[ 83.854955][ T32] audit: type=1800 audit(1572132992.897:27): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 85.323879][ T32] kauditd_printk_skb: 1 callbacks suppressed [ 85.323909][ T32] audit: type=1800 audit(1572132994.377:29): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 85.362506][ T32] audit: type=1800 audit(1572132994.387:30): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.73' (ECDSA) to the list of known hosts. 2019/10/26 23:36:48 fuzzer started 2019/10/26 23:36:52 dialing manager at 10.128.0.26:34985 2019/10/26 23:36:52 syscalls: 2424 2019/10/26 23:36:52 code coverage: enabled 2019/10/26 23:36:52 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/26 23:36:52 extra coverage: enabled 2019/10/26 23:36:52 setuid sandbox: enabled 2019/10/26 23:36:52 namespace sandbox: enabled 2019/10/26 23:36:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/26 23:36:52 fault injection: enabled 2019/10/26 23:36:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/26 23:36:52 net packet injection: enabled 2019/10/26 23:36:52 net device setup: enabled 2019/10/26 23:36:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 23:40:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004ff7f0000000000000200000100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055338b2698ffffffff7710aa00ffe8001700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) epoll_create(0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCCONS(r4, 0x541d) connect$netlink(r1, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x40840000}, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) readlinkat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=""/56, 0x38) sched_getattr(r3, 0x0, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x400000, 0x0) ioctl$RTC_WIE_OFF(r6, 0x7010) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000280)={0x18}, 0x18) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x5, 0x1000}, 0x4) socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) syzkaller login: [ 344.334359][T11735] IPVS: ftp: loaded support on port[0] = 21 [ 344.483853][T11735] chnl_net:caif_netlink_parms(): no params data found [ 344.542746][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.549959][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.558746][T11735] device bridge_slave_0 entered promiscuous mode [ 344.569037][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.576337][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.585181][T11735] device bridge_slave_1 entered promiscuous mode [ 344.618334][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.631300][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.663806][T11735] team0: Port device team_slave_0 added [ 344.673020][T11735] team0: Port device team_slave_1 added [ 344.866698][T11735] device hsr_slave_0 entered promiscuous mode [ 345.002783][T11735] device hsr_slave_1 entered promiscuous mode [ 345.386631][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.393914][T11735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.401731][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.409023][T11735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.473863][ T3377] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.493542][ T3377] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.681535][T11735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.743257][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.752180][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.776691][T11735] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.819708][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.829593][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.838685][ T3377] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.845973][ T3377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.927301][T11735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.937821][T11735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.963564][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.973275][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.982323][ T3377] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.989590][ T3377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.998992][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.008951][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.018923][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.028752][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.038333][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.048153][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.057958][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.067236][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.076933][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.086231][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.185730][T11735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.363159][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.372294][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:40:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) 23:40:56 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) 23:40:56 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="34e7ff000000350000007f12b579fb64a18c15eeb876aeb1cd06000000e20093750ecb8a56df78a949b7d0e2"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 23:40:56 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="34e7ff000000350000007f12b579fb64a18c15eeb876aeb1cd06000000e20093750ecb8a56df78a949b7d0e2"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 23:40:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x400000000002127, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 347.983593][ C0] hrtimer: interrupt took 33059 ns [ 348.026582][T11795] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:40:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x7fff}, 0x10) 23:40:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={r4}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r4, 0x3b9, 0x8001, 0x1000}, &(0x7f0000000080)=0x10) r5 = socket$inet6(0xa, 0x100800000000002, 0x88) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00zJ\xf9\x7fE^0\xed7\x9a\xef\xf8\xc2^\rMq\xdc\\\x1eR^B\xcc\xc34k\x01\x8b\xeb\xf7\xc0Z~.\xb2\x1b-Z\x94\xe1\xcd{\x90\x01\xeb\xef\x1dm\xa6\b[\xe4=^\xa3\nR\xeb\x8coV74\x80g\x06\xe1\xd3\xeev\xb9\xef\xd1;\x96\x9bj\x9c-\xd5 \xad\xd5\xc6\x96\xaf3\xd1qG\x9f\x05\xfe\x92\xc8\xc4\xed\xa18\x90\xa0\xac\xfe\xaf\xda\x1bS\xcf\xc1\x9e\x81}F\xcc\x85W\xc9\\\xe8\xe0\xe2\x19!^JP\x19}R\xd8\xf5\x88\xf6\x9c\x82\x9c\xec\xce\xe390\'#\x9a\xad\x96\r\x02`d\xaa\n?%\xbe\xa4X\xd5P\xdc\xe0\xaa\x8c&\xc8O&\x1d\x17\xd8AyaM\x00\x00mh\x8e!\xdf\xdc\xd8;\xe3hc\x1f\x8b\xd4\x8b\xcc_\xaa?\xfeI |ulZ\xe2-\xc5HT<\v\x1b\xcfT\xb2\xaf\xb8\xb7\xc4<6\xcf\xb3\x8e\xceG\xaa\x12\xc3\xde\x00;\xc0D](\xeb\xb9\xd9iV\xebA\xd2\x92B\xc3\x02\x85C\xf9\xfc\v:\x1c\xbd9\t\xa8\xe6c\xd8\xcb\x8aK\xebe\xfe-\xf9D\x1f\xecq\x95\xd7\x9f\xd7Bs\x14\x88C\x8f\xb6\xebp1\xb1\xdbR\x00\x00\x00\x00\x00\x00\x00\x00') connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r5, r6, 0x0, 0x400000000088001) write(r5, 0x0, 0x609) 23:40:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x28}}, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000001080)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x6) socket$isdn_base(0x22, 0x3, 0x0) fcntl$setsig(r4, 0xa, 0x12) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) ptrace$getregs(0x9, r3, 0xfff, &(0x7f0000000080)=""/82) 23:40:57 executing program 1: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x701000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1a8, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x20000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @broadcast}, 0x80000001}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x7}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xae}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4008830}, 0x80094) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000440)="99f59859f7af6ffca5630068baeae36a61") r4 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x8cb, 0x40084) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x7ce3f6bfbd90b3cc}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@report={0x8c, 0x20, 0xb01, 0x70bd27, 0x25dfdbfb, {0x6c, {@in=@broadcast, @in6=@mcast1, 0x4e22, 0x0, 0x4e22, 0x3, 0xa, 0x20, 0x20, 0x29, 0x0, r5}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd27, 0x70bd28, 0x70bd2b, 0x70bd28, 0x1, [0x1, 0xc97]}}, @lastused={0xc}]}, 0x8c}}, 0x40000) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x2000, 0x2, 0x3, 0x99fb, 0x0, [{0x7, 0x1, 0x0, [], 0x9}, {0x6, 0x5, 0x7, [], 0x81}, {0x9, 0x1, 0x2c, [], 0x6}, {0x3d, 0x1, 0x12, [], 0xc4}, {0x3, 0x7, 0x5, [], 0x1}, {0x0, 0x2, 0x4, [], 0x6}, {0x3f, 0x4, 0x10, [], 0x5}, {0xa2, 0xfb}, {0xfa, 0x1f, 0xff}, {0x9f, 0x81, 0x1, [], 0x2}, {0xc4, 0x8, 0x5, [], 0xfc}, {0x3b, 0x7, 0x3, [], 0x7}, {0x2, 0x2, 0xfe, [], 0xf3}, {0x49, 0x2, 0x6, [], 0x4}, {0xfb, 0x1f, 0xff, [], 0x4}, {0x0, 0x9, 0xf9, [], 0xdd}, {0x7, 0x2, 0x7f, [], 0x7}, {0xc9, 0x5, 0x5, [], 0xa1}, {0x5, 0xff, 0x5, [], 0x3f}, {0x8, 0x40, 0xa2}, {0x8, 0x1, 0x6, [], 0x62}, {0x8, 0x8, 0x0, [], 0xf8}, {0x7, 0xff, 0x6, [], 0x38}, {0x8, 0x94, 0x5, [], 0x2}]}}) r7 = dup(r4) ioctl$DRM_IOCTL_IRQ_BUSID(r7, 0xc0106403, &(0x7f00000007c0)={0x4, 0x216a, 0x80000000, 0x1}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x181800, 0x0) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000840)={"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"}) fcntl$getownex(r7, 0x10, &(0x7f0000000c40)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000c80)={[], 0x7, 0x8, 0x0, 0xffffffffffffffe0, 0x7, r9}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x3, 0x4) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r10, 0xc0385650, &(0x7f0000000d40)={{0x1, @name="9082b3601507108235ea265874da321bc6cb2bae66cec72eabefe00269e8a161"}, 0x8, 0x6, 0x2}) ioctl$TIOCLINUX3(r7, 0x541c, &(0x7f0000000d80)) ioctl$sock_netdev_private(r10, 0x89f1, &(0x7f0000000dc0)="0dcab987d2112614dfdf740f8fc78bcab0a64faefca51164ccafb14a44bcf72be1862754d771eb746462bd0b3f499a763cffe53f811758c23016718386ec81859ba73f817b8236c9dcf0d2cc39f232aed45134c8aaa12c9cc0a78b0ecc4afbb9f7970d43129214ae25ef6386f2a49f418050be76e4c7a4f3a6cc9b484b3789e0510eeefec2b67ef9394b4812b175c20f01ee0576764fb0e75c178537b2d80957ad0d269bdc803941e498ff2b4b68e3f9c7fbf4360ef55588a773a1d88904d2901a478fc6df1c898756233944f56bffd2449e5f332e8f63f3") ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000ec0)={0x9, "b166da9ba141c2462d107543c1c4c17d22c00cc63122744902744959ff29ba96", 0x2, 0x8, 0x54ff05a7, 0x8, 0x8, 0x1, 0x1ff, 0x9}) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/cachefiles\x00', 0x10200, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, &(0x7f0000000f80)=0x4000) r12 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000fc0)=@name, &(0x7f0000001000)=0x10, 0xc0c00) r13 = syz_open_dev$usbfs(&(0x7f0000001040)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x324802) sendfile(r12, r13, &(0x7f0000001080), 0x0) futex(&(0x7f00000010c0)=0x1, 0x81, 0x2, &(0x7f0000001100)={0x77359400}, &(0x7f0000001140), 0x2) [ 349.148214][T11810] IPVS: ftp: loaded support on port[0] = 21 [ 349.293596][T11810] chnl_net:caif_netlink_parms(): no params data found [ 349.352749][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.359961][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.368830][T11810] device bridge_slave_0 entered promiscuous mode [ 349.402620][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.409840][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.419166][T11810] device bridge_slave_1 entered promiscuous mode 23:40:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000002c0)=""/117) sendmsg$nl_netfilter(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x4}}, 0x0) fcntl$setsig(r3, 0xa, 0x32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r6, r7, 0x400, 0x19, &(0x7f0000000000)="6ffba3a3aba7a3303bb2f6460604a4133689ba249353ad0902", 0x61, 0x9, 0x92, 0x81, 0x7cdb, 0x2, 0x9, 'syz0\x00'}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 349.455878][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.479651][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.529078][T11816] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 349.538286][T11816] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 349.551384][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.621172][T11810] team0: Port device team_slave_0 added [ 349.630622][T11810] team0: Port device team_slave_1 added [ 349.713098][T11819] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 349.724493][T11819] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 349.726640][T11810] device hsr_slave_0 entered promiscuous mode [ 349.782717][T11810] device hsr_slave_1 entered promiscuous mode [ 349.822809][T11810] debugfs: Directory 'hsr0' with parent '/' already present! [ 349.834228][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.925879][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.933190][T11810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.940942][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.948267][T11810] bridge0: port 1(bridge_slave_0) entered forwarding state 23:40:59 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x33c, 0xac1548f7f0be0fcb) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) unshare(0x2000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000100)={0x8, 0x5, 0x22, "2683ce4853d2f53f2c0cfd86e501d34e5d0f7a81053cfa04b102afbed2bc2a42b1df12703ce7a01acf9235eae1ac2505e02a410fd5a2225c75d63321", 0x2f, "fd8ff1f4bae926ac33e2f6a4c66975ba5e5eb7a38f3e37540543248b1ead41fb43bc5e2cc7567a8e40f51d3bd6b9d0f29dba0fe4c5a07a1b30a9c91d", 0x40}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xff) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0x4008ae06) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x200000) [ 350.263479][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.307465][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.362371][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.413070][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state 23:40:59 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) [ 350.457024][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 350.518437][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.542942][T11850] mmap: syz-executor.0 (11850) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 350.578662][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.588467][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.597518][ T3962] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.604791][ T3962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.700727][T11810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.711267][T11810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.753352][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.763395][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.772460][ T3962] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.779751][ T3962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.788415][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.798456][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.808529][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.818423][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.828050][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.838043][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.847688][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.856898][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.866511][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.875707][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.981714][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 23:41:00 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x7, 0xc, [0x0, 0x2, 0x805f]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x8f, @loopback, 0x9}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a001000044}, [@ldst={0x2, 0x0, 0x87a275e243a55113}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 