102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000004300)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008680)="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", 0x2000, &(0x7f000000df80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 16:47:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:47:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x7, 0x0, 0xe}]}}, &(0x7f0000000180)=""/152, 0x26, 0x98, 0x1}, 0x20) 16:47:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 402.157107][T13259] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 16:47:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x7, 0x0, 0xe}]}}, &(0x7f0000000180)=""/152, 0x26, 0x98, 0x1}, 0x20) 16:47:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0xc}, @TIPC_NLA_MEDIA={0x40}]}, 0x64}}, 0x0) 16:47:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) [ 402.446533][ T3657] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 402.686405][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 402.806659][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 402.815049][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 402.836354][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 402.845603][ T3657] usb 6-1: config 250 has no interface number 0 [ 402.861932][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 402.874699][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 402.892690][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 402.903267][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 402.925335][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 403.016058][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 403.036814][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 403.044855][ T3657] usb 6-1: SerialNumber: syz [ 403.076877][T13260] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.084665][T13260] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.097667][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 403.103945][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 403.327832][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 403.581960][T13278] UDC core: couldn't find an available UDC or it's busy: -16 [ 403.589512][T13278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 403.639697][ T3744] usb 6-1: USB disconnect, device number 29 [ 403.661984][ T3744] usblp0: removed 16:47:13 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:47:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:47:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c0002800500"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 16:47:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:47:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x3c}, @TIPC_NLA_SOCK={0xc}, @TIPC_NLA_BEARER={0x4}]}, 0x64}}, 0x0) 16:47:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xc4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x1c}, @TIPC_NLA_LINK={0x68}, @TIPC_NLA_NET={0x1c}]}, 0xc4}}, 0x0) 16:47:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 404.265105][T13291] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 16:47:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:13 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:47:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 404.556405][ T3744] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 404.806528][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 404.936571][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 404.945616][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 404.955022][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 404.964687][ T3744] usb 6-1: config 250 has no interface number 0 [ 404.971381][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 404.983443][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 404.994389][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 405.005885][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 405.019823][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 405.116588][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 405.125753][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 405.134512][ T3744] usb 6-1: SerialNumber: syz [ 405.159036][T13292] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 405.165909][T13292] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 405.177426][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 405.183708][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 405.409160][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 30 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 405.673822][T13307] UDC core: couldn't find an available UDC or it's busy: -16 [ 405.681505][T13307] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 405.731124][ T1130] usb 6-1: USB disconnect, device number 30 [ 405.752413][ T1130] usblp0: removed 16:47:15 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:47:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:47:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:47:15 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c0002800500"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 16:47:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:47:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 406.352065][T13319] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 16:47:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:47:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 406.606613][ T3657] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 406.876496][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 406.996587][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 407.005099][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 407.014398][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 407.024141][ T3657] usb 6-1: config 250 has no interface number 0 [ 407.030722][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 407.042741][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 407.055187][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 407.065916][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 407.079956][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 407.176738][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 407.185817][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 407.193985][ T3657] usb 6-1: SerialNumber: syz [ 407.216623][T13317] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.223591][T13317] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 407.237548][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 407.243867][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 407.449119][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 407.487350][ T3657] usb 6-1: USB disconnect, device number 31 [ 407.496006][ T3657] usblp0: removed [ 408.006474][ T3657] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 408.256506][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 408.406703][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 408.415083][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 408.424293][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 408.433747][ T3657] usb 6-1: config 250 has no interface number 0 [ 408.440147][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 408.451778][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 408.462264][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 408.472714][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 408.487038][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 408.576570][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 408.586119][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 408.594258][ T3657] usb 6-1: SerialNumber: syz [ 408.616884][T13317] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 408.623762][T13317] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 408.638727][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 408.645106][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 408.857910][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 408.907466][ T3657] usb 6-1: USB disconnect, device number 32 [ 408.917529][ T3657] usblp0: removed 16:47:18 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:47:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, 0x0, 0x0, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:18 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) [ 409.656494][ T1130] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 409.896452][ T1130] usb 6-1: Using ep0 maxpacket: 8 [ 410.016482][ T1130] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 410.024962][ T1130] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 410.041092][ T1130] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 410.052714][ T1130] usb 6-1: config 250 has no interface number 0 [ 410.059268][ T1130] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 410.071142][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 410.081886][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 410.092859][ T1130] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 410.106899][ T1130] usb 6-1: config 250 interface 228 has no altsetting 0 [ 410.186582][ T1130] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 410.195631][ T1130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 410.204195][ T1130] usb 6-1: SerialNumber: syz [ 410.236728][T13338] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 410.243616][T13338] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 410.257437][ T1130] hub 6-1:250.228: bad descriptor, ignoring hub [ 410.263726][ T1130] hub: probe of 6-1:250.228 failed with error -5 [ 410.468456][ T1130] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 410.517290][ T1130] usb 6-1: USB disconnect, device number 33 [ 410.525999][ T1130] usblp0: removed [ 411.036458][ T1130] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 411.296444][ T1130] usb 6-1: Using ep0 maxpacket: 8 [ 411.417323][ T1130] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 411.425695][ T1130] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 411.440468][ T1130] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 411.450194][ T1130] usb 6-1: config 250 has no interface number 0 [ 411.456673][ T1130] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 411.468340][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 411.478903][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 411.489349][ T1130] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 411.502913][ T1130] usb 6-1: config 250 interface 228 has no altsetting 0 [ 411.586587][ T1130] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 411.595963][ T1130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 411.604117][ T1130] usb 6-1: