] really_probe+0xd91/0x1f90 [ 940.591737][ T840] driver_probe_device+0x1ba/0x510 [ 940.596837][ T840] __device_attach_driver+0x5b8/0x790 [ 940.602191][ T840] bus_for_each_drv+0x28e/0x3b0 [ 940.607023][ T840] __device_attach+0x489/0x750 [ 940.611771][ T840] device_initial_probe+0x4a/0x60 [ 940.616777][ T840] bus_probe_device+0x131/0x390 [ 940.621623][ T840] device_add+0x25b5/0x2df0 [ 940.626115][ T840] usb_set_configuration+0x309f/0x3710 [ 940.631553][ T840] generic_probe+0xe7/0x280 [ 940.636038][ T840] usb_probe_device+0x146/0x200 [ 940.640870][ T840] really_probe+0xd91/0x1f90 [ 940.645445][ T840] driver_probe_device+0x1ba/0x510 [ 940.650542][ T840] __device_attach_driver+0x5b8/0x790 [ 940.655895][ T840] bus_for_each_drv+0x28e/0x3b0 [ 940.660729][ T840] __device_attach+0x489/0x750 [ 940.665476][ T840] device_initial_probe+0x4a/0x60 [ 940.670570][ T840] bus_probe_device+0x131/0x390 [ 940.675402][ T840] device_add+0x25b5/0x2df0 [ 940.679887][ T840] usb_new_device+0x23e5/0x2fb0 [ 940.684724][ T840] hub_event+0x581d/0x72f0 [ 940.689128][ T840] process_one_work+0x1572/0x1ef0 [ 940.694140][ T840] worker_thread+0x111b/0x2460 [ 940.698887][ T840] kthread+0x4b5/0x4f0 [ 940.702938][ T840] ret_from_fork+0x35/0x40 [ 940.707330][ T840] ===================================================== [ 940.714241][ T840] Disabling lock debugging due to kernel taint [ 940.720384][ T840] Kernel panic - not syncing: panic_on_warn set ... [ 940.726962][ T840] CPU: 0 PID: 840 Comm: kworker/0:2 Tainted: G B 5.4.0-rc3+ #0 [ 940.735789][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.745846][ T840] Workqueue: usb_hub_wq hub_event [ 940.750855][ T840] Call Trace: [ 940.754137][ T840] dump_stack+0x191/0x1f0 [ 940.758531][ T840] panic+0x3c9/0xc1e [ 940.762438][ T840] kmsan_report+0x2e8/0x2f0 [ 940.766934][ T840] __msan_warning+0x73/0xf0 [ 940.771430][ T840] read_sensor_register+0x4b7/0xd30 [ 940.776623][ T840] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.782512][ T840] sd_init+0x2cf3/0x4530 [ 940.786754][ T840] ? sd_config+0x270/0x270 [ 940.791164][ T840] gspca_dev_probe2+0xe93/0x2230 [ 940.796107][ T840] gspca_dev_probe+0x346/0x3b0 [ 940.800867][ T840] sd_probe+0x8d/0xa0 [ 940.804836][ T840] ? sd_s_ctrl+0xdd0/0xdd0 [ 940.809244][ T840] usb_probe_interface+0xd19/0x1310 [ 940.814444][ T840] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.820325][ T840] ? usb_register_driver+0x860/0x860 [ 940.825598][ T840] really_probe+0xd91/0x1f90 [ 940.830191][ T840] driver_probe_device+0x1ba/0x510 [ 940.835301][ T840] __device_attach_driver+0x5b8/0x790 [ 940.840671][ T840] bus_for_each_drv+0x28e/0x3b0 [ 940.845510][ T840] ? deferred_probe_work_func+0x400/0x400 [ 940.851218][ T840] __device_attach+0x489/0x750 [ 940.855979][ T840] device_initial_probe+0x4a/0x60 [ 940.860992][ T840] bus_probe_device+0x131/0x390 [ 940.865838][ T840] device_add+0x25b5/0x2df0 [ 940.870346][ T840] usb_set_configuration+0x309f/0x3710 [ 940.875813][ T840] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 940.881882][ T840] generic_probe+0xe7/0x280 [ 940.886390][ T840] ? usb_choose_configuration+0xae0/0xae0 [ 940.892111][ T840] usb_probe_device+0x146/0x200 [ 940.896963][ T840] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.902860][ T840] ? usb_register_device_driver+0x500/0x500 [ 940.908748][ T840] really_probe+0xd91/0x1f90 [ 940.913356][ T840] driver_probe_device+0x1ba/0x510 [ 940.918463][ T840] __device_attach_driver+0x5b8/0x790 [ 940.923830][ T840] bus_for_each_drv+0x28e/0x3b0 [ 940.928691][ T840] ? deferred_probe_work_func+0x400/0x400 [ 940.934413][ T840] __device_attach+0x489/0x750 [ 940.939171][ T840] device_initial_probe+0x4a/0x60 [ 940.944181][ T840] bus_probe_device+0x131/0x390 [ 940.949024][ T840] device_add+0x25b5/0x2df0 [ 940.953537][ T840] usb_new_device+0x23e5/0x2fb0 [ 940.958393][ T840] hub_event+0x581d/0x72f0 [ 940.962843][ T840] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.968719][ T840] ? led_work+0x720/0x720 [ 940.973135][ T840] ? led_work+0x720/0x720 [ 940.977456][ T840] process_one_work+0x1572/0x1ef0 [ 940.982488][ T840] worker_thread+0x111b/0x2460 [ 940.987267][ T840] kthread+0x4b5/0x4f0 [ 940.991320][ T840] ? process_one_work+0x1ef0/0x1ef0 [ 940.996515][ T840] ? kthread_blkcg+0xf0/0xf0 [ 941.001097][ T840] ret_from_fork+0x35/0x40 [ 941.006777][ T840] Kernel Offset: disabled [ 941.011096][ T840] Rebooting in 86400 seconds..