351.265570][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.275126][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:41:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x9, 0xba, 0x4, 0x0, 0x0, 0x4, 0x28aa2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x3, @perf_bp={&(0x7f00000000c0), 0x5f10aa4fc0a447cd}, 0xb089aa9ac6817480, 0x1f, 0x0, 0x0, 0x7dc, 0x0, 0x7c}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x4c0a40) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff, 0x80000001, 0x10001}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x151c40, 0x50) ftruncate(0xffffffffffffffff, 0x200004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000200)=0x1) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff}, 0xc) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x15c266fa, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r4, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 23:41:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x9, 0xba, 0x4, 0x0, 0x0, 0x4, 0x28aa2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x3, @perf_bp={&(0x7f00000000c0), 0x5f10aa4fc0a447cd}, 0xb089aa9ac6817480, 0x1f, 0x0, 0x0, 0x7dc, 0x0, 0x7c}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x4c0a40) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff, 0x80000001, 0x10001}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x151c40, 0x50) ftruncate(0xffffffffffffffff, 0x200004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000200)=0x1) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff}, 0xc) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x15c266fa, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r4, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 23:41:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$usbfs(r2, &(0x7f0000000880)=""/108, 0x6c) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0xee, {0xee, 0xf, "988a5078d6ee4a234fcb38d4a98fc9a345b207d9f727be6c0a09c0250d9d00d9d019b38a4dcc3e1c276ba0ca62345210633d324c530063e0a3e703b23baf25282ddadfd50d0d19885d7c3607f02dd1d6038f500e2b0f67e704e1f3ada2e0beda86b29bbec862a4f8db6426dfe883deb019011fece0be0b67d355a09bbed8dcc70ffd0eb22a0cefc0827d496f51d20b09c1398c3a4c37f5f64a48dac51590a17bd058ead84cde9491c131a8c5a63b00bca6eeee2b04e7d5285a545807556921e52d15916c0c6d362acadb46acb40e286d545bad93fa48c862bbf910e905718317d3e4653c7cada2f60e194fd9"}}, &(0x7f0000000180)={0x0, 0x3, 0xac, @string={0xac, 0x3, "05f72ccfe608734e5709c56b0309d09ebaedb1be5f417044c455cb924e9dd21743d5fb805aeaa964a9f7d31b2003511fbe7fa2c049f6975d902af219a56d71e4a487ba5afec30519ddce06dd9e9e5c7a232f3f1cd344373d05f3cbc62c252b53888201c75570a9cc90a9ffbe52254f432bab8331697a9800b6f9cc937571b2257e694ee41f66d6ac5635133767e68cc00bafa9e05db4be18e338388e2ced6a25d751518c5465de8f1aaf"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="000fd18c8d82050f2000020710021a508100141004026eb6becc0502ae7dca86033a124296c6"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x7, 0x1f, "3cfe3c3c", "ac7e133c"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x1c, 0x8, 0xc0, 0x3, 0x0, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="2009040000007f8c93a15188deca85ba67cd4af917cb66cfcfcdcbc31b101d329425510b8eb37f3d6fd6aaac4e0d15501f"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x5e4, 0x74, [0xf]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000540)={0x40, 0xb, 0x2, '1u'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xfff8}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1442d9007e553263}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "fde0"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x6f4}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001780)={0xac, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) [ 352.532213][ T3962] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 352.772024][ T3962] usb 2-1: Using ep0 maxpacket: 8 [ 352.892566][ T3962] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 352.900934][ T3962] usb 2-1: config 0 has no interface number 0 [ 352.907233][ T3962] usb 2-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 352.916425][ T3962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.957468][ T3962] usb 2-1: config 0 descriptor?? [ 353.006921][ T3962] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 353.652175][ T3962] gspca_ov534_9: reg_w failed -71 [ 354.042130][ T3962] gspca_ov534_9: Unknown sensor 0000 [ 354.042364][ T3962] ov534_9: probe of 2-1:0.212 failed with error -22 [ 354.070709][ T3962] usb 2-1: USB disconnect, device number 2 [ 354.492970][ T3962] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 354.732423][ T3962] usb 2-1: Using ep0 maxpacket: 8 [ 354.852742][ T3962] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 354.861049][ T3962] usb 2-1: config 0 has no interface number 0 [ 354.867393][ T3962] usb 2-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 354.876602][ T3962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.953222][ T3962] usb 2-1: config 0 descriptor?? [ 354.997160][ T3962] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 355.282442][ T3962] gspca_ov534_9: reg_w failed -71 23:41:04 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x1c, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}}, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x34) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000340)) r3 = fcntl$getown(0xffffffffffffffff, 0x9) tgkill(r1, r3, 0x27) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000040)={0x81, 0x3, {0x3, 0x2, 0x5, 0x1, 0x7}}) [ 355.487999][T11885] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:41:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4d, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0xfffffff9, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xffffffffffffffe2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 355.620295][T11887] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 23:41:04 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000000c0)=""/242, 0xf2}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/54, 0x36}, {&(0x7f0000001200)=""/173, 0xad}, {&(0x7f00000012c0)=""/232, 0xe8}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/103, 0x67}], 0x8, &(0x7f0000001500)=""/110, 0x6e}, 0x1e2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6erspan0\x00', 0x10) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001640)={0x0, r1, 0x400, 0x7, 0x3, 0x2}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000001680)={{0xff, 0xfd, 0x72, 0x2, 0x7b, 0x3}, 0x1ff}) r2 = accept4$inet(r0, &(0x7f00000016c0), &(0x7f0000001700)=0x10, 0x80000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000001740)={'veth0_to_team\x00', 0x7}) r3 = dup(0xffffffffffffffff) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000001780)=0x8) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000001800)={0x18, 0x0, {0x4, @remote, 'bond_slave_0\x00'}}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001840)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000001880)={0x7f, 0x7f, 0xf0, 0x6, 0x1f, 0x1f, 0x4, 0x20, 0x1, 0x40, 0x4}, 0xb) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/hwrng\x00', 0x1e4f0e0a4bc56c25, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000001900)={0x6, 0xffffffffffffe5b8, 0x800}) r7 = syz_open_dev$vcsa(&(0x7f0000001940)='/dev/vcsa#\x00', 0x5, 0x8000) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000001980)={0x18, 0x1, 0x0, {0x6}}, 0x18) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000019c0)={'ipvs\x00'}, &(0x7f0000001a00)=0x1e) r8 = syz_open_dev$dspn(&(0x7f0000001a40)='/dev/dsp#\x00', 0x8, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000001a80)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001ac0)=0x1c) r9 = syz_open_dev$mice(&(0x7f0000001b00)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000001b40)) pipe2(&(0x7f0000001b80)={0xffffffffffffffff}, 0x800) ioctl$TIOCGLCKTRMIOS(r10, 0x5456, &(0x7f0000001bc0)={0x8db1, 0x2, 0x6, 0x23ed6ade, 0xa, 0x2, 0x8, 0x3f, 0x5, 0x5, 0x3, 0x4}) setxattr$security_smack_transmute(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001c80)='TRUE', 0x4, 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/urandom\x00', 0x8000, 0x0) r11 = syz_open_dev$vcsn(&(0x7f0000001d00)='/dev/vcs#\x00', 0x1, 0x400) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001d40)=@assoc_value, &(0x7f0000001d80)=0x8) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCOUTQNSD(r12, 0x894b, &(0x7f0000001dc0)) 23:41:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x10}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='GPL\b\xefu\xfeh\x8c`@\xb3|$\xfe\x0e\xf486\x81\xf4\xe4\x1b.\x95C\xb3\xe2\xc4\x9e\'\xc97\xffG\xe9\xb5M\x8d\x8d\xd5u\xbb\x04\xae\xbd\xe4', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 355.792086][ T3962] gspca_ov534_9: Unknown sensor 0000 [ 355.792271][ T3962] ov534_9: probe of 2-1:0.212 failed with error -22 [ 355.823411][ T3962] usb 2-1: USB disconnect, device number 3 23:41:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x3, 'sed\x00', 0x23, 0x800, 0x1e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c00f1fe030007206a1400000000000000000000bae8b99a95730c5a6a9151", @ANYRES32=r1, @ANYBLOB="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"], 0x7c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492813, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000500)="230aa2c76b27217e742ca216fbfbeff68d0e296d32d222679920c5158edd16b5e7776ac6c268f1b3adb58409507f46a8f4532709e0845af33ae543e2640bc4764b8b1623394d122ac5c33fd51240f90dbf14fa33915b914ce534f6bac455f20544c8ff6d910960b5732b3666aeac152f31dbaa22c547ca44796acbf6ffe48dbd18f298f273192c56cf6818155822a38c52fdf1826436313ec18277fc", 0x9c}, {&(0x7f0000000480)="ca1a2256373d094613001c43fe82ef453c34fc45530fadb57415b62a01cab9965f49afa1d7c86f9a01bc01c0d7c98bb8a92f123ac2fb2e2d55df034e43bdcf4c2767142e32c40531a8c63ba01e45d85a776f149af85b036fa81d77eb472735fd3acedcefafa39d67f7", 0x69}, {&(0x7f00000001c0)="48bade04ee4bc211f13ba6f4f67db770968227144dd6030929c123b6c6f134cd7588fc32cd6048f93ace18693226487966b0ad73d0986cbbaf15d083172c463939256dfbf3ac70991a80aaa494d89d7f50e98eb8daf34f5593ce", 0x26f}, {&(0x7f0000000340)="1d2a5af92db26b9f7069ebb41d2d327e751e201d584ce54c6aa217e85dcd7a83bcfa259b3ad7e41445c1ddc5f115e2f4ea", 0x31}], 0x4}, 0x20000001) [ 355.990852][T11895] IPVS: set_ctl: invalid protocol: 0 172.20.20.12:20003 [ 356.029358][T11896] IPVS: set_ctl: invalid protocol: 0 172.20.20.12:20003 23:41:05 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000480)={0x3000000000000000, 0xc2bc05380442d3ec}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000080)) [ 356.184376][T11899] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 356.281547][T11899] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 23:41:05 executing program 0: set_mempolicy(0x4003, &(0x7f00000000c0)=0x4, 0x4) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000100)=ANY=[@ANYBLOB="cd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee9b000000000000000000"]) r1 = memfd_create(&(0x7f0000000380)='!\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x2000005) [ 356.469531][T11904] IPVS: ftp: loaded support on port[0] = 21 [ 356.652883][T11904] chnl_net:caif_netlink_parms(): no params data found [ 356.744776][T11904] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.752501][T11904] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.761303][T11904] device bridge_slave_0 entered promiscuous mode [ 356.771515][T11904] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.778816][T11904] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.787854][T11904] device bridge_slave_1 entered promiscuous mode [ 356.870994][T11904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.907173][T11904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.948400][T11904] team0: Port device team_slave_0 added [ 356.959016][T11904] team0: Port device team_slave_1 added 23:41:06 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = inotify_init() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000100)=0x0) rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0/file1/file0\x00') ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000180)=r3) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0/file1\x00', 0x20000000) inotify_add_watch(r0, &(0x7f0000000000)='./file0/file1\x00', 0x2000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000640)) inotify_add_watch(r0, &(0x7f0000000600)='./file0/file0\x00', 0x400) umount2(&(0x7f0000000200)='./file0\x00', 0x0) [ 357.037710][T11904] device hsr_slave_0 entered promiscuous mode [ 357.082791][T11904] device hsr_slave_1 entered promiscuous mode [ 357.122065][T11904] debugfs: Directory 'hsr0' with parent '/' already present! [ 357.428752][T11904] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.436028][T11904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.443850][T11904] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.451065][T11904] bridge0: port 1(bridge_slave_0) entered forwarding state 23:41:06 executing program 0: r0 = socket(0x10, 0x800000000080002, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0xfffffe8b, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900fdfff5c840e10cff105d0500000008000300060000000000cf45f6f1ebf5800007ec839f430087000073b2e124a9ddc4035b040029e94a000000000000000000000000000000000000005001ffffffedc40800000000000004993fd3d4710038f12a25dba96218524af6d3ff44be8b35fbe0058d8dac2624"], 0x28}}, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) clock_gettime(0x0, &(0x7f0000008bc0)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$unix(r5, &(0x7f0000008cc0)="b679752382c3ca0eb88b40716fabe915d51e2b4325af5df2fa8ef38b0c89ebfede071231bfe26996d1b29d205684a06c2a86c833b7282722d1b2e15c4254a427ce188eaf70b5def5d36ca2bfe28b1b2356948ddfe3a369decc4ff4c745240687addb1f3521f4c9aaf5a35723f80cb99ee017913305f9d2d7b2c9b5b871b1bf2908b6b0dde354aedbc6df2783120cab9ecd00d0bb894bae3398fecc243bf799753f8da9ad7ab0430622e45aef395c7180820515e71e75", 0xb6, 0x10, &(0x7f0000008d80)=@file={0x2, './file0\x00'}, 0x6e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, &(0x7f0000008e00)={0x5, 0x0, 0x5, 0x0, 'syz0\x00', 0x5}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008c40)='/dev/vsock\x00', 0x200001, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000008c80)=0x20, 0x4) recvmmsg(r1, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/231, 0xe7}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/40, 0x28}], 0x5}, 0x10000}, {{&(0x7f0000000440)=@rc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f0000000500)=""/119, 0x77}, 0x6}, {{&(0x7f0000000580)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)=""/110, 0x6e}, {&(0x7f0000000600)=""/52, 0x34}], 0x2}, 0x3}, {{&(0x7f0000001740)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000037c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x2}, 0x8}, {{&(0x7f0000003800)=@vsock, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003880)=""/149, 0x95}, {&(0x7f0000003940)=""/16, 0x10}, {&(0x7f0000003980)=""/195, 0xc3}, {&(0x7f0000003a80)=""/151, 0x97}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/221, 0xdd}, {&(0x7f0000003d40)=""/223, 0xdf}], 0x7, &(0x7f0000003ec0)=""/88, 0x58}}, {{&(0x7f0000003f40)=@hci, 0x80, &(0x7f0000004100)=[{&(0x7f0000003fc0)=""/80, 0x50}, {&(0x7f0000004040)=""/130, 0x82}], 0x2, &(0x7f0000004140)=""/3, 0x3}, 0xe906}, {{&(0x7f0000004180), 0x80, &(0x7f0000007500)=[{&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/88, 0x58}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/38, 0x26}, {&(0x7f00000072c0)=""/56, 0x38}, {&(0x7f0000007300)=""/165, 0xa5}, {&(0x7f00000073c0)=""/27, 0x1b}, {&(0x7f0000007400)=""/115, 0x73}, {&(0x7f0000007480)=""/128, 0x80}], 0xa, &(0x7f00000075c0)=""/206, 0xce}, 0x7}, {{0x0, 0x0, &(0x7f00000088c0)=[{&(0x7f00000076c0)=""/139, 0x8b}, {&(0x7f0000007780)=""/51, 0x33}, {&(0x7f00000077c0)=""/4096, 0x1000}, {&(0x7f00000087c0)=""/208, 0xd0}], 0x4, &(0x7f0000008900)=""/167, 0xa7}, 0x89}], 0x8, 0x2000, &(0x7f0000008c00)={r2, r3+30000000}) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249266b, 0x0) [ 357.623298][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.649282][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.660715][T11938] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 