SerialNumber: syz [ 411.626988][T13338] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 411.633861][T13338] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 411.647606][ T1130] hub 6-1:250.228: bad descriptor, ignoring hub [ 411.654913][ T1130] hub: probe of 6-1:250.228 failed with error -5 [ 411.877569][ T1130] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 34 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 411.928510][ T1130] usb 6-1: USB disconnect, device number 34 [ 411.939964][ T1130] usblp0: removed 16:47:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:47:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:47:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) 16:47:34 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 16:47:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, 0x0, 0x0, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:34 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:47:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, 0x0, 0x0, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:34 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 16:47:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:34 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:47:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 424.998155][ T5] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 425.266446][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 425.396681][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 425.405153][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 425.414175][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 425.423478][ T5] usb 6-1: config 250 has no interface number 0 [ 425.430242][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 425.441871][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 425.461168][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 425.472113][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 425.486802][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 425.596937][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 425.606048][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.615205][ T5] usb 6-1: SerialNumber: syz [ 425.637515][T13347] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 425.644432][T13347] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 425.657548][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 425.663906][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 425.877922][ T5] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 425.947720][ T5] usb 6-1: USB disconnect, device number 35 [ 425.957676][ T5] usblp0: removed [ 426.486695][ T5] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 426.736477][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 426.868108][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 426.876692][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 426.885754][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 426.895748][ T5] usb 6-1: config 250 has no interface number 0 [ 426.902480][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 426.914778][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 426.925721][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 426.936494][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 426.950438][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 427.036700][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 427.045855][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 427.054656][ T5] usb 6-1: SerialNumber: syz [ 427.077024][T13347] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 427.084305][T13347] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 427.107793][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 427.114090][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 427.328005][ T5] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 427.377414][ T5] usb 6-1: USB disconnect, device number 36 [ 427.387539][ T5] usblp0: removed 16:47:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:47:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {0x0}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x7) 16:47:47 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) 16:47:47 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:47:47 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:47:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {0x0}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:47 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:47:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x7) 16:47:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {0x0}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:47:47 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) [ 438.426659][ T3657] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 438.676451][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 438.796956][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 438.805471][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 438.814796][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 438.824350][ T3657] usb 6-1: config 250 has no interface number 0 [ 438.830930][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 438.842836][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 438.853604][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 438.864143][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 438.877741][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 438.956731][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 438.965812][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 438.974208][ T3657] usb 6-1: SerialNumber: syz [ 438.996688][T13377] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 439.006128][T13377] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 439.017534][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 439.023840][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 439.228656][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 439.687509][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.693829][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.847049][T13377] usb 6-1: reset high-speed USB device number 37 using dummy_hcd [ 440.097230][T13377] usb 6-1: Using ep0 maxpacket: 8 [ 440.256867][T13396] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 440.263791][T13396] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 440.480445][T13396] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 440.487928][T13396] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 440.536532][ C0] usblp0: nonzero read bulk status received: -71 [ 440.700017][ T3657] usb 6-1: USB disconnect, device number 37 [ 440.712206][ T3657] usblp0: removed 16:48:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:48:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x7) 16:48:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) 16:48:09 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:48:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:48:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {0x0}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:48:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {0x0}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 460.286713][ T1130] usb 6-1: new high-speed USB device number 38 using dummy_hcd 16:48:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) [ 460.586374][ T1130] usb 6-1: Using ep0 maxpacket: 8 [ 460.716515][ T1130] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 460.728529][ T1130] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 460.749411][ T1130] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 460.769923][ T1130] usb 6-1: config 250 has no interface number 0 [ 460.782889][ T1130] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 460.799895][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 460.812734][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 460.823358][ T1130] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 460.837576][ T1130] usb 6-1: config 250 interface 228 has no altsetting 0 [ 460.926716][ T1130] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 460.935851][ T1130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 460.944008][ T1130] usb 6-1: SerialNumber: syz [ 460.977704][T13408] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 460.984587][T13408] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 460.997582][ T1130] hub 6-1:250.228: bad descriptor, ignoring hub [ 461.003904][ T1130] hub: probe of 6-1:250.228 failed with error -5 [ 461.228615][ T1130] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 461.847604][T13408] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 462.096650][T13408] usb 6-1: Using ep0 maxpacket: 8 [ 462.276871][T13430] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 462.283789][T13430] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 462.499318][T13430] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 462.506158][T13430] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 462.566506][ C0] usblp0: nonzero read bulk status received: -71 [ 462.724397][ T140] usb 6-1: USB disconnect, device number 38 [ 462.734259][ T140] usblp0: removed 16:48:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 16:48:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {0x0}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:48:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 16:48:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:48:21 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:48:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:48:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:48:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:48:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {0x0}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 472.796590][ T3744] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 473.036498][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 473.156652][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 473.165052][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 473.174267][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 473.183920][ T3744] usb 6-1: config 250 has no interface number 0 [ 473.190466][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 473.203509][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 473.214268][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 473.226028][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 473.239748][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 473.326572][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 473.335798][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 473.344277][ T3744] usb 