23:41:06 executing program 0: arch_prctl$ARCH_SET_GS(0x1001, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/291], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) [ 357.936551][T11904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.021415][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.030425][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.048146][T11904] 8021q: adding VLAN 0 to HW filter on device team0 23:41:07 executing program 0: arch_prctl$ARCH_SET_GS(0x1001, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/291], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) [ 358.093785][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.104279][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.113369][ T3962] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.120555][ T3962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.236950][T11904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.247940][T11904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.281677][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.291338][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.300363][ T3962] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.307611][ T3962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.316909][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.327030][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 358.337119][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.347133][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.356870][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.366819][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.376477][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.385725][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.395491][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.404824][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 23:41:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000080)=0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10002, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2f6, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @descriptor="f94898ac4ce24109"}}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 358.515212][T11904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.838144][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.847799][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:41:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000002100000000800012001000010069703665727370616e0000006c00060000000000000000000080ffffe00000020400120014000700c4ddbba432f1ed5a7009fd4a6dea08caf7000700fe800000000000000400000000000000000000bb14000700ff0200000000000000000000000000010c000a00aaaaaaaaaa1c00"/148], 0xac}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000000)=""/40) 23:41:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000fed000/0x4000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) [ 359.112642][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.160938][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/de}/\xde\x83\x00\x00controlC#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000700)={0x0, {{0x2, 0x0, @remote}}, 0x0, 0x1, [{{0x2, 0x0, @loopback}}]}, 0x10c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, '\x00', 0x6}, 0x4, 0x20, 0x3, 0x0, 0x0, 0xfffffffd, 'syz1\x00', &(0x7f0000000180)=['lo%\x00', '\x00', 'syz1\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc6\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'], 0x2b4, [], [0x0, 0x0, 0x0, 0x1]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, {0x306, @dev={[], 0x1c}}, 0x26, {0x2, 0x4e21, @multicast2}, 'yam0\x00'}) ptrace(0x4208, 0x0) 23:41:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000009b007bef600f5c489544328013f37fb0bdeaed9f0358662e0bad191c350cca6242b1e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c503d33bc5912112aa72850a954cba528d15ada1142ee0d359897a7c6d8e9"], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x5, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0xe, 0x1}, {0x3, 0x5}, {0xf, 0x5}]}, @datasec={0x10, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x450c8e01, 0x9}, {0x1, 0x3, 0x6}], '='}, @struct={0x2, 0x2, 0x0, 0x4, 0x1, 0x20, [{0x1, 0x5}, {0xf, 0x5, 0x8}]}]}, {0x0, [0x0, 0x0, 0x60]}}, &(0x7f0000000280)=""/222, 0x95, 0xde, 0x1}, 0x20) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffcf2, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r4, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xaa0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x10, 0xa92, 0x9}, &(0x7f0000000100)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r3, 0x0, 0x22, &(0x7f0000000300)='ppp0{)wlan1-proccpusetlomd5sumGPL\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc, &(0x7f00000001c0)='cgroupwlan0\x00', r5}, 0x30) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r9 = dup2(r6, r8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4000000004001fe) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:41:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x121c00, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x11, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xd}]}}}]}, 0x3c}}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x8418040}, 0xc) [ 359.408829][T11974] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 359.422497][ T3962] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 359.443407][T11974] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 359.531199][T11977] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.574014][T11978] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 23:41:08 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000eacf96204e080110c8060000000109021b0001000000000904c100016615130009058f5302000000004dea2d321606556564d9a20b016600025b15bf2e279202a6a800ad15aaaa90bd25b7bd64b4418866a168f1053bc90def6fe5f7ca7e7b11e0c93dcb64cf6f8c9b411e87a521260b575b8b8de7a434b86547d501bd304025cf68e725467bf7eb62a02b34781e07909bf1f278d83ab1b192e73951355dfe73e5a97d71d7defa3524aac9efd603cf38b979d7ab47f7605e68e2b69e8e3de5be0f8abe0ef903bf06e1babc99acafa1feeaf9da381b914aba993b904b3ac4ac847fc7"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000000)) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) [ 359.662126][ T3962] usb 2-1: Using ep0 maxpacket: 16 23:41:08 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x80000c0, &(0x7f0000000000)=0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r13, 0x82b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x284000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r13, 0x400, 0x70bd26, 0x2, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x8080, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x9b5a2cfac803e458}, 0x80) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup2(r14, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) io_submit(r2, 0x8, &(0x7f0000000840)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r3, &(0x7f0000000180)="eb2c71781a5f042bf3235efc57aba9607c86c52f25764d17ccb8c92a2d277e714274bc6421b927d77a4f8a696f7b685dd759f6f6b97456bc8da75728455ec64423b59b26938af13ee58de710e3b60d30407c5dea1e2cc4f966", 0x59, 0xcd64, 0x0, 0x3536390233a85fb4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x40, r0, &(0x7f00000002c0)="394f1e18593e8aaf4b2f6e9a698108f9b43a18d65ce565ad372a9417294a3a73394027373c9fc9da7e3af28a0a5b8d0ba8efd8baf1e46e7efc0d28c16ac5d476b9f1ba96c67f76be1de0cc5cbf3364241477dad90424b319625abfa17428cf792c09836cb4bd1661e0d06afec8", 0x6d, 0x800, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3ff, r4, &(0x7f00000003c0)="e6718bb467d5312c9c2bc64e40bb22253201b7e2d69e251291b1f437bac39a480ad77fd963509c7835121dd42a5205a93430ac34fa052de6ace051db34339c3280f7137a483a592d8ef72e81a3c4deffc942e96ff174c89d47113468851a94a83f138e769051c2f3de09fa058dc98af6653d8cdc5d789fe90b661e722c1e4bff1bc06ffbb17d5257d8703824df8a", 0x8e, 0x3, 0x0, 0xac14e0a1026b2364, r6}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x9, r7, &(0x7f0000000340)="4de4ba", 0x3, 0x100000001, 0x0, 0x2, r9}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x100, 0xffffffffffffffff, &(0x7f00000004c0)="672482a39a67b92d174e36b99c7eaa8d0a06e8646d4bdea8fc2ece613226a1f829f775b6deb8d3ad9aa8d0b5cbe81b342ac89ece3b59246fa6994093308e84273deb5a13cbeaa1fd999457fa01e45edfe7be3c65ac539a61", 0x58, 0x10000, 0x0, 0x1, r9}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0xffff, r10, &(0x7f0000000580)="57110d13b3ff45767ecdf4f74408e5723d5f9526ecf27db6eee5e745fb62073dbc5077056d437dc439a74c0a6484c614c49ecba2a0e127964c9cec7b1ae470c9ec6d6c32c64b630c913751944b384249cb6199882d6e5354c632cc419d7dd8834bf8ecdd97ea189e3f906374827c64de2b3312d36d8ecd3cad102dedf1c68bd6b2060615d41b4e9d46c8a9b6767603fa7613fdbc5e7f7e5298269c4604bd6b416c34f79c8f3ca6b5b6a9695d876bc52246b691bc1972ef3d6a6d5251c4d5f98fb73848a4dfb3b712dbb402cef6028d85164585e634a14b61c92320f01885d5e42f25d285f46f1246", 0xe8, 0x4, 0x0, 0x2, r6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x7, r11, &(0x7f00000006c0)="e972965b25348ccae98f455d6d5709611e6f1811f7d18004d2219ebbd0711c69916ca2116876418f214b60c96318e04dc90b340bbc1f5a9261e26c8f96f98522e3c0bd96852adfebe62d2d0e4e7ac7f937bb3d6c273020faafa030aec6a200a0fc6c8b35dc02c8999170ee94098aee53d83689deda6dcf934a3424db1417a0eca51152de50bbd742d2631c64a9ab8939cc76c16ff8fd86fc7c76727a9034c1d18a5b1c44f225e4d6d4172eba8105881b895336c3180cecb071f760ef", 0xbc, 0xe5e, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x1f, r4, &(0x7f00000007c0), 0xfffffffffffffefd, 0x1ff, 0x0, 0x2, r15}]) io_submit(r2, 0x2000019e, &(0x7f0000000080)) [ 359.785835][T11987] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 359.786749][ T3962] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 359.794836][T11987] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 359.802373][ T3962] usb 2-1: config 0 has no interface number 0 [ 359.802468][ T3962] usb 2-1: config 0 interface 249 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 359.812754][T11987] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 359.816706][ T3962] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=f9.e7 [ 359.830593][T11987] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 359.834614][ T3962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.845251][T11987] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 23:41:08 executing program 2: unshare(0x28020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) [ 359.972724][ T3962] usb 2-1: config 0 descriptor?? [ 360.015129][ T3962] cyberjack 2-1:0.249: Reiner SCT Cyberjack USB card reader converter detected [ 360.025645][ T3962] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 360.042798][ T3377] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 360.075116][ T3962] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 23:41:09 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0xb, {0x6, 0xe4e, 0x6, 0xff85}, {0x2, 0x9, 0x3f, 0x3c}, {0x7, 0x80}}) r3 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eb080018000aac0f000586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) [ 360.222210][ T3962] usb 2-1: USB disconnect, device number 4 [ 360.238339][T11997] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.274352][ T3962] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 360.286279][ T3962] cyberjack 2-1:0.249: device disconnected [ 360.303956][ T3377] usb 1-1: Using ep0 maxpacket: 32 23:41:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @rand_addr=0x4}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x0, @remote, 0x401}, @in={0x2, 0x4e24, @broadcast}], 0x5c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x4000) 23:41:09 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x8, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0xbb030000, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{}, {}, {}, {[@dev]}, {}, {[@dev]}, {}, {}, {[@broadcast]}, {[@broadcast]}]}, @generic={0x0, 0x2}]}}}}}}}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001740)='/dev/snd/pcmC#D#p\x00', 0x2, 0x3180) ioctl$void(r0, 0x5450) [ 360.443711][ T3377] usb 1-1: config 0 has an invalid interface number: 193 but max is 0 [ 360.452090][ T3377] usb 1-1: config 0 has no interface number 0 [ 360.458304][ T3377] usb 1-1: config 0 interface 193 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.469604][ T3377] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice= 6.c8 [ 360.478766][ T3377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.512282][ T3377] usb 1-1: config 0 descriptor?? 23:41:09 executing program 2: r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e1810000000e8bd6efb120009000e000100400000ff050005001204", 0x2e}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000000c0)={'team_slave_1\x00', 0x5240}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$9p(r4, &(0x7f0000000100)="ce46370e6984aa8e098714827a72b8e721b41226f99b42b9a7101ed0e436e621be07bd89368aa89a5aa836d975bdd2669d3dc35a50f9833d33857d2537728a6aa7f4f0f7941dbec823a15e64f159", 0x4e) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)) [ 360.559675][ T3377] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.193/input/input5 23:41:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1c7af4554a08bf6, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x1}, 0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000380)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYBLOB="66b3419c00"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000640), &(0x7f0000000680)=0x4) r8 = accept4$unix(r5, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x43be2072dbaa4ee6) recvfrom$unix(r8, &(0x7f0000000500)=""/175, 0xaf, 0x0, &(0x7f00000005c0)=@file={0x2, './file0\x00'}, 0x6e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x2) r9 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x24) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000100)=0x93947935485a4370, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='.selinuxbdev\x00', 0xd, 0x5) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setitimer(0x4bff7e6a649db555, &(0x7f0000000080)={{}, {0x0, 0x2710}}, &(0x7f00000001c0)) r11 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg(r11, &(0x7f0000000c00), 0x4000000000001e6, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) [ 360.835253][T11845] usb 1-1: USB disconnect, device number 2 [ 361.002203][ T3962] usb 2-1: new high-speed USB device number 5 using dummy_hcd 23:41:10 executing program 1: r0 = socket$inet(0x10, 0x3, 0x20000000006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x440202) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a08a1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 23:41:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='6', 0x1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x800, 0x6, 0x20, 0x4}) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000000c0)=""/129) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x102, 0x20) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0xfff, 0x3, 0x4, 0x3f}) 23:41:10 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x105400, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000080)={0x3, 0x1, 0xffff, 0x3, 0x401, 0x1}) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfff, 0x2) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000200)=0x200, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f00000001c0)={'team0\x00', @ifru_hwaddr=@dev={[], 0x1d}}) r6 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x4, 0x40000) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x7, 0x81, 0x3f, 0x8, 0x2, 0x5, 0x0], 0x7, 0x6, 0x7fff, 0xffffffc0, 0x9, 0x1f, {0xfff, 0x9, 0x0, 0x2, 0x2, 0x0, 0x8, 0x3, 0xfffb, 0x1, 0x7fff, 0x7, 0x6, 0xffff0001, "ebcf4c25b879862ee48c3f35a579d7cc290ca5bc936e1dd9e72e573a9aed7514"}}) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0xfdfffffffffffffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x2b, "c16630d617adb47ffb86db545cfb0b9d00f67f00ae7f68361914c8ea11201ec3905328faa4d65ff2446876"}, &(0x7f0000000400)=0x33) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000440)={r10, @in6={{0xa, 0x4e22, 0x2, @rand_addr="1d8a3c279780594f95c5bfe1f45128f8", 0x20}}, 0xa40, 0x60}, 0x90) sendmsg$nl_netfilter(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000202010000409fbc60ca30e2d215434810000200040001000800020004000180534e1a93aa06e6114e3beb72467eb02f8cd6ef9eb43667d9aaa0c578b4e543c0fa99ce5dbc41785ddc50ecccf7bd0c700ea8a977b6ae2c81343a2c20abbd1ec8d80e55f070c474c2ae941f168b4dc90ec6b412c52467c664c3f1b8e88c1ddf90e586689835561a16937c3a9da860aa9ff97e13c903ff594e1579"], 0x24}}, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000500)={'broute\x00'}, &(0x7f0000000580)=0x78) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000240)=0x2, 0x4) [ 361.363039][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.393725][T12028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.404514][T12031] validate_nla: 5 callbacks suppressed [ 361.404537][T12031] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 23:41:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f00000001c0)='pagemap\x00') r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000340)={r10}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r10, 0x9, 0x7900}, &(0x7f00000000c0)=0x8) sendfile(r4, r7, 0x0, 0x50000000000443) 23:41:10 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x3b3, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202e130e2d2154848100002008b405e74c3f86eac0f987a7b"], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0xa4, 0x7}, {0x2, 0x2}]}, 0x14, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000005c0)={0x4, 0x7f, 0x7f, 0x0, 0xffff, 0x7, 0x9, 0xfa, 0x6, 0x1f, 0x9, 0x7f, 0x0, 0x6, 0x7ff, 0x8b, 0xdf, 0x2, 0xff}) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/133, 0x85) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) writev(r5, &(0x7f0000000580)=[{&(0x7f00000003c0)="599ed1688b480be0a09abf474129e1b62d139a877e281727f4f0e302bbe8502c3b1279f6912eef7265559ce170644a8cf08958730c122e87b0", 0x39}, {&(0x7f0000000400)="6a4e01d4263cfca930b161157f5452c7166d284770bfe849f6e985edfb0308aacf2be298302096bfa5517d058d7f790946ff321c295c3bd6973550506ea8d89210aefaf15fd03b0c1dcad5f27f1159e7aa54ee5b71f4", 0x56}, {&(0x7f0000000480)="5ebcd41b9a5251ef333568139cf8d585eac060a20433fbe6f37b1909852b1ebabf319e675a44e209c6f407df977eea1eff9add5ceff839241d7e24c6526fe31c0a5e6f16b4a3fd0481a03f2005e0ab9f4058a570e30ccdbe010a342583e9c9cc72564ff7342ad7604112b6c0a5f3bc0e703abe6532851b7c2b33a11034f5215d270d4e48be53a16524ceeacb2578e5d02d81f741c58091408ec0286199f8539a4a7c34a0ca337ccd82429a275b47f583642043097215922f3c03f0baa83dc68fb54927b9ff2aa31f08043c03663c91b6962e88e0dfe7c3d6d64b811c09ebd890269761baa7f015b5d6", 0xe9}], 0x3) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000002c0)={{0x0, 0x2, 0x5, 0x0, 0x81}, 0x81, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0xd0, 0xca, 0x52b3}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) mknodat(r8, &(0x7f0000000100)='./file0\x00', 0x200, 0x635) [ 361.606296][T12035] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 361.685432][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.714440][T12038] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 361.724182][T12038] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 361.755185][T12039] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:10 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c56c17104f1711a323910000000109021b00010000000009047e0001ffffff0009058f01000000000080a6663780b68d49b4d90231f21a88123b1ff7e000f448450b756277eec52a3705bfcffe2d455cb357978cc5"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10081}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xcc, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x22}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x3, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0xfffffffffffffece, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff7}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x180}, 0x20040840) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 361.813873][T12038] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 23:41:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x25b, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb2}}}}]}}]}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'teql0\x00', 0x9}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$hid(0x87a078e6dc8950da, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x9, 0xe3, 0x1, {0x22, 0x60e}}, {{{0x9, 0x5, 0x81, 0x3, 0x38e, 0xe8, 0x5, 0x1f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x51, 0x3, 0xfc, 0xaf, 0x34}, 0x11a, &(0x7f0000003000)={0x5, 0xf, 0x11a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "ddd6ef371c5560ec329271e15353d40f"}, @ss_container_id={0x0, 0x10, 0x4, 0x3, "f75c71e7bb72856796f952faea69fa11"}, @ext_cap={0xfffffffffffffd4a, 0x10, 0x2, 0xb, 0x9, 0x2, 0x4}, @generic={0xe8, 0x10, 0xb, "f63f48b425380b878719922c766376767d8b1e35b6d7f871b87f5a80dcfb49ee79267e058b0f9a23d27f68987f244ff50c8fe27846ae1725721fd67081a8d78c10c0b92e44e98e7e2a0af52a6d558651204013fadbae63ba86c593a64f783bc81d4ddcd2f6c63a4df9cff4cb109c01e5a579394b044e3e4005d179fa1fa6325435b940371cd3fce1888a67af0140b05d86732672245309a29fa9a8e9db6ba78ce4f1bda11cac5ec21d9790bc051be792ef7d5c4abfba9286845bd4f2e61e57abfb9f99512b556555f38f727fb32d966bb635cabcdcbe7c7abd82a508dae84ac0f32be43a40"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4a, 0x0, 0x81, 0xffff, 0xfc}]}, 0x3, [{0x13, &(0x7f0000000100)=@string={0x13, 0x3, "a31fdec7b9f071f67e6ff5606afa35dde2"}}, {0x9, &(0x7f0000000140)=@string={0x9, 0x3, "966403ceaa1f18"}}, {0xc, &(0x7f00000003c0)=@string={0xc, 0x3, "e988540bd2f387d29b6c"}}]}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_usb_connect(0x4, 0x29cf, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x9f, 0x6b, 0x42, 0x10, 0x2040, 0x4903, 0xdb45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29bd, 0x4, 0x40, 0x8, 0x40, 0x7f, [{{0x9, 0x4, 0xb1, 0x9, 0x9, 0x9b, 0xc6, 0x2f, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x123, 0x4, 0x2, 0x63, [@generic={0x61, 0x31, "676ea120685ad280ad6d633c51b28ada6f89aa1c6e770c71ab74c4ae61dcaf2612489c4b4923a23c4d58898b940d9eb7e896cfaa008edb86c7db5a7183b399401fbe7165fa7adc76edb0ae5a279489a35f5f327f78f2c3d7e8c7fd893585a4"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe2, 0x474}]}}, {{0x9, 0x5, 0xa, 0x8, 0xe5, 0x8c, 0x40, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3b1}]}}, {{0x9, 0x5, 0x3, 0xc, 0xb2, 0x5, 0x84, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3e8, 0xff, 0x20, 0x80, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xbc, 0xbcd}]}}, {{0x9, 0x5, 0x2, 0x10, 0x38b, 0x1f, 0xf6, 0x81}}, {{0x9, 0x5, 0x9, 0x0, 0x93, 0x5, 0x81, 0x3, [@generic={0x8e, 0x9, "3a9b7d00b8169b1c43673506c3e2fa65436bc3103cee17151eb30ffd12cbb9c3bf2501c4c744c3e05d3bdd93f63dc630723e4803bc1fa6665e6f83eca676fc00826f09ab6f3cf4b9a85465c3903bc5e6c4d4295d15300f6cae9209b6193d7000b36b8bf1363064c8d3297ead1cf22dbf06dfe2fa583f34d14a67338f8fc8203ae9d7f7d8cbe6c5b2134ac5b0"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3e8, 0x6, 0xc8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0xc, 0xaafb8fc5b993ed96, 0x3e6, 0x9, 0xbd, 0x2, [@generic={0xe4, 0x5, "e3ac3c597f2a9016de265a14a7ecbe2f9e1b364ce58af1ab8dc2febd4f1740d7d40d823de2117db193a9c06b004cb49c4e499496a6d3d4fb92b64cf4aba653298c999d907d8edc79c8c1e0fcaf34534d90e3d86e2886bc3fbad7618e964019d42e77bcb585a1134a01d2bf06a0e6d66910c5ce0f9b4953499a2bfe4853bd857e72d0118ee3e5e82fa6ef1c87dfda3362c4cd287c54d93d5ee27181d45a71923cbb3517b0a38c5d737bc7419957b963eccd655a95aabd0b3b67862da4cb78f1b6a060cd5088c97c0086946371f5f8a782835a6bb9a075d74c89b9ab8e918ecbe857de"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x231, 0xfc, 0x5, 0x9}}]}}, {{0x9, 0x4, 0x8a, 0x6a, 0x3, 0x11, 0x37, 0x37, 0x1f, [], [{{0x9, 0x5, 0x0, 0x1, 0x23d, 0x80, 0x0, 0x1, [@generic={0x51, 0x22, "cf97f6975f423fdb70d57a40641a9cf425e546157948475b2e03f63c9ed9dc3a87d90c3824ccf573df8e4e56b4f172dff1bc49840eb0453e8217ddd4ee7e2f78de0cad140d0c5950000c1a01485fcf"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x2c6, 0x63, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x0, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x26a, 0x2, 0x5, 0x6}}]}}, {{0x9, 0x4, 0x1e, 0x2, 0x4, 0xff, 0xff, 0xff, 0x4d, [@uac_control={{0xa, 0x24, 0x1, 0x1ff, 0x79}, [@processing_unit={0xd, 0x24, 0x7, 0x5, 0x3, 0x6, "a38e8796c158"}]}, @uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x8, 0xff, "c39b89ec8f401d802e"}]}], [{{0x9, 0x5, 0xe, 0x10, 0x33d, 0x20, 0x6, 0x8, [@generic={0xc8, 0x7, "e6cbb3c2f7cf262bc173afc10239fa18b770b03ecfcb7a223713c51fb1e1a8a7c4594efba660448ee1fc608a7efe53eb703f15dd9adee98abda1916531253a0911c0f377ca989edcfeb2190f1d877dcaf518463d51cdd5fb38278b93ad9e0d96a73a6246751b801a2790026d32e6d56298dd1453209fb0fca87c4a1677868e20690748eb14f99930c6b21ccdf3b0106a57dda4edc88ed18758c2c2cff777ceda4912692b9bc3518290833f5ac395928bb5d4f962bc14a9ab43a8960d5189f9fcbcf353853259"}, @generic={0xc7, 0x4, "314b3399329672610d162457d441fdfe24104c37d6500c70d04bca0eb0508fe13efd566281064ca4b4af19976cff3560824ebc8cfcccf8f89ce665f199012209d2452fecca492fba23344875caa866be220b2b01d299b99eeabfd87b87e35c154941eae79fc92476e7c45f2bd62245d093779c32cb6e18d3d67cc366f7286a726a4907ff84a082c6204d904edda4d559a2952e0f339a5d1b25bc542ab1069840c1ab1aeff83b6f607763dfe9337f23485495347ac6429fef1a79791fe528b312c7c0ed854a"}]}}, {{0x9, 0x5, 0x89, 0x2, 0x247, 0x4b, 0x40, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x7ff}, @generic={0x59, 0x1, "1c007e517b0ead9072e7f51197f922a7530001b9e0aa6921e65e6eddcf447373cc9decf60348b1e2d3859580809f5a7f8f5d3f8e513d7f4898537e309578ddc9c1d45ed59c29611581bd94179113b73acc5c9e154c55f9"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x30b, 0x2e, 0x5, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x324, 0x0, 0xa8, 0x3, [@generic={0x40, 0xa, "f3e1cfa50545db49bdfd219b3f05748fa4dc7dd9a4371bb14b5ad94dd0d1ad79c15d61559e7d42ae604c177e85c881f03299682fae3a518ee4d2ada1889a"}, @generic={0x9a, 0x14, "7ac41cbf64ccb0eb87b839abb37bd8b1bd769751cfbf1f19c3e21d094f28a45940144b05255e4c31077ac294e5f8d59085f83b6dfeb3721343d73100881c77e0958c109a3bdbcf4188d405d2b4ef7dfe375a6303b193ccecb0c607d9eae0e52b33179a288526cef46b689d848785976a4e66dc3637625e7c7028811fc1b0eda242b557abf609ea14130b86c626c15ea3d0d5b2200c7a591c"}]}}]}}, {{0x9, 0x4, 0x98, 0x0, 0xc, 0x42, 0x3d, 0x44, 0x6, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "0f54e86e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x2, 0x71}, [@country_functional={0x12, 0x24, 0x7, 0xc9, 0x2, [0x0, 0x4, 0xd8eb, 0x2, 0x2f1, 0x2]}]}], [{{0x9, 0x5, 0x4, 0x0, 0x14a, 0x1f, 0x9, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3a2, 0x52, 0x5, 0x7f, [@generic={0x1002, 0x2a, "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"}]}}, {{0x9, 0x5, 0x6, 0x1c, 0x1bd, 0x2, 0x3, 0xff, [@generic={0xc9, 0x22, "96260dbe7fd175b6dd9ba6f94b7d30f8828c9c6a00f0a81e840fc705504a186916ffeb95f21b9555794b756748752c5cd9fc6e8ec3b40778ab937721613fb6264f025e52910dce057b823469abe4b7c2c98c6312e9fcd4860105476878db9a44755daac49d65fcffc6b81bb70afb7ab270207b14475b1f50782ba45052f61effb43dc608e61f1345628e2474f164c615f390826ebe5d3dd7d598a2119cb20c29d2a2a65c2bea2a4ff07a6c48c83284244b803b65b64fa76ab0d2b1d2431c9819d26ba8338957cd"}, @generic={0x39, 0x6, "377ae3c9c33b1a58d541ab6777f9b3b32c1d96c3beb41a7798b17f0c76f93875ac583e3fdd5d8b3ea3a92529fb786d2c7ab8216070d646"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x293, 0x5, 0x80, 0x81, [@generic={0x52, 0x24, "fad9aaea19891ac89f67d55ea985b44d72339156f371669c692d2902b64ce76cf65a843eec841e8c8a44e1202980549fd76c347a6c8d2c4f762e7c3c984a81f0ecf7fbee837a76c0f9bd306158abd7b1"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x115, 0x81, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x4, 0x2f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfd, 0x7}]}}, {{0x9, 0x5, 0x6, 0xc, 0xa4, 0x3, 0x5, 0xfa, [@generic={0xf2, 0x32, "e97d88837bfc380958ecb1746b1e8571ea7b271c36e3d856c8244a675c2aaf8b307d8057319a5a0c4f6c05d1a4f0b00a20ae20aa0d3c203fd19661f7bc04d34f95c4faee2f3b0bce2423b5efa1ecd069004391d27abb98a1a8c77dc22941b98cfa36e9dfbe428d14521886fdec6bb1211b65fa439d5dfffbbfbccf7aa01d0865b60708f82d3f1f4c014b604fd13b056011ed6e1068dc8f13aaaccd121f27f4671bc98df2f7a039cbaf7611bc006a2fad6b28e9c42d8d2ae368aa4af6cb8c8e4df2cfcd3339c3ca6ac81128a9dcd0ae85e85b9ac6be2f7ebf10b10ae445023507d3956182bc61387b02777a60ff26f975"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x6, 0x8, 0x6, 0x3d}}, {{0x9, 0x5, 0x8, 0x10, 0x15a, 0x0, 0x4, 0x1}}, {{0x9, 0x5, 0x1, 0x9e4bfadcdeae1755, 0x1b0, 0x63, 0x0, 0x7, [@generic={0xa5, 0x7, "2f2ce8d9617cc23e826f2f05f93c4bcef1783b976e33441c975ab50498c55de7687f2345969ac074edd648a65377a628e4c8ef289e55edfccb117f55809f52e577b14aabe6ef799a0737afd0b1edbc30601b8553b84a5a8d2f295b24c93c81fc5e7eb35aee6d9af047754e716f4b0ce9feeacd38c009b97ffb1caa6740060313921995d3cb9c0862d25bc07c5fdf18bb88bbac5044032637c94eb40e651c159d16a5d9"}, @generic={0x1002, 0x11, "ff719526328c0aa9ed454033ed7ed007c3e3ef353894507c3be92e7109c5aded666eb01f77270d5fb4920117902ae0bda6fd10d618174805f721090fd2f949ae9eb724c2e07e3bb8d8aa4817a5e34642d165a5e9db9689063ee160a27df6ae03b5db530b9131189a4a6d4b4cf8e95bb853085bc26095354ea3ea239eb1c573c8f41011e83163b80d70d34fb749e01efb1268e5240e071fa1cdc3783319e7ebfa4d8b24a5c308d5199d1a15e6330b6d82f247725ab539f28a5d3ee0b381446ced6ce9381c5408f94ae9647c09d29433e5d34e6c2e08dc639f08d69d7610c178285cc9b34152636364549b33dc8a77733b374f8f0a8be6cea8e2a0b760ccb329c1eeeed91593265a170f0834af48ea7a52de2a55fed07d83d5357b933202bab209ca8e4eb847613d2c4cea6e16cca48c6b1de42ec1d0810c5362ea99d5adf2ac9c1ede79124e9378472cf0964e99a39cdd579cd423ace195f6cfc92da697e5b0456afbbdf8d562bd32c2b1fa242da1db5d6adb644ddeea2a5439ec1608b8b0762e3fde4b635e36b2e1c766b2813ad67a54505c13ee5a3811f5eb98bbd3bbc0c40322a65e67a00bdf0f1186c3e55fa19f8e44002fa449f234bdf3ff97d725b67b9c87eb83bd28a6b22e21cb7224cf189e22f205ae9603bd881d8f7fff3c7dc06a7b8b26c51256eca552c7a62b8a73dcd3f87edd690627c914ad0f3b8bad7792ae220be93c4c3aec0253fc9bea12edfcdd84e5b82b5b11f1a40e72fe76cf9f905fc9c44d7561e7cf68510df6854cb2fed75c700b9451cbd97ad3ff188677799f004ce87dc3467d593cb9a3a6edc00c774061ab84fa8eb0653851cd70109605bff49c4fedc207b0b68b833c10fc1b2567ec74295a31f68c26dff81cf02204e9db8f41cb1afbdb75ec49dee63a04a633996d1c2b4fb4637aa63ba902d176847a8385180c751ff46d95f0ea9f34af61b601039569c78f39fd2a121ef0712840db0ea55469970cc0d6618c7e2a3e4b90c0806ecea5e3aee4535ef45518446a23ea43e0933203ede0fabccaf8f1df37481d9cbb7de4714bd31a758d72163fda45725ed72083a2822c0efce3b1c72422beb9e414a16a7e44f2862d765f92dc4e6c5659e9496e1dd480630b3c8d73ef074964d2753318307c7e3e4a6e7027ab6c950d2a273425244ce6b52f3dcf6e33f411efecda379b78874f2d4b011f595b06ba7335382e5085998eb40a7d485a021f59808012d3c6a4eb9384338cc1ffcf42ffd6d770b70278127857ca522be28b07efa97647ac26fadbcb5c823facc9800fb198e0368cfaa46103f7f2ed689a992010281660ddb5e098cbd5028bc0b3cddb474667476d9126c0659cba5cd5cfeb9556e2b76c0f30cee5eaab00b6c56b4147044037afadacf0460c1a0540bcbccac5a4fa649731f046f147180bb1b690acb2f209e19fdd2442d8ecdff9859ef9d9253ae611ec1b21b347cc1e42b9d6b05ffc477434819c8dee3b6d98385b982b04011e84f47bdb4e1cb4d83deb28cc0d722b8509cf4e015ade43d26ae39d36175235df72e122a6118f2a73b0c9dc4d0af9e06ca49d0ee621d8c4c13b2f9ffebb446df3b650ba1de67be0aa7f5819ef46d1d1bfeae049d6203c06d262ed849ab7841bf4fdad34e1c297cade52d29d52446902808ea9c22f29ea415925993be352b7401c28d842e111f53311683044bbd8ab2f25cf1cb3b0ca77e749826085c7d0b0e801ae33db71c8c21c4d8c7bb278c6f2f07f3171f9382a2ba95ad6f4df9d006fe87a9dae53dbfd6154c1b356af428d324f3f287f7da4a60f3a5fdd08f651eb400e69f40c7708a5b47bd516f2187610211a01498c6656b32e731d2eabc1e415fcefbdc8e30326803bd28fcb8d8e73dc9627eb616588aedf3cfcae9408e319ab44bb4821c44c3272a5b25d48f856b376f298a73e4902a64894bb3870947aa4722cb89a50b93e796465ca4beeb28f32da09b0c34da09a283bbafb43b5bce68cde4e1a36915f1462069cba441dd15eab45231a291f25e15a050f7e7f0e90a10b85397af16c69e15ea8b0396ea426b9943e5971b45161079266aa83e71ce5789fbef805b0a5e1ef7954b60a6c7c0f22849712afbed91feadee9db3a7317dea79503cde299f5781e1f3206f706dc16a1a81d1020815bd33b4e7f5e644bb4a0be4adcad437756885d32843fdb106269c9a91ec68755d13c7a082f6619189073c8e761a677fcb8b59c972498181e1ee4712c265c002ff47791af17c647ed950b494b3ea23b214ff99778f4d18414ba45be74c65e37c52ac1a270744b929257cd974f8d9b2c7fb92b6523599060da7b2a6b2b036e742cced155cb67a0d26384494abb36db2735b8c87be944f092382fdd88