6-1: SerialNumber: syz [ 473.366987][T13442] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 473.383303][T13442] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 473.427755][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 473.434048][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 473.647952][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 39 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 474.287641][T13442] usb 6-1: reset high-speed USB device number 39 using dummy_hcd [ 474.526515][T13442] usb 6-1: Using ep0 maxpacket: 8 [ 474.666851][T13465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 474.673728][T13465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 474.889499][T13465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 474.896718][T13465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 474.956369][ C1] usblp0: nonzero read bulk status received: -71 [ 475.125759][ T1130] usb 6-1: USB disconnect, device number 39 [ 475.138411][ T1130] usblp0: removed 16:48:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:48:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {0x0}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:43 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:43 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 16:48:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:48:43 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) 16:48:43 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {0x0}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:43 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:43 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 494.496922][ T3657] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 494.736448][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 494.856601][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 494.864965][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 494.881030][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 494.892630][ T3657] usb 6-1: config 250 has no interface number 0 [ 494.908725][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 494.923711][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 494.942058][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 494.954222][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 494.976018][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 495.056563][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 495.065800][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.082587][ T3657] usb 6-1: SerialNumber: syz [ 495.126911][T13478] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 495.133828][T13478] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 495.147588][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 495.153881][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 495.359065][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 495.966744][T13478] usb 6-1: reset high-speed USB device number 40 using dummy_hcd [ 496.206429][T13478] usb 6-1: Using ep0 maxpacket: 8 [ 496.347053][T13500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 496.353905][T13500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 496.568705][T13500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 496.575626][T13500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 496.626370][ C0] usblp0: nonzero read bulk status received: -71 [ 496.791577][ T3744] usb 6-1: USB disconnect, device number 40 [ 496.801667][ T3744] usblp0: removed [ 501.128099][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.134503][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 16:48:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:48:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x3, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:58 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:58 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:48:58 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 16:48:58 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) 16:48:58 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:58 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:48:58 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:48:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 509.126735][ T1130] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 509.376517][ T1130] usb 6-1: Using ep0 maxpacket: 8 [ 509.516690][ T1130] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 509.525367][ T1130] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 509.534767][ T1130] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 509.544567][ T1130] usb 6-1: config 250 has no interface number 0 [ 509.551577][ T1130] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 509.563576][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 509.574242][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 509.585439][ T1130] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 509.602610][ T1130] usb 6-1: config 250 interface 228 has no altsetting 0 [ 509.696666][ T1130] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 509.705749][ T1130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.720737][ T1130] usb 6-1: SerialNumber: syz [ 509.747032][T13510] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 509.754116][T13510] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 509.768619][ T1130] hub 6-1:250.228: bad descriptor, ignoring hub [ 509.774927][ T1130] hub: probe of 6-1:250.228 failed with error -5 [ 510.008048][ T1130] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 41 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 510.626844][T13510] usb 6-1: reset high-speed USB device number 41 using dummy_hcd [ 510.876413][T13510] usb 6-1: Using ep0 maxpacket: 8 [ 511.036981][T13529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.043956][T13529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.259320][T13529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.266224][T13529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 511.316440][ C0] usblp0: nonzero read bulk status received: -71 [ 511.480060][ T3657] usb 6-1: USB disconnect, device number 41 [ 511.488270][ T3657] usblp0: removed 16:49:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:49:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x0, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:15 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 16:49:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:49:15 executing program 4: mkdir(0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:15 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) 16:49:16 executing program 4: mkdir(0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x0, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:16 executing program 4: mkdir(0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x0, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 526.866512][ T3657] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 527.116449][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 527.266550][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 527.275184][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 527.284629][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 527.294650][ T3657] usb 6-1: config 250 has no interface number 0 [ 527.301598][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 527.313722][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 527.324463][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 527.335118][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 527.348970][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 527.426669][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 527.435752][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 527.449991][ T3657] usb 6-1: SerialNumber: syz [ 527.497002][T13540] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 527.503934][T13540] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 527.517688][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 527.523978][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 527.727719][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 42 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 528.348221][T13540] usb 6-1: reset high-speed USB device number 42 using dummy_hcd [ 528.586559][T13540] usb 6-1: Using ep0 maxpacket: 8 [ 528.727097][T13560] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 528.734072][T13560] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 528.955104][T13560] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 528.964210][T13560] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 529.026376][ C1] usblp0: nonzero read bulk status received: -71 [ 529.191550][ T3657] usb 6-1: USB disconnect, device number 42 [ 529.204447][ T3657] usblp0: removed 16:49:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:49:32 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:49:32 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 16:49:32 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) 16:49:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:32 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 543.716476][ T5] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 543.906415][ T5] usb 6-1: device descriptor read/64, error 18 [ 544.176573][ T5] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 544.367343][ T5] usb 6-1: device descriptor read/64, error 18 [ 544.487411][ T5] usb usb6-port1: attempt power cycle [ 544.926469][ T5] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 545.136501][ T5] usb 6-1: device descriptor read/8, error -61 [ 545.406490][ T5] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 545.586499][ T5] usb 6-1: device descriptor read/8, error -61 [ 545.707373][ T5] usb usb6-port1: unable to enumerate USB device 16:49:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:49:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:50 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x7) 16:49:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 16:49:50 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) 16:49:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:50 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:49:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:49:50 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 561.376653][ T3657] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 561.566506][ T3657] usb 6-1: device descriptor read/64, error 18 [ 561.846511][ T3657] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 562.036446][ T3657] usb 6-1: device descriptor read/64, error 18 [ 562.156944][ T3657] usb usb6-port1: attempt power cycle [ 