f4ff0ad32305e0606e404a6f2428ba0776fe7a038c0a42cbf3e930832f48eaddab0566a51f8f7b4f02376d72759e442574d9ab4c27050c7eed0e4754034035d5bf708fb7ef91efb710b55a886d5900a9d909b207ad6c0d00ad75b3ba8c45b431ebfe064d7142b8a8470a735f1ca017f9f35f5e2c495a9db54c44b370cd7bf85c97f60cd21294093927aa6c885e71e831995907c73688acad43cb4bb3a59343eb8eda5126a96eb1edc6c3cef2ef13fd81719c0ed69ede47528e116b87fb44444ed67e8de163a1cd9d3e872f30611db096a9b4d4c72cd1a2ca4824f021a8856f43a871a79d750b20821852cdae8f853d0e8027f32c3c10d2f8d5073a2f9ef012bc26515ec6899a40765b25419e274113f63439ba52f5e85112d314f2a8b71d7f6e7e68962242d50ce81487a469f3c3c38f50d8bd00f5d8cef4b36801b860272d76ff7e896e9ac79f34baa8098a0ac027c2b40d8bc6494fa551beac6f9fa53fb8aceefd23dc27d24e6706bcf333c81ce7c0b62479f8bada231750f844e2044359ab374cd1127eab61301bf6c89a8db2f4981a90fbbc78f484838ddeb5d8046d936cc8ac09c6a155738a971e05bfca843bd8ef5cbcea1c218cd120cdbbd4ce05b4a69f82bd8f32721996d2ed75b73b9b038f2a84c10538ecfe00227d634092cae75ab5703c2998694caaf9ae3e08b11c4d57a54ee9a3552ba7b8a7b06aeccc74f76935dc282320b3a1810f9c4f27c4aa3a5efac88c7f168232b96b2ca956586dff87bd92717f7db68bc2871ea6850085b4cffb1a9515dc6d3a3042a5e87ee41d2eef93bf4ceacfc72e9a5c533b653caa71e8addaa5be2762438979aa3b42bae8491bc1bee1aecb29af1492091c94c860472eaa6901afe66a9e4150373f237cb3fa93c51dca98873629264ebd6bb9804968ce84e299f8188a294f3e624bcbdac388b309aa47eb4e67ac9439e866233205166c767ab4b632ae5620004bd892057fb526d6f6aa2d2dd5cad4db942cd875e6ffa806fdaf06eacf2765da855d433234f89a853657d399422526aa8f06c1b17afb81b4bc3872b145168f764561e49cf407dc32f675921106196e7c75a35affcaf5680544b3c701680530937b244a6b09f911dc88aaef21e42070419b5c0a740904a93c915a9e511f80d3e7773f4f0a70c85c40a2b70a21fdef52820f537704212cae1786eb88faa1bf03a19683d9554f6798390ba12f5967d99faeba496283cdde7d557c11d6971d3c832885b1d3b147cfc596418c4384f353b3c9f5a033e640424a6b831ec071552bdd8e5075cce0aebf684c0e5133c0b7bee4f748ed558b01853cc19470913af4b96b41a9880c62eab1056a9956dc8981165dddf47ea0aeed3f6c4b4fee650751ec1acd1f76311bce9236f5d7102db14b00435ca220eaf527cd132a81f3cfc81dc6b20460670a2e45e7c32ebd82d9c825d0adad7b052c68d7ccf739eee191b49ed8393b374a7260b47095ebc2d3e5391affd81d09325fe66e9824959d8de3db20e443eda4dbefd55b63b91979baf3079eca7a822580f16b57c76dab29460c36c8b59603edfb1febfb8b628b40a90c3c9b23cfa0f0be478490ad6261c68bb8b28c2145cb5811a1d083559b10c6fc8e8d22dfc3a1cf0ab1586517cadf2b5668b1bf249558b2738551152fd609b86ded879ff08730cab5b27652966d42f2cd78960440388f338ba83dd51d46faa3423cbae9084b745d3d506da9185c6f6b483d4628c366941d17fa53a880058915e8759b31783ad838d8f77a849d17198ed028b7db9a3ea6a76efaad7ddad6be726c423774b2ff9b6b839a1045b25d3ee374b5881e46d0f8860d0aab1efea3ede31c0f667e72b3cd680fbf585f5d76939ac9beb56080d95d7b4c6594de091e5bec71262601478ed2f3668d6ad1dc177652eb6c381d2e40bfe40a1ce67334f96420bc58134f37310ca648fbeae16491a63e07aa7442ccb64ac43b2a507da189ea0bb5ac9cd3fc62e0286385abd42c922d6a654dae0ef6c73ae11e142121c2576d96367866a012a7a4ab2a78a77dc4465cf540678f47a2911eb3a30b01ddead078e32127e06fa3eff2d8950f751c5272c30c79da59f66d31d02531ee983c6eaf9dfbaecd3199db8c5b3551fe3b96f3eb88a7d659cbc70e078a4d04b9a63aece9256ac291e076c0928794fdfafc33b99c6a2e03a636f0dff4a82378e685c24a1cf695bffd379e7b24c47726bcf7eb8a49f3db48246053993fd344992b8eea95524ea4c77b09b5a3dc7c7d65418c61f2349f4fbc3944ecb34bef3afe94d351950ad5f92bb49209cbdbbcc41072f4b26a6de846b270f6eb8873695618a8b05a774f54792340c5731ae9bf7c242199e9a1372777ef91cc8016e906bc1738e00e8e460be85d6cec788878edbad38a6ce98e6d81b3a36d411b371595a0cb167333df4f8606017d03b2164382dcfb279baf3f4b96039cd3b301b46f47047a6692cbb86239bf9b07fc39b90e00dad78954af074edbf4645f8c552e333fcfbaa2136a6cfca4f6955df8bb4e3fd13f007b0c3ca72fdbf3e2589621ae4fc5123c3bcf1a7ab43fad6bbe903f3b5352e674e58f9e1eb9873fd20525fa051041dc727a6578f0145fdc51e455d88d7178ac3c13b02b01afe11ecd7f57a4f44a84eb7813bf6737b0a60b91f3aef7ec4fb773d40fda85afd3ee49afb3d2d8d9c462cacfbc91f2565850045519ef689f56db781670080dd10aea1e37d8a1464d78640be1b800a207fd24989e1592130fe9dd6d4a810abd260598f755968a1ab9475cf7d7b9fda0e3f38e3e0bb7bc784d44bcdd9cb5f8d7c4858d8eb175bfcf696007bd064ca53d392a574caf38a6af639597aa89253abf5de5cd9e0d4915f200f4f01feff8aa170774e5116cca009ffdd3df69486120d8b1c9f1e45d24a59b4d6df3744a0159f70d1f13fd1bc3c83a11a1285b22b157228c3dc1b987c4b4fd710c7983d50c22fe4dbcb5360c039f0187604592daad11586479bb36351dab64df18bf7d65e24d9c152719a3afadf617377bde82e575477903a2dfaab1c8e48eeb94722f595ad125a1a668ad47e6524efc9e3b8886c7a71c3c49349928b66c89a8729a74a4a55b9e5f1faeb19a418d4523caf5ca4d6e1af2d7a64ce0d2e302465ffe23dc021dd39fc8fcfec4ace7a055f6750c6c6acb6c680dcc3941af02a245ebb69bd4864c106f2719ffb1cf77e9d9b929dd2bdfa035477460a147de7cb8bd996a52afe36a34c80569ce2b0af9c29d6bedaec3a95be239848928887eade638b49274ab80bb94002738d0f26161d7bbdfd04aef9ce6b19842a423afd0cec47da958a5a3c1b57d1085c6fc5cc084fd6e0c72e6500c29bc294d28b11a959959ce35c6300034ee187e55086f51942ed9faa3b057"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x2, 0xff, 0x2, 0xff}}, {{0x9, 0x5, 0x0, 0x6, 0x20c, 0x69, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x3f, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3d2, 0x8, 0x0, 0x7f}}]}}]}}]}}, &(0x7f0000002fc0)={0xa, &(0x7f0000002e40)={0xa, 0x6, 0x41dae8a7010b66d2, 0x4, 0x2, 0xfd, 0x20, 0x6}, 0x2d, &(0x7f0000002e80)={0x5, 0xf, 0x2d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x22, 0x0, 0x8, 0xb58}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xd, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x6, 0x1e00, 0x2a6, [0xf, 0x1f80]}, @ptm_cap={0x3}]}, 0x2, [{0xa4, &(0x7f0000002ec0)=@string={0xa4, 0x3, "c151692c14dfed36bfc480e0469058b0cc15d81cfeeffcd70e1d3e7a2c5bc04ff337e745ac945ff23f536f67b7a4d1555b1444a312ecd25ba32ae26f12ba9e84b9d6f1e68566e3ed2927091dfd6d2a9be42687d9f4812863a6b90fc5820846cb52bd014528dc648d94c9cdbd1855e1c5a3d017fa0cf5f8f945c72813b4363bd356a12db80128c3d17917b6e00147e9832dfed119e49179cb225eb7efc6ca54d9bb05"}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0xb2, {0xb2, 0x0, "b2776b5cf48b4b5ab3f865042ee639face331b1cdee0926a1883e490aa8d596c5ffcad89a1138b3414587a4945a92d55e816b965a4ca59eed81f3761206e7eebabae88dbaaca77b778d69718c52c1d6fe088a9ddb9afe35a6f4820ac7d1f0021116fa9f553597ed16ec4700c39d37ef0858439d4e5c7b8d3d11ad1f31f77b49d4f24dace30816d91d598f8e960ce662a3083651b5a0b45854390cd3c52cab36e731b4b7ab6e4fce11f9e08cc2141fc26"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 362.212303][T11845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 362.380601][T12048] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 362.412579][ T3962] usb 2-1: new high-speed USB device number 6 using dummy_hcd 23:41:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44002883}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4034091) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10000, 0x0) tee(r2, r3, 0x40, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 362.472179][T11845] usb 3-1: Using ep0 maxpacket: 16 [ 362.594268][T11845] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 362.602640][T11845] usb 3-1: config 0 has no interface number 0 [ 362.608832][T11845] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.620057][T11845] usb 3-1: New USB device found, idVendor=174f, idProduct=a311, bcdDevice=91.23 [ 362.629230][T11845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.642423][T11845] usb 3-1: config 0 descriptor?? [ 362.682222][ T3962] usb 2-1: Using ep0 maxpacket: 8 [ 362.716821][T11845] stkwebcam: Syntek USB2.0 Camera is now controlling device video39 [ 362.834176][ T3962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.845564][ T3962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 362.858535][ T3962] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 362.867694][ T3962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.880450][ T3962] usb 2-1: config 0 descriptor?? [ 362.894435][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd 23:41:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x0, 0x0, 0xfffffffd}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1000}}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x481000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000540)={0x7, 0x1, 0x68, 0x9, 'syz0\x00', 0xaa0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x2000000000800020, 0x0, 0x0, 0x4cb], 0x0, 0x340a90}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fsopen(&(0x7f0000000080)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='cpuset]\'keyringwlan0mime_type\x00', &(0x7f00000001c0)='nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00', 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$isdn_base(r9, &(0x7f0000000200)={0x22, 0x2, 0xee, 0xff, 0x1}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.964219][T11845] usb 3-1: USB disconnect, device number 2 [ 362.970814][T11845] stkwebcam: Syntek USB2.0 Camera release resources device video39 [ 363.109870][T12057] kvm: pic: non byte write [ 363.172258][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 363.192945][T12062] kvm: pic: non byte write 23:41:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x8, [0x7, 0x5, 0x7, 0xf0c1, 0x20, 0x401, 0xb9, 0x6]}, 0x14) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) connect(r0, &(0x7f00000000c0)=@nl=@unspec, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x420000015001}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0xa, &(0x7f0000000140)=[{0x6, 0x6, 0x9}, {0x3, 0x1, 0x8, 0x1cc833d0}, {0x2, 0x80, 0x3, 0x1}, {0x8001, 0x6, 0x0, 0xa2}, {0x1, 0x20, 0x3f}, {0x80, 0x1f, 0x0, 0x3ff}, {0x0, 0x1f, 0x5, 0xfffffff9}, {0x4, 0x9f, 0xaa, 0x5}, {0x1, 0xff, 0x3f, 0x3}, {0x1, 0x3f, 0x20, 0xffffff9b}]}, 0x10) [ 363.293416][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 363.301632][ T31] usb 1-1: config 0 has no interface number 0 [ 363.308185][ T31] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 429 [ 363.318413][ T31] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 915 [ 363.328471][ T31] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=40.2d 23:41:12 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)=0x74) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x24000, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000180)={0x1, 0x1000, 0x1ff, 0x2}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x8, 0x0, 0xe, 0x11, 0xc, "fad60f7a42a94d497c4fe7501eae91714f7f6d445eb13c92e3598e0e8de7ccbb73e58b25c257c957d8829a317cc4a9b7c666dadb0efe2a000dbee6fb6e27c79f", "a09a7972139b94d91fb0e3bc081de0293fd4ed92ebec558f70af0ce32d8c76d4e022f42a95b76e4e964bc39ce6ca07f3366c96472868a4971f120f0968a395a0", "05b72cee23d47707d46d3adbc7055cbb82f1aa24fab5e9547c9f280be80e843a", [0x3, 0x4]}) r4 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0xfffffffffffffff8, 0x8000) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev}, &(0x7f0000000380)=0xc) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x241582, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000400)={0x4, 0x0, 0x10000, 0x7}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000440)={r6, 0x1}) r7 = syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x7, 0x40200) write(r7, &(0x7f00000004c0)="4ac28b2dd5ee7ea2bcce6b1c0a2e3dd05ebd2558f81b361af748d898ea7017a6c952e6858f422f793dbd468830b463f56c93dd11a4bbefe9b41f17e5f8c636155c17cd01a594d17b20a40c9fd62fb4c707f452830b439b0acd80d10e3bb58e346c49a90268bd06cd70f44c7acaa3ecac582a86d514f7ff593f3aa97cd83141fbd2a4aaeea9e575c05e94201d386f9f0ee3984d53925b211e6a70ac3807106f216ef0c633a1082fd70379016f61408692a753073e56e6214521b38e9e89319233a474dd49503c1d577032b8293355cdd9128d753cd819a4485b8fd8148720fc907c45e822e0b6fb7986cf", 0xea) r8 = dup3(r7, r1, 0x80000) ioctl$KVM_PPC_GET_SMMU_INFO(r8, 0x8250aea6, &(0x7f00000005c0)=""/200) socketpair$unix(0x1, 0x96bf2f59cc3f2699, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000700)={0x0, 0x2, 0x96, 0xffffffffffff8dd5}) r10 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) r11 = syz_open_dev$mice(&(0x7f0000000740)='/dev/input/mice\x00', 0x0, 0x10400) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000780)=0x4, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r12, &(0x7f0000000a00)={&(0x7f00000007c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0xc3, 0x80, "0f4873742fda7071a1e7e8e46e0a6dbf8d6638c5cc090d43de31d8299914273c67c586d06b82b18e1b365c4aa180894bb2efddeda42e5ce93a5c631554d607", 0xb}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000840)="f31c06268d2ea9671e5adbac91c2e94a7e6f109033568ce98ec859e979480565f56d0c515f0551d1ce09f86fa77473f14a1d58fed0a2214ec4bd29c5b786a0c5b459081ff0c78548e34588d7cb0a91cd49d0504e8b4489899bb82a8908af539307ff81162249912a214b787c876f1cbffd41b8117847a0d31e5a3fc9b4bef10ff8d457f2e7fef8e03b599ba4abc5580c04fd3b", 0x93}], 0x1, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x800}}], 0x90}, 0x800) lsetxattr(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)=@random={'os2.', 'posix_acl_access-\x00'}, &(0x7f0000000ac0)='lo\x00', 0x3, 0x1) r13 = syz_open_dev$dri(&(0x7f0000000b00)='/dev/dri/card#\x00', 0x8, 0x8000) ioctl$DRM_IOCTL_AGP_RELEASE(r13, 0x6431) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, r5, 0x8fe3f000) [ 363.337637][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.443547][ T3962] usbhid 2-1:0.0: can't add hid device: -71 [ 363.449767][ T3962] usbhid: probe of 2-1:0.0 failed with error -71 [ 363.461039][T12066] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 363.479121][ T3962] usb 2-1: USB disconnect, device number 6 [ 363.515058][ T31] usb 1-1: config 0 descriptor?? 23:41:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x400800) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000240)={0x0, 0x22, 0x0, 0x1, 0x0, 0x0, 0x1012}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r10, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x22, 0x0, 0x39) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 363.592025][ C1] usb 1-1: NFC: Urb failure (status -71) [ 363.598036][ C1] usb 1-1: NFC: Urb failure (status -71) [ 363.606759][ T31] usb 1-1: NFC: Unable to get FW version [ 363.612827][ T31] pn533_usb: probe of 1-1:0.67 failed with error -71 23:41:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x14}, [@ldst={0x7, 0x0, 0x4}]}, &(0x7f0000003ff6)='OPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7ff, 0xcb26088c20eb4231) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1f) [ 363.777855][ T3962] usb 1-1: USB disconnect, device number 3 [ 363.981247][T12078] IPVS: ftp: loaded support on port[0] = 21 23:41:13 executing program 2: r0 = syz_usb_connect(0x5, 0xfffffffffffffe86, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xd0, 0xc3, 0xe, 0x8, 0x148f, 0x2870, 0x42f1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfc, 0x0, 0x1, 0x2c, 0x7e, 0x34, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x5}, [@output_terminal={0x0, 0x24, 0x3, 0x3, 0x307, 0x4, 0x2, 0x1}, @mixer_unit={0x0, 0x24, 0x4, 0x6, 0x0, '\x00\x00\b\x00\x00\x00'}, @mixer_unit={0x0, 0x24, 0x4, 0x2, 0x5, "4252e466"}, @mixer_unit={0x0, 0x24, 0x4, 0x5, 0x1}]}, @hid_hid={0x0, 0x21, 0x9, 0x9, 0x1, {0x22, 0x4d0}}], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000001ec0)={0x0, 0x20, 0x2e, "e7dc40edac96b90f01956721a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae"}, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1a0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) [ 364.196518][T12078] chnl_net:caif_netlink_parms(): no params data found [ 364.259321][T12078] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.267384][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.276165][T12078] device bridge_slave_0 entered promiscuous mode [ 364.288848][T12078] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.296544][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.305864][T12078] device bridge_slave_1 entered promiscuous mode [ 364.352488][T12078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.387289][T12078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 23:41:13 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 364.397108][ T3962] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 364.466008][T12078] team0: Port device team_slave_0 added [ 364.479557][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.530622][T12078] team0: Port device team_slave_1 added [ 364.582053][ T3377] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 364.597432][T12078] device hsr_slave_0 entered promiscuous mode [ 364.644311][T12078] device hsr_slave_1 entered promiscuous mode [ 364.652423][ T3962] usb 3-1: Using ep0 maxpacket: 8 [ 364.724450][T12078] debugfs: Directory 'hsr0' with parent '/' already present! [ 364.738775][T12088] device ip6gretap1 entered promiscuous mode [ 364.822814][ T3377] usb 1-1: Using ep0 maxpacket: 8 [ 364.848892][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.862352][ T3962] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 364.870508][ T3962] usb 3-1: can't read configurations, error -22 [ 364.932386][T12078] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.939626][T12078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.947473][T12078] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.954757][T12078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.985267][ T3377] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 364.995792][ T3377] usb 1-1: config 0 has no interface number 0 [ 365.002494][ T3377] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 429 [ 365.012647][ T3377] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 915 [ 365.022715][ T3377] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=40.2d [ 365.031987][ T3377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.082192][ T3962] usb 3-1: new high-speed USB device number 4 using dummy_hcd 23:41:14 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 365.237129][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.243864][ T3377] usb 1-1: config 0 descriptor?? [ 365.266381][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.312039][ C0] usb 1-1: NFC: Urb failure (status -71) [ 365.317954][ C0] usb 1-1: NFC: Urb failure (status -71) [ 365.326475][ T3377] usb 1-1: NFC: Unable to get FW version [ 365.332210][ T3962] usb 3-1: Using ep0 maxpacket: 8 [ 365.337691][ T3377] pn533_usb: probe of 1-1:0.67 failed with error -71 [ 365.456253][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.483927][T12078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.495043][ T3377] usb 1-1: USB disconnect, device number 4 [ 365.522576][ T3962] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 365.530669][ T3962] usb 3-1: can't read configurations, error -22 [ 365.570270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.579431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.600709][ T3962] usb usb3-port1: attempt power cycle [ 365.607706][T12078] 8021q: adding VLAN 0 to HW filter on device team0 23:41:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44002883}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4034091) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10000, 0x0) tee(r2, r3, 0x40, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 365.658829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.668678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.677723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.685014][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.717376][T12115] device ip6gretap2 entered promiscuous mode [ 365.827586][T12078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.838218][T12078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.864466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.874334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.883402][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.890585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.899160][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.909235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.919319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.929318][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.939185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.949022][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.958671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.967981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.977687][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.986991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 23:41:15 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 366.184373][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.197095][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.263994][T12125] device ip6gretap3 entered promiscuous mode [ 366.312543][T11847] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 366.352576][ T3962] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 366.375567][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.385832][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:41:15 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 366.553708][T11847] usb 1-1: Using ep0 maxpacket: 8 [ 366.610567][ T3962] usb 3-1: Using ep0 maxpacket: 8 [ 366.672702][T11847] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 366.681032][T11847] usb 1-1: config 0 has no interface number 0 [ 366.687369][T11847] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 429 [ 366.698269][T11847] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 915 [ 366.708362][T11847] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=40.2d [ 366.717531][T11847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.767897][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.802462][ T3962] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 366.810510][ T3962] usb 3-1: can't read configurations, error -22 [ 366.833753][T11847] usb 1-1: config 0 descriptor?? [ 366.867157][T12142] device ip6gretap4 entered promiscuous mode [ 366.902075][ C1] usb 1-1: NFC: Urb failure (status -71) [ 366.908104][ C1] usb 1-1: NFC: Urb failure (status -71) 23:41:16 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2c03", 0x2}], 0x1}, 0xc100) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000200)) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x18f, 0x0, 0x31c}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x10002) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0xdfa9, 0xc0, 0xee, 0x1}, 0x8) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) [ 366.915667][T11847] usb 1-1: NFC: Unable to get FW version [ 366.921803][T11847] pn533_usb: probe of 1-1:0.67 failed with error -71 [ 366.982914][ T3962] usb 3-1: new high-speed USB device number 6 using dummy_hcd 23:41:16 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) 23:41:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x9547c5ad771bd646, 0x0, 0x0, 0x335) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200, 0x0) write$UHID_DESTROY(r6, &(0x7f0000000100), 0x4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) renameat2(r3, &(0x7f0000000000)='./file0\x00', r8, &(0x7f0000000080)='./file0\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003000)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) [ 367.105997][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 367.178862][T11847] usb 1-1: USB disconnect, device number 5 23:41:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "040eccf7"}, @main=@item_012={0x2, 0x0, 0x0, "7c04"}, @global=@item_4={0x3, 0x1, 0x0, "20001700"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "d777ed4b"}, @local=@item_4={0x3, 0x2, 0x0, "8794f101"}, @global=@item_4={0x3, 0x1, 0x0, "7cbd3993"}, @main=@item_4={0x3, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1ff) [ 367.240629][T12151] device ip6gretap5 entered promiscuous mode [ 367.309956][T12155] debugfs: Directory 'vcpu0' with parent '12155-8' already present! 23:41:16 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) [ 367.403803][T12160] debugfs: Directory 'vcpu0' with parent '12156-8' already present! [ 367.451143][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:16 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xe47b098c65aeda8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000013c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x140, 0x0, 0x7, [{0x5, 0xe36, 0x10, 0x5, 'GPL*$)ppp0cpuset'}, {0x0, 0x101, 0xa, 0x8000, 'em0+\xeeproc\xc8'}, {0x6, 0x3f, 0x1, 0x8000, '\''}, {0x2, 0x8001, 0x7, 0xf8000000, 'vmnet0#'}, {0x2, 0xfba, 0x0, 0x2}, {0x2, 0x1, 0x5, 0x0, 'self%'}, {0x3, 0x0, 0xa, 0x8001, '/dev/null\x00'}, {0x4, 0x0, 0x0, 0x100}, {0x4, 0x3, 0xa, 0xffff, '/dev/null\x00'}]}, 0x140) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x40, 0x81, 0x4, 0x3}, {0x5, 0x80, 0x7}, {0x7, 0x0, 0x40, 0x3}, {0x7, 0x7, 0x1, 0x400}, {0x7f, 0x8, 0xad, 0x8}, {0x2, 0x0, 0x9, 0x5}, {0x1, 0x86, 0x4, 0x3802cdcf}]}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r3 = geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000005480), 0x3007) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) r8 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000000500)='em0cpus1\x95\xeb\xe6\xa2\xa5\x12\xb7V\xda\x8eo\x9ce\x0e\x8a\x9e\xc6!\xae\xe8\xf9I\xe4e\xb2q\xb9\xd9c\xc1n\xddg\xf17\xbf\xac\x19\xf8\xb0\x84\xad4\xc4\xa27\xe0\xdf\xfd\xf1\x98\xdb\x19\x97\x89\x9f\xf6Rr\xde7\xcb\xed&0\xa4\xb4):\x15\x8a\x91@<\x00\xbb\xbfm\xc8H\x95\xbb\xdea\x96Q\xef\x8a\x01\xf0<_\xfb\xb0\x98\xbc\x81#.\xc9\x93\xf1m\x91\xc5P\xe834\xcd\x14\x01\xe9K\x16\xde\x87I\xbf\x0f\xeb\xbe\xb4\x914\xa7>\xac\x16\x01\x9a\xe98]\xb1\xd4 \xcb\\\x1e1\xc3\xc91[,2w\xa2\xfa\x04<\xd0\xea\xe4\xb4', 0xfffffffffffffff8) keyctl$chown(0x4, r8, 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="04597c000000000008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="10000500000000002000060000000000"], 0x4c, 0x2) setreuid(r3, r6) close(r2) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x20, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)={0x7fffdfff}) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x402280, 0x0) preadv(r9, 0x0, 0x0, 0x0) unshare(0x40000000) r10 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) r11 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(r11) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000080)={0x20, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0}) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) r13 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(r13) ioctl$USBDEVFS_CONTROL(r13, 0xc0185500, &(0x7f0000000080)={0x20, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0}) r14 = accept4$vsock_stream(r13, &(0x7f0000000300)={0x28, 0x0, 0x80000001, @hyper}, 0x10, 0x0) fgetxattr(r14, &(0x7f0000000340)=ANY=[@ANYBLOB="73656375723a6f792e656d302fee70726f63c8"], &(0x7f0000000380)=""/4096, 0x1000) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r12) [ 367.553928][T12163] device ip6gretap6 entered promiscuous mode [ 367.684754][T12167] IPVS: ftp: loaded support on port[0] = 21 [ 367.704388][ T3962] usb 3-1: device not accepting address 6, error -71 [ 367.724995][ T3962] usb usb3-port1: unable to enumerate USB device 23:41:16 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) 23:41:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44002883}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4034091) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000e9c26a084c05e1022d40000000010902240001000001010904430002eb30d10009058f02ada98f4f0009050212936bd9540014000000ac0d3e3f2b35a8e9a904f70c000000806e395459f0d045aa62ae8fdd999c9a6a199a798cd2c4c20abe34a46b5eeb3d018c0236e783a1162e7286c39c78da83bcd1454b531ddc051fbc229f5d2aaaa671308491b47a1b4d74177f11949b7b8b4e26c2ac91f7d47e3d0969e786581d3f35c8da2a15e78e25ea65abeb56d96cf3ca94248b0799542b9b3c930ebb3c2bde542f75e25773ac1e66987e370b3f3ad9b261d7bd75141ea0331c429512d2d74dfc1a18e011d3c0f020a8bf2fd273ec98d63a2be367dc816321889614fe703d1023c961b3648a4607c57492"], 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10000, 0x0) tee(r2, r3, 0x40, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 367.875144][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 367.944313][T12171] device ip6gretap7 entered promiscuous mode [ 367.978290][T12177] IPVS: ftp: loaded support on port[0] = 21 23:41:17 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:41:17 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x40, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551071c0165ff00fc020a00000000100f000ee1000c08000f0000000000", 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) [ 368.162601][ T3962] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 368.221449][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.245515][ T12] usb 1-1: new high-speed USB device number 6 using dummy_hcd 23:41:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffb9, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="88013745e2d1841429eb030000e59d0953000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800140000000000080012000000000004001300080014000000000008000200", @ANYRES32=0x0, @ANYBLOB="14000300ff0200000000000000000000000000010800090029000000"], 0x188}}, 0x0) [ 368.324185][T12184] batman_adv: Cannot find parent device [ 368.330654][T12184] device ip6gretap8 entered promiscuous mode [ 368.412752][ T3962] usb 3-1: Using ep0 maxpacket: 8 23:41:17 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:41:17 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/se\x01\x00', 0x741040, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x81, 0x8f, 0x8, 0xccd, 0x86, 0x7f45, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaf, 0xbb, 0xff}}]}}]}}, 0x0) [ 368.493335][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 368.542964][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.569904][ T3962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.581167][ T3962] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 368.594193][ T3962] usb 3-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 368.594269][ T3962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.605439][ T3962] usb 3-1: config 0 descriptor?? [ 368.620429][ T12] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 368.628860][ T12] usb 1-1: config 0 has no interface number 0 [ 368.635191][ T12] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 429 [ 368.645333][ T12] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 915 [ 368.655398][ T12] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=40.2d [ 368.664622][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.681394][ T12] usb 1-1: config 0 descriptor?? [ 368.682395][T12193] batman_adv: Cannot find parent device [ 368.693072][T12193] device ip6gretap9 entered promiscuous mode 23:41:17 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 368.742060][ C0] usb 1-1: NFC: Urb failure (status -71) [ 368.748039][ C0] usb 1-1: NFC: Urb failure (status -71) [ 368.755922][ T12] usb 1-1: NFC: Unable to get FW version [ 368.762176][ T12] pn533_usb: probe of 1-1:0.67 failed with error -71 [ 368.935908][T12201] batman_adv: Cannot find parent device [ 368.942528][T12201] device ip6gretap10 entered promiscuous mode [ 368.952539][T11763] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 368.962035][T11847] usb 1-1: USB disconnect, device number 6 23:41:18 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 369.096643][ T3962] hid-sensor-hub 0003:093A:8001.0001: unknown main item tag 0x0 [ 369.175240][T12205] batman_adv: Cannot find parent device [ 369.181602][T12205] device ip6gretap11 entered promiscuous mode [ 369.192627][T11763] usb 4-1: Using ep0 maxpacket: 8 [ 369.298756][T11847] usb 3-1: USB disconnect, device number 7 [ 369.312361][T11763] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0086, bcdDevice=7f.45 [ 369.321526][T11763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.355152][T11763] usb 4-1: config 0 descriptor?? [ 369.397099][T11763] usb 4-1: selecting invalid altsetting 1 [ 369.403006][T11763] tm6000: Error -22 while registering [ 369.408504][T11763] tm6000: probe of 4-1:0.0 failed with error -22 [ 369.599717][T11763] usb 4-1: USB disconnect, device number 2 [ 370.082044][ T12] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 370.322376][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 370.382185][ T3377] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 370.442272][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.453523][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.466512][ T12] usb 3-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 370.475683][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.486750][ T12] usb 3-1: config 0 descriptor?? [ 370.622089][ T3377] usb 4-1: Using ep0 maxpacket: 8 [ 370.743334][ T3377] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0086, bcdDevice=7f.45 [ 370.753073][ T3377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.766145][ T3377] usb 4-1: config 0 descriptor?? [ 370.806713][ T12] hid-sensor-hub 0003:093A:8001.0002: unknown main item tag 0x0 [ 370.832836][ T3377] usb 4-1: selecting invalid altsetting 1 [ 370.838622][ T3377] tm6000: Error -22 while registering [ 370.844254][ T3377] tm6000: probe of 4-1:0.0 failed with error -22 23:41:20 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:41:20 executing program 2: readv(0xffffffffffffff9c, &(0x7f00000016c0), 0x1000000000000248) mknod(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="3ea99978b80d119d5754eeaaee88ad8b92936afc0cd65cf7ab498e2e618926bcce036837bdd90fee06420541", 0x8}], 0x100000000000013c, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) write$capi20_data(r1, &(0x7f0000000140)={{0x10, 0x9, 0x43, 0x82, 0xffff, 0x10000}, 0xe5, "e3d47cf09034e289cfacc8b7cc82e41a83c34930f46e08c66eca9ea8aedd8ca9c1cb2d4e54a8eedf6e53200ca192b7e62f5394780669d77871655ca5aa212c97982e1f0ee9b60e259dff8c6faa21cbc9fcdada3d2b9bff3221e7b8a18ab2fd5e0489b866da28af9cf703f9c24a727f510953ed096e9c77d1dbe43b9fb56670b8dfc71d426fe51a6a39d31e996e20a5ba2a015bb5f9ad14a03c68aaeb1e3336f96d59559125a060f7a16b22c2a247bb87e6d2913e498fc2c4f81a1802ed657814e68af5f3f59ab03575c9c5742cafa0e648f8f07242023c65ccbd60211f45bf3e8d0b2905ac"}, 0xf7) 23:41:20 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0xca, &(0x7f00000002c0)=@string={0xca, 0x3, "68a2146ad779032f6bc6680fa7817a3ccc84a12153d8a39b2fd99f969683ddfb167aa999d322350159efeeca426ab502f60a979b5abc9ce856d3e6812fc6696aaafc672b57a1d4b05702de27d75465ca98cf09e82ca99ccf1b10cbdb3fd71657544116feb23391e0a6e10352608da07a3ac580c946a4f264da826f3744fd6efc3012b5bd0a141d802396d15d11a87ba2dc15213000eadbcae4c1d97f931f9f2e9d9b3d8139ce52a800118ddd31b564920745a45d191836284f5b79f85d775764849c0feed6df6eda"}}]}) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0)=0xeb68, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) [ 370.910868][T11847] usb 3-1: USB disconnect, device number 8 [ 371.026972][ T12] usb 4-1: USB disconnect, device number 3 [ 371.075723][T12222] __nla_validate_parse: 2 callbacks suppressed [ 371.075748][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:20 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x404044, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x40008c0}], 0x1, 0x800) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x140000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000100)=0xfffffc00) socket$nl_netfilter(0x10, 0x3, 0xc) [ 371.144488][T12222] batman_adv: Cannot find parent device [ 371.150836][T12222] device ip6gretap12 entered promiscuous mode 23:41:20 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:41:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000200)='security.selinux\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x10900) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000ad16faa05918ee5400000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2007f0000000000030000009d000000b26900009e2e4e3ae6ee1d3cbe651431d7437179975703ce823309ebbbfeb8f25de07c8749e446b1ddb0c7a3644ff6127eab965884bfba6727ec59c56d749c83ce2864db729143b0eb3a465e98aa20808a978a7aa3dddff83d63b169b3059b2dc4aced57d939cd02711c629e89f8fbb12016eabc11aa749ad1474283cb21ebc44d1e6be3ca0fe20feca4d7bd76e3d7473b98d6d32859017dfe745d3fd2f6a4b13c2ab56e55e422aa465ba6deee4e55d14a6d824466aa5a8b4b741a1803d1aa3dcaabcdddde3d818e594771a5149601c1dffc477057d5f3e236fdd4680d4edba7bea88d7efe1a8b2a1aef138d102a727732ac78ae6b7d7fc77872ca601e9298bcc860a9e392eea78a79c1d15036f38878d0391c699eea3e1e9929334e07c7457e7c6b0c070ce0674f18fe1abf2aed7c662d141c2fbd30c01a7c73eff88d86c15a796a279f9ede842211ef12ceab5bd6587995921879d61bbd2bdb9a7e05f9253beb6ebe02f57c1a9d32e71b7309c8169ddf86a7130b846d471f3d5f4674f223b16ae3b5c0616d1f2fdb9f700ec31c7db571e2714045ddc6c1566cac"], 0x1da) [ 371.283470][ T3377] usb 1-1: new high-speed USB device number 7 using dummy_hcd 23:41:20 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/243) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x2000, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000240)=""/73) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000002c0)={{0x6}, 0x0, 0x6, 0x3, {0x3}, 0x1f}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000340), 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video35\x00', 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self\x00', 0x4000, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0xb, @raw_data="dbb9971f05512911d4ee827043c8dc3b31e91f5800d693a57df5cebaed42b892db279d737e6682ddfe074d2b08ecc574528a68eba1b825751fb5e947d47bb48b16aaf92732db0e56820d5bc7d690eaed1eb22866e3698a073ccdefec78423411a9f6a0ed41a613ace5c29c83e40ced42d3042fab34e341ba83f22d0b57fd8989fdf0b946c3415d1dd4a815e3ff167960b8fd4617f397a664185af2d563205b626e171498961f5f378b55cdd517568e3ab91e8deac9dc18ec7e63ddb4ed7b5b1764a3f809196394e8"}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000000540)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000580)=0xfffffffa) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000006c0)=0xe8) r5 = getgid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000700)={0xa0, 0xfffffffffffffff5, 0x1, {{0x1, 0x3, 0x4, 0x8, 0x908e, 0x40, {0x1, 0x1ff, 0x10001, 0x5, 0x27c, 0x4, 0x1, 0x20, 0x2, 0x80000000, 0x4, r4, r5, 0x3, 0x6}}, {0x0, 0x4}}}, 0xa0) semget(0x2, 0x59f50edda0626956, 0x1) r6 = syz_open_dev$mouse(&(0x7f00000007c0)='/dev/input/mouse#\x00', 0x9, 0x523381) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) write$binfmt_elf64(r6, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x7f, 0x31, 0x80, 0xffffffff, 0x3, 0x3, 0x6, 0x269, 0x40, 0xdc, 0xfffeffff, 0xc81, 0x38, 0x2, 0x1, 0x1000, 0xf8e0}, [{0x0, 0x80000001, 0xfffffffffffffff8, 0x0, 0x1, 0x7, 0x7fffffff, 0x5}, {0x70000000, 0x1000, 0x8, 0xfffffffffffffff9, 0x5, 0x4, 0x3e, 0x7fffffff}], "70cc856319bb43cc78626105266cf1f94559e593a131ebdcd62c66a54294332ff4352838a3923450", [[], [], [], [], []]}, 0x5d8) r7 = syz_open_dev$mice(&(0x7f0000000e00)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000e40)=0x3) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000e80)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/hwrng\x00', 0x4120c0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000f80)) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/full\x00', 0x424640, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000001000)) [ 371.443454][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:20 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe9, 0x57, 0x6b, 0x8, 0xd46, 0x78, 0x1630, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0x0, 0xc1, 0x9b, 0xe9}}]}}]}}, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvfrom$packet(r0, &(0x7f0000000080)=""/196, 0xffffffffffffff04, 0x102, 0x0, 0x0) [ 371.573766][T12234] batman_adv: Cannot find parent device [ 371.580063][T12234] device ip6gretap13 entered promiscuous mode 23:41:20 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x8, 0x810}, 0x0) lseek(0xffffffffffffffff, 0x4, 0x0) [ 371.643225][ T3377] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 371.693267][ T3377] usb 1-1: language id specifier not provided by device, defaulting to English [ 371.805774][T12245] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 371.823076][ T3377] usb 1-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 371.832373][ T3377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.840516][ T3377] usb 1-1: Product: syz [ 371.844889][ T3377] usb 1-1: Manufacturer: ꉨ樔秗⼃왫ཨ膧㱺蓌↡鮣隟莖ﯝ稖馩⋓ĵ쫮橂ʵ૶鮗뱚퍖臦옯橩ﲪ⭧ꅗ냔ɗ⟞哗쩥쾘꤬쾜ရ휿圖䅔︖㎲刃赠窠씺즀ꑆ擲苚㝯﵄ﱮሰ붵ᐊ耝阣巑ꠑꉻᗜ〡쫛쇤翙ᾓ⺟鮝脽츹ꡒᄀ딱鉤䔇嶤᠙⠶孏睝摗鲄 [ 371.874049][ T3377] usb 1-1: SerialNumber: syz 23:41:20 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 371.915660][T12245] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 371.943301][ T12] usb 3-1: new high-speed USB device number 9 using dummy_hcd 23:41:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000000100000000090400000903000000092100000001222200090581030000000000"], 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x289, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000000)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00221f00000096231359ce0700ad75394d8359122b8a82818270a96e0b03009cfa0b5d8c3d"], 0x0}, 0x0) [ 372.047564][ T3377] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 372.107229][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.183079][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 372.248169][T12220] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 372.269289][ T3377] usb 1-1: USB disconnect, device number 7 [ 372.300626][T12252] batman_adv: Cannot find parent device [ 372.302507][ T12] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 372.307375][T12252] device ip6gretap14 entered promiscuous mode [ 372.314635][ T12] usb 3-1: config 0 has no interface number 0 [ 372.402167][T12255] IPVS: ftp: loaded support on port[0] = 21 23:41:21 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 372.472980][T11847] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 372.495728][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.533082][ T12] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=16.30 [ 372.542399][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.550477][ T12] usb 3-1: Product: syz [ 372.554805][ T12] usb 3-1: Manufacturer: syz [ 372.559489][ T12] usb 3-1: SerialNumber: syz [ 372.572726][ T12] usb 3-1: config 0 descriptor?? [ 372.595340][T12259] batman_adv: Cannot find parent device [ 372.601569][T12259] device ip6gretap15 entered promiscuous mode [ 372.616563][ T12] kobil_sct 3-1:0.28: required endpoints missing [ 372.730632][T12255] chnl_net:caif_netlink_parms(): no params data found [ 372.742226][T11847] usb 4-1: device descriptor read/64, error 18 23:41:21 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) r14 = socket$unix(0x1, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 372.818376][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.825883][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.834704][T12255] device bridge_slave_0 entered promiscuous mode [ 372.846717][ T3377] usb 3-1: USB disconnect, device number 9 [ 372.866033][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.873386][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.882507][T12255] device bridge_slave_1 entered promiscuous mode [ 372.928317][T12255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.958389][T12255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.992904][T12255] team0: Port device team_slave_0 added [ 373.001508][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.003729][T12255] team0: Port device team_slave_1 added [ 373.054480][ T12] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 373.079775][T12255] device hsr_slave_0 entered promiscuous mode [ 373.132909][T12255] device hsr_slave_1 entered promiscuous mode [ 373.144056][T11847] usb 4-1: device descriptor read/64, error 18 [ 373.174071][T12255] debugfs: Directory 'hsr0' with parent '/' already present! [ 373.206280][T12267] batman_adv: Cannot find parent device [ 373.212743][T12267] device ip6gretap16 entered promiscuous mode [ 373.403369][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.410632][T12255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.418823][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.422443][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 373.426053][T12255] bridge0: port 1(bridge_slave_0) entered forwarding state 23:41:22 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 373.449863][T11847] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 373.501554][ T12] usb 1-1: language id specifier not provided by device, defaulting to English [ 373.654373][ T12] usb 1-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 373.663656][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.671704][ T12] usb 1-1: Product: syz [ 373.672791][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.676366][ T12] usb 1-1: Manufacturer: ꉨ樔秗⼃왫ཨ膧㱺蓌↡鮣隟莖ﯝ稖馩⋓ĵ쫮橂ʵ૶鮗뱚퍖臦옯橩ﲪ⭧ꅗ냔ɗ⟞哗쩥쾘꤬쾜ရ휿圖䅔︖㎲刃赠窠씺즀ꑆ擲苚㝯﵄ﱮሰ붵ᐊ耝阣巑ꠑꉻᗜ〡쫛쇤翙ᾓ⺟鮝脽츹ꡒᄀ딱鉤䔇嶤᠙⠶孏睝摗鲄 [ 373.713901][ T12] usb 1-1: SerialNumber: syz [ 373.715127][ T3377] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 373.735751][T11845] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.763920][T11845] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.802724][T11847] usb 4-1: device descriptor read/64, error 18 [ 373.962274][ T3377] usb 3-1: Using ep0 maxpacket: 8 [ 373.998462][T12255] 8021q: adding VLAN 0 to HW filter on device bond0 23:41:23 executing program 0: syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000100)='/dev/dsp#\x00') [ 374.062845][ T12] usb 1-1: can't set config #1, error -71 [ 374.075479][ T12] usb 1-1: USB disconnect, device number 8 [ 374.082943][ T3377] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 374.091186][ T3377] usb 3-1: config 0 has no interface number 0 [ 374.113471][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.122203][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.140057][T12255] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.202135][T11847] usb 4-1: device descriptor read/64, error 18 [ 374.247358][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.257161][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.266294][T11845] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.273496][T11845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.282398][ T3377] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=16.30 [ 374.291617][ T3377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.299826][ T3377] usb 3-1: Product: syz [ 374.304154][ T3377] usb 3-1: Manufacturer: syz [ 374.308836][ T3377] usb 3-1: SerialNumber: syz [ 374.322291][T11847] usb usb4-port1: attempt power cycle 23:41:23 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:41:23 executing program 0: syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109029f0003010000000904000000010100000a24010000000201020924030000000000000924030000000000000d240700000000287673d38d550b24070000000540e513e10924030000000006000d2408060000001e0000015b230904010000010200000904010101010200000905010900000000000725010000000009040200000103000009040201010102000009058209000000000007250100000000"], 0x0) [ 374.471305][ T3377] usb 3-1: config 0 descriptor?? [ 374.476925][T12255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.487502][T12255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.504769][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.514908][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.523921][T11845] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.531178][T11845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.539751][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.549828][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.551698][ T3377] kobil_sct 3-1:0.28: required endpoints missing [ 374.559833][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.574176][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.583741][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.593646][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.603262][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.612414][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.622319][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.631310][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.656553][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:41:23 executing program 2: ftruncate(0xffffffffffffffff, 0x9) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) [ 374.749589][ T3377] usb 3-1: USB disconnect, device number 10 [ 374.838309][T12302] batman_adv: Cannot find parent device [ 374.879202][T12302] device ip6gretap17 entered promiscuous mode [ 374.897502][T12255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.022143][ T12] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 375.152447][T11847] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 