562.569017][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.575339][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.583778][ T3657] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 562.756656][ T3657] usb 6-1: device descriptor read/8, error -61 [ 563.026469][ T3657] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 563.196619][ T3657] usb 6-1: device descriptor read/8, error -61 [ 563.317385][ T3657] usb usb6-port1: unable to enumerate USB device 16:50:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:50:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:50:07 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:50:07 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 16:50:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x7) 16:50:07 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) 16:50:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:50:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:50:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:50:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:50:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:50:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 579.046610][ T5] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 579.236448][ T5] usb 6-1: device descriptor read/64, error 18 [ 579.506393][ T5] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 579.696546][ T5] usb 6-1: device descriptor read/64, error 18 [ 579.817074][ T5] usb usb6-port1: attempt power cycle [ 580.226432][ T5] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 580.396476][ T5] usb 6-1: device descriptor read/8, error -61 [ 580.666412][ T5] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 580.836476][ T5] usb 6-1: device descriptor read/8, error -61 [ 580.956728][ T5] usb usb6-port1: unable to enumerate USB device 16:50:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:50:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:50:25 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:50:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x7) 16:50:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 16:50:25 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:50:25 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:50:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:50:25 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:50:25 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:50:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:50:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 596.646594][ T1130] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 596.836472][ T1130] usb 6-1: device descriptor read/64, error 18 [ 597.106415][ T1130] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 597.316543][ T1130] usb 6-1: device descriptor read/64, error 18 [ 597.438530][ T1130] usb usb6-port1: attempt power cycle [ 597.856657][ T1130] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 598.028011][ T1130] usb 6-1: device descriptor read/8, error -61 [ 598.306470][ T1130] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 598.496674][ T1130] usb 6-1: device descriptor read/8, error -61 [ 598.617175][ T1130] usb usb6-port1: unable to enumerate USB device 16:50:44 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:50:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54ce", 0xd9, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:50:44 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:50:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:50:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x7) 16:50:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 16:50:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x7) 16:50:44 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:50:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:50:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x7) 16:50:44 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:50:44 executing program 2: pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x7) [ 615.416417][ T5] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 615.616626][ T5] usb 6-1: device descriptor read/64, error 18 [ 615.886466][ T5] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 616.076433][ T5] usb 6-1: device descriptor read/64, error 18 [ 616.212164][ T5] usb usb6-port1: attempt power cycle [ 616.656516][ T5] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 616.846540][ T5] usb 6-1: device descriptor read/8, error -61 [ 617.136418][ T5] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 617.306839][ T5] usb 6-1: device descriptor read/8, error -61 [ 617.428520][ T5] usb usb6-port1: unable to enumerate USB device 16:50:47 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) [ 618.436493][ T1130] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 618.626452][ T1130] usb 6-1: device descriptor read/64, error 18 [ 618.906546][ T1130] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 619.096526][ T1130] usb 6-1: device descriptor read/64, error 18 [ 619.216676][ T1130] usb usb6-port1: attempt power cycle [ 619.646401][ T1130] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 619.816656][ T1130] usb 6-1: device descriptor read/8, error -61 [ 620.086469][ T1130] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 620.256687][ T1130] usb 6-1: device descriptor read/8, error -61 [ 620.380415][ T1130] usb usb6-port1: unable to enumerate USB device [ 624.007550][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.013967][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 16:51:01 executing program 2: pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x7) 16:51:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:01 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:51:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54ce", 0xd9, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:51:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 16:51:01 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:51:01 executing program 2: pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x7) 16:51:01 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:51:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:01 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:51:01 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:51:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:01 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:51:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:01 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 632.066693][ T140] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 632.266474][ T140] usb 6-1: device descriptor read/64, error 18 [ 632.536524][ T140] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 632.726458][ T140] usb 6-1: device descriptor read/64, error 18 [ 632.847060][ T140] usb usb6-port1: attempt power cycle [ 633.256473][ T140] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 633.426663][ T140] usb 6-1: device descriptor read/8, error -61 [ 633.696527][ T140] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 633.866558][ T140] usb 6-1: device descriptor read/8, error -61 [ 633.987667][ T140] usb usb6-port1: unable to enumerate USB device 16:51:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54ce", 0xd9, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:51:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca", 0x4d, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 16:51:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 16:51:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:51:16 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:51:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:51:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca", 0x4d, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:51:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca", 0x4d, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f", 0x73, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 647.626553][ T140] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 647.826418][ T140] usb 6-1: device descriptor read/64, error 18 [ 648.096388][ T140] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 648.286460][ T140] usb 6-1: device descriptor read/64, error 18 [ 648.420580][ T140] usb usb6-port1: attempt power cycle [ 648.836553][ T140] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 649.006788][ T140] usb 6-1: device descriptor read/8, error -61 [ 649.296468][ T140] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 649.486481][ T140] usb 6-1: device descriptor read/8, error -61 [ 649.619735][ T140] usb usb6-port1: unable to enumerate USB device 16:51:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1", 0x145, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:51:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f", 0x73, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:36 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) 16:51:36 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c000280050001"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 16:51:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:51:36 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:51:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f", 0x73, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:36 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) 16:51:36 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) 16:51:36 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) 16:51:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd", 0x86, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd", 0x86, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 667.244805][ T25] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 667.450129][ T25] usb 6-1: device descriptor read/64, error 18 [ 667.736581][ T25] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 667.926968][ T25] usb 6-1: device descriptor read/64, error 18 [ 668.046597][ T25] usb usb6-port1: attempt power cycle [ 668.456434][ T25] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 668.626594][ T25] usb 6-1: device descriptor read/8, error -61 [ 668.896478][ T25] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 669.086672][ T25] usb 6-1: device descriptor read/8, error -61 [ 669.210572][ T25] usb usb6-port1: unable to enumerate USB device 16:51:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd", 0x86, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:53 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) 16:51:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x145, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:51:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:51:53 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:51:53 