375.184155][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.193428][T11845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.262094][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 375.383176][ T12] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 375.394247][ T12] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.463563][T11847] usb 4-1: device descriptor read/64, error 18 [ 375.564886][ T12] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.574295][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.582502][ T12] usb 1-1: Product: syz [ 375.586723][ T12] usb 1-1: Manufacturer: syz [ 375.591414][ T12] usb 1-1: SerialNumber: syz 23:41:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:41:24 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ffffc8ff6110180000000000ae50000000189365f1e660fdc57a44c4"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000280)={0x4, 0xc261622e524b9b48, {0xfffffffffffffffd, 0x1, 0x1000, 0x3, 0x1}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r10, 0x5100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xfffc, 0x10, 0x9, 0x3}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x101, 0x800}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x348f37f433fddbe1}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', r9}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000240)={0x9, {0x7, 0x9, 0x0, 0x1}}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r13, 0xc074510c, &(0x7f0000a07fff)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:41:24 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x100, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0xa, @raw_data="773afc022896342cd9e734af0bc9a949f5f81580c4c40f2b784d1293e3611c0df43625cb16911a30907fea34a9e88cf7fefc4743517aa09af224be3f92f5229f2d563b60223b09fdbc46c1403e4db599791317dfa9c4f0bd47955482df68017e25ebc0f7dd2d494f3a8a3f60604f0f98e2176e170db05d313d6c904427af472ab80be167c035390c1a9bd3ff62e0c7dab66d5cc79d35fc79fbbae9bba5b993cf5e9232cefe7471ecee94883a5d6a3faee3f0da2cd945b724af184748fe39c4c2538308f5b9d092d7"}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f0000000000)="240000001a005f3814f9f407000904018002020000000000000000000800040040000000", 0x24) 23:41:24 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000001280)=""/179, 0xb3}}], 0x1, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40400) r1 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r5 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r5, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r7}, 0x18, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r11, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r11}}, 0x18) r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r12) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r13, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r14, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r12, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r14}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00002104000000d8030000f0010000f8000200f8000000f8000000f00100004003000040030000400300004003000040030000040000008d941a6dc8fd54cc27dc4b985ef52d7bb918ac56ae1af41477566d777534b69531ea153f", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000009800f8000000000000000000000000000000000000000000000000006000534554000000000000000000000000000000000000000000000000000000001000000400000001000000ff000000f5f7feffffffffffffaf31000005f900000800000009000000040000000600000004000000000000800800000005000000e00000017f00000100000000ffffff0074756e6c300000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000020001100000000000000000000000000000d000f80000000000000000000000000000000000000000000000000038006f776e657200"/426, @ANYRES32=r9, @ANYRES32=r7, @ANYRES32=r12, @ANYRES32=r8, @ANYBLOB="0004000000000000280053594e50524f585900000000000000000000000000000000000000000000040906000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00050010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000e08f0000f8ffffff0100000000000000280069636d70000000000000000000000000000000000000000000000000000094450801000000006000434c5553544552495000000000000000000000000000000000000000000001000000aaaaaaaaaa22452b1000080011002800ff03000031002d003500240010002c00400040000c0030001400000002000000000001001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x8) r15 = getgid() getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r18, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r20}, 0x18, 0x0) r21 = getegid() r22 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r22, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r24}, 0x18, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r25}}) fstat(0xffffffffffffffff, &(0x7f0000000280)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="e0030000feffffff010000000000000005000000000000000000000000000000ff03000000000000000000000000000001000080ff0f000001000000000000003f0000000000000007000000000000003f0000000000000001000000000000000010000000000000be00000002000000c39200000800000000020000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00020000b7ffffff00000000030000000000000081ffffffffffffff0a000000fcffffff6d6f756e74696e666f00000000000000020000000000000002000000000000000000000001000000040000000000000081000000020000000100000000000000030000000000000000000000000000000600000000000000010400000000000005000000000000000200000002000000ab0000000100000005000000", @ANYRES32=r7, @ANYRES32=r15, @ANYBLOB="000000000000000000000000000000000000000000000100000000000a00007f4de95e27f5a1b600090000006d6f756e74696e666f00000000000000c0ffffffffffffff0200000000000000ff0f000000000000090000000000000001000000090000000200000000000000218600000000000004000000000000000900000000000000faffffffffffffff40000000000000000600010005000000a5820000ff07000006000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="fb0000000000000000000000020000000000000007000000000000000a000000000000806d6f756e74696e666f0000000000000000000000000000000300000000000000040000000000000004000000000000000100000003000000020000000000000092cfe87500000000000000000000000001000080000000000100000000000000a80000000000000007000000cfa2000003000000c4f2ffff06000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="030000001b00000000000000010000000000000062040000000000000a0000007f0000006d6f756e74696e666f0000000000000001000000000000000200000000000000fdffffffffffffff0400000000000000080000000004000000000000000000004000000000000000000008000000000006000000000000004000000000000000ffffff7f00000000d30d000000800000080000000000000002000000", @ANYRES32=r24, @ANYRES32=r25, @ANYBLOB="ff0100000300000000000000030000000000000000f8ffffffffffff0000000000040000050000000000000001000000000000000800000000000000d40500000000000002000000040000000300000000000000060000000000000000000080000000006c5f0000000000000600000000000000050000000000000005000000080000000500000004000000ff070000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000800000200000000000000030000000000000006000000000000000000000006000000"], 0x3e0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r26, &(0x7f00000017c0), 0x199, 0x0) [ 375.752598][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.807473][T12331] fuse: Bad value for 'fd' [ 375.872338][T12339] input: syz0 as /devices/virtual/input/input6 23:41:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000000500)='em0cpus1\x95\xeb\xe6\xa2\xa5\x12\xb7V\xda\x8eo\x9ce\x0e\x8a\x9e\xc6!\xae\xe8\xf9I\xe4e\xb2q\xb9\xd9c\xc1n\xddg\xf17\xbf\xac\x19\xf8\xb0\x84\xad4\xc4\xa27\xe0\xdf\xfd\xf1\x98\xdb\x19\x97\x89\x9f\xf6Rr\xde7\xcb\xed&0\xa4\xb4):\x15\x8a\x91@<\x00\xbb\xbfm\xc8H\x95\xbb\xdea\x96Q\xef\x8a\x01\xf0<_\xfb\xb0\x98\xbc\x81#.\xc9\x93\xf1m\x91\xc5P\xe834\xcd\x14\x01\xe9K\x16\xde\x87I\xbf\x0f\xeb\xbe\xb4\x914\xa7>\xac\x16\x01\x9a\xe98]\xb1\xd4 \xcb\\\x1e1\xc3\xc91[,2w\xa2\xfa\x04<\xd0\xea\xe4\xb4', 0xfffffffffffffff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000000415434810000200040001000800020004000180000000009f265df9333f3a1b931b9880ab4e863d529109771ef15d193d0ad22dbf6221b662c34f85ae8d153d929e9419e52c995022d6caf63b78be14113170f451dd4f4ce2608b66142bda58e0e4ea505c1cc867624b97d14385cdf16e5999c42682ab50b0a1ae"], 0x24}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$chown(0x4, r2, 0x0, r4) keyctl$get_security(0x11, r2, &(0x7f0000000000)=""/33, 0x21) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041619140950b2a17e99b0000000109021200010000000009044e000019328200cce83c34e78ff219b343c854d106f967a6fe8635f6cd496a8065c95af47c50738204ee5751a21823ac42cc62bebc7d3994aa133c953fc32f39ec5208fce95ff11dddb34201c7eb7c7665a0135ff8f8de72f5b6fc392e7021e87ee2b6f1c7200445a2480ba13da2d19ada24bab6202f2a815903bca01acb3edc178369815440b39b29c9a6420062640ea9db36b21d4de8b3ddca0fd9a65a49a85db8179cec7a6fdf8d6578007b7fe25acf302e1699b0"], 0x0) [ 375.919321][T12329] batman_adv: Cannot find parent device [ 375.926383][T12329] device ip6gretap18 entered promiscuous mode [ 375.983551][ T12] usb 1-1: MIDIStreaming interface descriptor not found [ 375.990698][ T12] ===================================================== [ 375.997656][ T12] BUG: KMSAN: uninit-value in build_audio_procunit+0x1be8/0x2490 [ 376.005383][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.4.0-rc3+ #0 [ 376.012752][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.022914][ T12] Workqueue: usb_hub_wq hub_event [ 376.027945][ T12] Call Trace: [ 376.031247][ T12] dump_stack+0x191/0x1f0 [ 376.035601][ T12] kmsan_report+0x128/0x220 [ 376.040127][ T12] __msan_warning+0x73/0xe0 [ 376.044641][ T12] build_audio_procunit+0x1be8/0x2490 [ 376.050055][ T12] parse_audio_unit+0x115c/0x7490 [ 376.055104][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.061021][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.066939][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.072854][ T12] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 376.078951][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.084869][ T12] snd_usb_create_mixer+0x1d7c/0x4070 [ 376.090271][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.090328][ T12] usb_audio_probe+0x286b/0x3eb0 [ 376.090371][ T12] ? snd_usb_autosuspend+0x110/0x110 [ 376.090392][ T12] usb_probe_interface+0xd19/0x1310 [ 376.090432][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.101366][ T12] ? usb_register_driver+0x860/0x860 [ 376.111929][ T12] really_probe+0xd91/0x1f90 [ 376.111957][ T12] driver_probe_device+0x1ba/0x510 [ 376.111994][ T12] __device_attach_driver+0x5b8/0x790 [ 376.123192][ T12] bus_for_each_drv+0x28e/0x3b0 [ 376.143054][ T12] ? deferred_probe_work_func+0x400/0x400 [ 376.148792][ T12] __device_attach+0x489/0x750 [ 376.153580][ T12] device_initial_probe+0x4a/0x60 [ 376.158705][ T12] bus_probe_device+0x131/0x390 [ 376.163567][ T12] device_add+0x25b5/0x2df0 [ 376.168109][ T12] usb_set_configuration+0x309f/0x3710 [ 376.173604][ T12] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 376.179688][ T12] generic_probe+0xe7/0x280 [ 376.184231][ T12] ? usb_choose_configuration+0xae0/0xae0 [ 376.190049][ T12] usb_probe_device+0x146/0x200 [ 376.194906][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.200816][ T12] ? usb_register_device_driver+0x500/0x500 [ 376.206716][ T12] really_probe+0xd91/0x1f90 [ 376.211323][ T12] driver_probe_device+0x1ba/0x510 [ 376.216450][ T12] __device_attach_driver+0x5b8/0x790 [ 376.221838][ T12] bus_for_each_drv+0x28e/0x3b0 [ 376.226693][ T12] ? deferred_probe_work_func+0x400/0x400 [ 376.232431][ T12] __device_attach+0x489/0x750 [ 376.237210][ T12] device_initial_probe+0x4a/0x60 [ 376.242242][ T12] bus_probe_device+0x131/0x390 [ 376.247103][ T12] device_add+0x25b5/0x2df0 [ 376.251632][ T12] usb_new_device+0x23e5/0x2fb0 [ 376.256512][ T12] hub_event+0x581d/0x72f0 [ 376.260987][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.266880][ T12] ? led_work+0x720/0x720 [ 376.271212][ T12] ? led_work+0x720/0x720 [ 376.275549][ T12] process_one_work+0x1572/0x1ef0 [ 376.280602][ T12] worker_thread+0x111b/0x2460 [ 376.285397][ T12] kthread+0x4b5/0x4f0 [ 376.289467][ T12] ? process_one_work+0x1ef0/0x1ef0 [ 376.294676][ T12] ? kthread_blkcg+0xf0/0xf0 [ 376.299271][ T12] ret_from_fork+0x35/0x40 [ 376.303689][ T12] [ 376.306008][ T12] Uninit was created at: [ 376.310254][ T12] kmsan_internal_poison_shadow+0x60/0x120 [ 376.316081][ T12] kmsan_slab_alloc+0xaa/0x120 [ 376.320842][ T12] __kmalloc+0x28e/0x430 [ 376.325081][ T12] usb_get_configuration+0x50d/0x76a0 [ 376.330458][ T12] usb_new_device+0x224/0x2fb0 [ 376.335221][ T12] hub_event+0x581d/0x72f0 [ 376.339636][ T12] process_one_work+0x1572/0x1ef0 [ 376.344664][ T12] worker_thread+0x111b/0x2460 [ 376.349427][ T12] kthread+0x4b5/0x4f0 [ 376.353497][ T12] ret_from_fork+0x35/0x40 [ 376.357900][ T12] ===================================================== [ 376.364823][ T12] Disabling lock debugging due to kernel taint [ 376.370970][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 376.377559][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.4.0-rc3+ #0 [ 376.386310][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.396382][ T12] Workqueue: usb_hub_wq hub_event [ 376.401417][ T12] Call Trace: [ 376.404713][ T12] dump_stack+0x191/0x1f0 [ 376.407267][T12306] udc dummy_udc.0: registering UDC driver [USB fuzzer] [ 376.409052][ T12] panic+0x3c9/0xc1e [ 376.409099][ T12] kmsan_report+0x215/0x220 [ 376.409125][ T12] __msan_warning+0x73/0xe0 [ 376.409145][ T12] build_audio_procunit+0x1be8/0x2490 [ 376.409189][ T12] parse_audio_unit+0x115c/0x7490 [ 376.416133][T12306] dummy_hcd dummy_hcd.0: port status 0x00010101 has changes [ 376.419940][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.452433][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.458345][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.464244][ T12] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 376.470322][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.476228][ T12] snd_usb_create_mixer+0x1d7c/0x4070 [ 376.481605][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.487546][ T12] usb_audio_probe+0x286b/0x3eb0 [ 376.492528][ T12] ? snd_usb_autosuspend+0x110/0x110 [ 376.497835][ T12] usb_probe_interface+0xd19/0x1310 [ 376.503049][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.508945][ T12] ? usb_register_driver+0x860/0x860 [ 376.514232][ T12] really_probe+0xd91/0x1f90 [ 376.518837][ T12] driver_probe_device+0x1ba/0x510 [ 376.523962][ T12] __device_attach_driver+0x5b8/0x790 [ 376.529349][ T12] bus_for_each_drv+0x28e/0x3b0 [ 376.534199][ T12] ? deferred_probe_work_func+0x400/0x400 [ 376.541057][ T12] __device_attach+0x489/0x750 [ 376.545848][ T12] device_initial_probe+0x4a/0x60 [ 376.550875][ T12] bus_probe_device+0x131/0x390 [ 376.555734][ T12] device_add+0x25b5/0x2df0 [ 376.560266][ T12] usb_set_configuration+0x309f/0x3710 [ 376.566453][ T12] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 376.572536][ T12] generic_probe+0xe7/0x280 [ 376.577046][ T12] ? usb_choose_configuration+0xae0/0xae0 [ 376.582790][ T12] usb_probe_device+0x146/0x200 [ 376.587648][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.593545][ T12] ? usb_register_device_driver+0x500/0x500 [ 376.599450][ T12] really_probe+0xd91/0x1f90 [ 376.604063][ T12] driver_probe_device+0x1ba/0x510 [ 376.609200][ T12] __device_attach_driver+0x5b8/0x790 [ 376.614589][ T12] bus_for_each_drv+0x28e/0x3b0 [ 376.619445][ T12] ? deferred_probe_work_func+0x400/0x400 [ 376.625178][ T12] __device_attach+0x489/0x750 [ 376.629954][ T12] device_initial_probe+0x4a/0x60 [ 376.634982][ T12] bus_probe_device+0x131/0x390 [ 376.639862][ T12] device_add+0x25b5/0x2df0 [ 376.644403][ T12] usb_new_device+0x23e5/0x2fb0 [ 376.649280][ T12] hub_event+0x581d/0x72f0 [ 376.653752][ T12] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 376.659646][ T12] ? led_work+0x720/0x720 [ 376.663974][ T12] ? led_work+0x720/0x720 [ 376.668334][ T12] process_one_work+0x1572/0x1ef0 [ 376.673399][ T12] worker_thread+0x111b/0x2460 [ 376.678194][ T12] kthread+0x4b5/0x4f0 [ 376.682270][ T12] ? process_one_work+0x1ef0/0x1ef0 [ 376.687482][ T12] ? kthread_blkcg+0xf0/0xf0 [ 376.692079][ T12] ret_from_fork+0x35/0x40 [ 376.698015][ T12] Kernel Offset: disabled [ 376.702386][ T12] Rebooting in 86400 seconds..