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:51:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f53", 0x90, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:53 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) 16:51:53 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x0) 16:51:53 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:51:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f53", 0x90, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:53 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x0) 16:51:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f53", 0x90, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:51:53 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x0) [ 683.916461][ T3657] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 684.116464][ T3657] usb 6-1: device descriptor read/64, error 18 [ 684.386455][ T3657] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 684.576611][ T3657] usb 6-1: device descriptor read/64, error 18 [ 684.697185][ T3657] usb usb6-port1: attempt power cycle [ 685.106441][ T3657] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 685.276535][ T3657] usb 6-1: device descriptor read/8, error -61 [ 685.447640][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.453933][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.546565][ T3657] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 685.726599][ T3657] usb 6-1: device descriptor read/8, error -61 [ 685.856740][ T3657] usb usb6-port1: unable to enumerate USB device 16:52:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x145, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:52:11 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 16:52:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x128, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc}, @TIPC_NLA_MON={0x1c}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x68}, @TIPC_NLA_LINK={0x6c}, @TIPC_NLA_SOCK={0x14}]}, 0x128}}, 0x0) 16:52:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce", 0x95, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:52:11 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:52:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce", 0x95, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:11 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") 16:52:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce", 0x95, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:11 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 16:52:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c", 0x97, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:12 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 702.656617][ T140] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 702.846486][ T140] usb 6-1: device descriptor read/64, error 18 [ 703.116460][ T140] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 703.326477][ T140] usb 6-1: device descriptor read/64, error 18 [ 703.447672][ T140] usb usb6-port1: attempt power cycle [ 703.876467][ T140] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 704.066651][ T140] usb 6-1: device descriptor read/8, error -61 [ 704.336867][ T140] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 704.546649][ T140] usb 6-1: device descriptor read/8, error -61 [ 704.668395][ T140] usb usb6-port1: unable to enumerate USB device 16:52:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) 16:52:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c", 0x97, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x17b, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:52:30 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") 16:52:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:52:30 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:52:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c", 0x97, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) getgid() 16:52:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) setresuid(0x0, 0x0, 0x0) 16:52:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c55", 0x98, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:52:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c55", 0x98, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c55", 0x98, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 721.356550][ T3615] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 721.556545][ T3615] usb 6-1: device descriptor read/64, error 18 [ 721.848113][ T3615] usb 6-1: new high-speed USB device number 88 using dummy_hcd 16:52:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) [ 722.046446][ T3615] usb 6-1: device descriptor read/64, error 18 [ 722.166956][ T3615] usb usb6-port1: attempt power cycle [ 722.586426][ T3615] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 722.786610][ T3615] usb 6-1: device descriptor read/8, error -61 [ 723.056703][ T3615] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 723.226589][ T3615] usb 6-1: device descriptor read/8, error -61 [ 723.346682][ T3615] usb usb6-port1: unable to enumerate USB device 16:52:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x17b, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:52:42 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 16:52:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:42 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") 16:52:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:52:42 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa00"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:52:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 16:52:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:52:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) [ 733.836555][ T140] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 734.076625][ T140] usb 6-1: Using ep0 maxpacket: 8 [ 734.197398][ T140] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 734.205792][ T140] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 734.215349][ T140] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 734.225725][ T140] usb 6-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 734.306665][ T140] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 734.315745][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 734.324591][ T140] usb 6-1: SerialNumber: syz [ 735.148216][T13942] UDC core: couldn't find an available UDC or it's busy: -16 [ 735.155700][T13942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 736.563003][ T3615] usb 6-1: USB disconnect, device number 91 16:52:54 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:52:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x17b, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:52:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:52:54 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") 16:52:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:54 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa00"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:52:54 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:52:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:54 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:52:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:54 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:52:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:52:54 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) [ 745.176631][ T3709] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 745.446542][ T3709] usb 6-1: Using ep0 maxpacket: 8 [ 745.596652][ T3709] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 745.605025][ T3709] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 745.614962][ T3709] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 745.625596][ T3709] usb 6-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 745.726825][ T3709] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 745.738329][ T3709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 745.762942][ T3709] usb 6-1: SerialNumber: syz [ 746.571612][T13973] UDC core: couldn't find an available UDC or it's busy: -16 [ 746.579203][T13973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 746.888342][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.894806][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.874290][ T1130] usb 6-1: USB disconnect, device number 92 16:53:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x196, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:53:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:07 executing program 0: mkdir(0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:53:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:53:07 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) socket$inet_udplite(0x2, 0x2, 0x88) 16:53:07 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa00"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:53:07 executing program 0: mkdir(0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:53:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:07 executing program 0: mkdir(0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:53:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:07 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) [ 758.606691][ T3709] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 758.846472][ T3709] usb 6-1: Using ep0 maxpacket: 8 [ 758.966580][ T3709] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 758.975059][ T3709] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 758.984322][ T3709] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 758.995673][ T3709] usb 6-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 759.076554][ T3709] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 759.085999][ T3709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 759.094600][ T3709] usb 6-1: SerialNumber: syz [ 759.909234][T14002] UDC core: couldn't find an available UDC or it's busy: -16 [ 759.917789][T14002] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 761.325092][ T3615] usb 6-1: USB disconnect, device number 93 16:53:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x196, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:53:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:19 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:53:19 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:53:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:53:19 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:53:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:53:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:53:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:53:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 769.891555][ T3615] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 770.186450][ T3615] usb 6-1: Using ep0 maxpacket: 8 [ 770.316664][ T3615] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 770.325139][ T3615] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 770.334718][ T3615] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 770.345925][ T3615] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 770.355545][ T3615] usb 6-1: config 250 has no interface number 0 [ 770.362420][ T3615] usb 6-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 770.373879][ T3615] usb 6-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 770.387877][ T3615] usb 6-1: config 250 interface 228 has no altsetting 0 [ 770.476646][ T3615] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 770.485804][ T3615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 770.495258][ T3615] usb 6-1: SerialNumber: syz [ 770.537638][ T3615] hub 6-1:250.228: bad descriptor, ignoring hub [ 770.543929][ T3615] hub: probe of 6-1:250.228 failed with error -5 [ 771.303899][T14032] UDC core: couldn't find an available UDC or it's busy: -16 [ 771.311451][T14032] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 772.707806][ T5] usb 6-1: USB disconnect, device number 94 16:53:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x196, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:53:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:53:30 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:53:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:53:30 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:53:30 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:53:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 16:53:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 16:53:30 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:53:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 16:53:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) [ 781.356959][ T3709] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 781.606611][ T3709] usb 6-1: Using ep0 maxpacket: 8 [ 781.726580][ T3709] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 781.736355][ T3709] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 781.745356][ T3709] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 781.756523][ T3709] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 781.765814][ T3709] usb 6-1: config 250 has no interface number 0 [ 781.772700][ T3709] usb 6-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 781.784420][ T3709] usb 6-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 781.798271][ T3709] usb 6-1: config 250 interface 228 has no altsetting 0 [ 781.882428][ T3709] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 781.891643][ T3709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 781.900829][ T3709] usb 6-1: SerialNumber: syz [ 781.947940][ T3709] hub 6-1:250.228: bad descriptor, ignoring hub [ 781.955259][ T3709] hub: probe of 6-1:250.228 failed with error -5 [ 782.712502][T14061] UDC core: couldn't find an available UDC or it's busy: -16 [ 782.720084][T14061] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 784.156735][ T25] usb 6-1: USB disconnect, device number 95 16:53:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa", 0x1a4, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:53:41 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:53:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 16:53:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 16:53:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:53:41 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:53:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 16:53:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 16:53:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:53:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 16:53:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 792.686479][ T5] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 792.946623][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 793.076587][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 793.085457][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 793.095350][ T5] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 793.105812][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 793.115132][ T5] usb 6-1: config 250 has no interface number 0 [ 793.121595][ T5] usb 6-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 793.132690][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 793.146276][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 793.236936][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 793.274052][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 793.290499][ T5] usb 6-1: SerialNumber: syz [ 793.347759][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 793.354070][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 794.110801][T14089] UDC core: couldn't find an available UDC or it's busy: -16 [ 794.119970][T14089] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 795.507825][ T3615] usb 6-1: USB disconnect, device number 96 16:53:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa", 0x1a4, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:53:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e39313833393035343700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000085f42d27379e44ba9a8dcb77402e9f71010040000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d9f4655fd9f4655fd9f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="20000000d897e2e1d897e2e100000000d9f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000d9f4655fd9f4655fd9f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000d9f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000d9f4655fd9f4655fd9f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000d9f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000d9f4655fd9f4655fd9f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000d9f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000d9f4655fd9f4655fd9f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000c48b648700000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000d9f4655fd9f4655fd9f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000c8ee3c9e00000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000d9f4655fd9f4655fd9f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3931383339303534372f66696c65302f66696c6530000000000000000000000000000000000000000000008af507fc00000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000d9f4655fd9f4655fd9f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4518baf00000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d9f4655fd9f4655fd9f4655f00000000000002004000000000000800010000000af301000400000000000000000000000500000070000000000000000000000000000000000000000000000000000000000000000000000000000000e8b186cc00000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000d9f4655fd9f4655fd9f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c4504c7b300000000000000000000000000000000000000000000000020000000d897e2e1d897e2e1d897e2e1d9f4655fd897e2e10000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) 16:53:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:53:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:53:55 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:53:55 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) [ 805.786130][T14095] loop0: detected capacity change from 0 to 2048 16:53:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:53:55 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) [ 805.903921][T14095] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. 16:53:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="4be031c7a5a8f2a5a3703738e7df893f9540dbcf4e7b723cf50083e266627235c487ad42a8ed0a4cdf9463f60d3775e76c06000000d600968785f97bf48cf945e930b958205693039dfe6ea5e2f49521b776ae0a98042ba870416ff7648f2631fe73f87881f10f3292fb3da41755d031cf000000c85e642f4ab44a70f24ffe310296638593fe85a86e35620617f2ddc379981aea30f1e8d62fb9891c8d46b752029c", 0xa2}], 0x1}, 0x0) 16:53:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:53:55 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) [ 806.048054][ T5] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 806.074835][T14101] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 16:53:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 806.306660][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 806.426619][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 806.435002][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 806.444154][ T5] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 806.454838][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 806.464353][ T5] usb 6-1: config 250 has no interface number 0 [ 806.471069][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 806.482730][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 806.493985][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 806.509286][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 806.616724][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 806.626004][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 806.634976][ T5] usb 6-1: SerialNumber: syz [ 806.666838][T14100] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.687582][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 806.693876][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 807.452578][T14126] UDC core: couldn't find an available UDC or it's busy: -16 [ 807.460092][T14126] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 808.327404][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.333773][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.866853][ T3658] usb 6-1: USB disconnect, device number 97 16:54:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa", 0x1a4, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:54:10 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:54:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:54:10 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) 16:54:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:54:10 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:54:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:54:10 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) 16:54:10 executing program 4: socket$inet6(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:54:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080), 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:54:10 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) 16:54:10 executing program 4: socket$inet6(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) [ 821.577445][ T3615] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 821.866665][ T3615] usb 6-1: Using ep0 maxpacket: 8 [ 822.016756][ T3615] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 822.025131][ T3615] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 822.034423][ T3615] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 822.044947][ T3615] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 822.054393][ T3615] usb 6-1: config 250 has no interface number 0 [ 822.061048][ T3615] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 822.073666][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 822.084468][ T3615] usb 6-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 822.098485][ T3615] usb 6-1: config 250 interface 228 has no altsetting 0 [ 822.186729][ T3615] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 822.195828][ T3615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 822.204201][ T3615] usb 6-1: SerialNumber: syz [ 822.228285][T14133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 822.247609][ T3615] hub 6-1:250.228: bad descriptor, ignoring hub [ 822.253894][ T3615] hub: probe of 6-1:250.228 failed with error -5 [ 823.023693][T14159] UDC core: couldn't find an available UDC or it's busy: -16 [ 823.031267][T14159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 824.416589][ T3615] usb 6-1: USB disconnect, device number 98 16:54:31 executing program 4: socket$inet6(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev, 0x2}, 0x79) 16:54:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080), 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:54:31 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) 16:54:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:54:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1ab, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:54:31 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:54:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) 16:54:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080), 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:54:31 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) 16:54:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) 16:54:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:54:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) 16:54:31 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) 16:54:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:54:31 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, 0x79) [ 842.406668][ T3658] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 842.656418][ T3658] usb 6-1: Using ep0 maxpacket: 8 [ 842.776643][ T3658] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 842.784999][ T3658] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 842.801740][ T3658] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 842.813592][ T3658] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 842.822971][ T3658] usb 6-1: config 250 has no interface number 0 [ 842.829350][ T3658] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 842.841874][ T3658] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 842.852487][ T3658] usb 6-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 842.866843][ T3658] usb 6-1: config 250 interface 228 has no altsetting 0 16:54:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) [ 842.946973][ T3658] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 842.956122][ T3658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 842.964904][ T3658] usb 6-1: SerialNumber: syz [ 843.011488][T14168] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 843.027945][ T3658] hub 6-1:250.228: bad descriptor, ignoring hub [ 843.034235][ T3658] hub: probe of 6-1:250.228 failed with error -5 [ 843.806843][T14199] UDC core: couldn't find an available UDC or it's busy: -16 [ 843.814242][T14199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 845.238530][ T3709] usb 6-1: USB disconnect, device number 99 16:54:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd7", 0x1ab, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:54:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:54:46 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, 0x79) 16:54:46 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) 16:54:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:54:46 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:54:46 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, 0x79) 16:54:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:54:46 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) 16:54:46 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 16:54:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:54:46 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f00000003c0)=""/195, 0xc3, 0x0, 0x0, 0x0) dup2(r2, r1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='H', 0xfffffe24}], 0x1}], 0x1, 0x0) [ 856.986746][ T5] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 857.267945][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 857.396579][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 857.405771][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 857.414993][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 857.424554][ T5] usb 6-1: config 250 has no interface number 0 [ 857.431191][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 857.443063][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 857.453899][ T5] usb 6-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 857.465570][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 857.479458][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 857.576569][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 857.585723][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 857.594389][ T5] usb 6-1: SerialNumber: syz [ 857.626832][T14216] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 857.652596][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 857.658964][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 858.409805][T14235] UDC core: couldn't find an available UDC or it's busy: -16 [ 858.417538][T14235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 859.797654][ T5] usb 6-1: USB disconnect, device number 100 [ 869.767437][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.773776][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 16:55:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x18, 0x0, &(0x7f00000013c0)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000000)=[@clear_death={0x40046307}], 0x0, 0x0, 0x0}) 16:55:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x34}]}, 0x48}}, 0x0) 16:55:06 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:55:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1ab, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:55:06 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:55:06 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) 16:55:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x18, 0x0, &(0x7f00000013c0)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000000)=[@clear_death={0x40046307}], 0x0, 0x0, 0x0}) 16:55:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x18, 0x0, &(0x7f00000013c0)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000000)=[@clear_death={0x40046307}], 0x0, 0x0, 0x0}) 16:55:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x18, 0x0, &(0x7f00000013c0)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000000)=[@clear_death={0x40046307}], 0x0, 0x0, 0x0}) 16:55:07 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) 16:55:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 877.766581][ T3709] usb 6-1: new high-speed USB device number 101 using dummy_hcd 16:55:07 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) [ 878.006522][ T3709] usb 6-1: Using ep0 maxpacket: 8 [ 878.126546][ T3709] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 878.135007][ T3709] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 878.144451][ T3709] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 878.154187][ T3709] usb 6-1: config 250 has no interface number 0 [ 878.160929][ T3709] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 878.173040][ T3709] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 878.183778][ T3709] usb 6-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 878.195413][ T3709] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 878.209569][ T3709] usb 6-1: config 250 interface 228 has no altsetting 0 16:55:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) [ 878.296570][ T3709] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 878.305638][ T3709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 878.314223][ T3709] usb 6-1: SerialNumber: syz [ 878.346735][T14246] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 878.367549][ T3709] hub 6-1:250.228: bad descriptor, ignoring hub [ 878.373845][ T3709] hub: probe of 6-1:250.228 failed with error -5 [ 879.132185][T14276] UDC core: couldn't find an available UDC or it's busy: -16 [ 879.140609][T14276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 880.606619][ T140] usb 6-1: USB disconnect, device number 101 16:55:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1ae, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:55:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:21 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) 16:55:21 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) 16:55:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:55:21 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:55:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:21 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4) 16:55:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x18, 0x0, &(0x7f00000013c0)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000000)=[@clear_death={0x40046307}], 0x0, 0x0, 0x0}) 16:55:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:21 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 892.326923][ T3709] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 892.576645][ T3709] usb 6-1: Using ep0 maxpacket: 8 [ 892.696729][ T3709] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 892.705233][ T3709] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 892.714640][ T3709] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 892.724297][ T3709] usb 6-1: config 250 has no interface number 0 [ 892.732650][ T3709] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 892.744592][ T3709] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 892.755343][ T3709] usb 6-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 892.766629][ T3709] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 892.780422][ T3709] usb 6-1: config 250 interface 228 has no altsetting 0 [ 892.866568][ T3709] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 892.875905][ T3709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 892.892681][ T3709] usb 6-1: SerialNumber: syz [ 892.916740][T14286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.937622][ T3709] hub 6-1:250.228: bad descriptor, ignoring hub [ 892.943901][ T3709] hub: probe of 6-1:250.228 failed with error -5 [ 893.702472][T14308] UDC core: couldn't find an available UDC or it's busy: -16 [ 893.710177][T14308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 895.167707][ T140] usb 6-1: USB disconnect, device number 102 16:55:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1ae, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:55:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x18, 0x0, &(0x7f00000013c0)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000000)=[@clear_death={0x40046307}], 0x0, 0x0, 0x0}) 16:55:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:38 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:55:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:55:38 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:55:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x18, 0x0, &(0x7f00000013c0)=[@increfs, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000000)=[@clear_death={0x40046307}], 0x0, 0x0, 0x0}) 16:55:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:38 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) 16:55:38 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={'syzkaller0\x00'}) 16:55:38 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) 16:55:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 909.129487][ T3709] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 909.376410][ T3709] usb 6-1: Using ep0 maxpacket: 8 [ 909.496555][ T3709] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 909.504908][ T3709] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 909.514353][ T3709] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 909.525535][ T3709] usb 6-1: config 250 has no interface number 0 [ 909.532108][ T3709] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 909.543993][ T3709] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 909.554684][ T3709] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 909.565142][ T3709] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 909.575621][ T3709] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 909.589882][ T3709] usb 6-1: config 250 interface 228 has no altsetting 0 [ 909.676652][ T3709] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 909.685918][ T3709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 909.694288][ T3709] usb 6-1: SerialNumber: syz [ 909.716679][T14319] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 909.737713][ T3709] hub 6-1:250.228: bad descriptor, ignoring hub [ 909.744091][ T3709] hub: probe of 6-1:250.228 failed with error -5 [ 909.948590][ T3709] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 103 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 910.557577][T14319] usb 6-1: reset high-speed USB device number 103 using dummy_hcd [ 910.796466][T14319] usb 6-1: Using ep0 maxpacket: 8 [ 910.967532][T14340] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.189348][T14340] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.528087][ T3658] usb 6-1: USB disconnect, device number 103 [ 911.538819][ T3658] usblp0: removed 16:55:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1ae, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:55:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:51 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={'syzkaller0\x00'}) 16:55:51 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) 16:55:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x7) 16:55:51 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:55:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x7) 16:55:51 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={'syzkaller0\x00'}) 16:55:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:55:51 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:55:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x7) 16:55:51 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={'syzkaller0\x00'}) [ 922.586604][ T5] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 922.826639][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 922.946693][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 922.956080][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 922.965546][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 922.975269][ T5] usb 6-1: config 250 has no interface number 0 [ 922.982204][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 922.994308][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 923.005156][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 923.015731][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 923.026445][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 923.040738][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 923.126606][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 923.135660][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 923.144319][ T5] usb 6-1: SerialNumber: syz [ 923.166842][T14349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 923.188285][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 923.194575][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 923.398388][ T5] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 104 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 924.058320][T14349] usb 6-1: reset high-speed USB device number 104 using dummy_hcd [ 924.306607][T14349] usb 6-1: Using ep0 maxpacket: 8 [ 924.447660][T14368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 924.668254][T14368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 925.008058][ T140] usb 6-1: USB disconnect, device number 104 [ 925.016537][ T140] usblp0: removed [ 931.208131][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.214536][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 16:56:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:56:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:56:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:56:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) 16:56:03 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:56:03 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:56:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) 16:56:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 933.723111][ T4590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 16:56:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7) [ 933.764963][ T4590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:56:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0) 16:56:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:56:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x7) [ 933.926512][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.936574][ T3744] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 933.953912][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.176466][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 934.296499][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 934.305772][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 934.314897][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 934.324458][ T3744] usb 6-1: config 250 has no interface number 0 [ 934.331364][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 934.343994][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 934.354525][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 934.364858][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 934.375296][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 934.388948][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 934.466555][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 934.475806][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 934.484301][ T3744] usb 6-1: SerialNumber: syz [ 934.516810][T14375] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 934.537461][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 934.546645][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 934.749146][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 105 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 935.386904][T14375] usb 6-1: reset high-speed USB device number 105 using dummy_hcd [ 935.646736][T14375] usb 6-1: Using ep0 maxpacket: 8 [ 935.807029][T14396] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.038797][T14396] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.387977][ T3615] usb 6-1: USB disconnect, device number 105 [ 936.396980][ T3615] usblp0: removed 16:56:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:56:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:56:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0xa0, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x8c}]}, 0xa0}}, 0x0) 16:56:22 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:56:22 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x7) 16:56:22 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(0x0, 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:56:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0xb8, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x44}, @TIPC_NLA_NET={0x10}, @TIPC_NLA_LINK={0x50}]}, 0xb8}}, 0x0) 16:56:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:56:22 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/config\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/config\x00') 16:56:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:56:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x5c}, @TIPC_NLA_NET={0x28}]}, 0xa0}}, 0x0) 16:56:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 953.738236][ T3615] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 953.976487][ T3615] usb 6-1: Using ep0 maxpacket: 8 [ 954.096628][ T3615] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 954.105201][ T3615] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 954.114597][ T3615] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 954.124230][ T3615] usb 6-1: config 250 has no interface number 0 [ 954.131832][ T3615] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 954.143472][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 954.154028][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 954.164743][ T3615] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 954.178841][ T3615] usb 6-1: config 250 interface 228 has no altsetting 0 [ 954.256630][ T3615] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 954.265704][ T3615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 954.274664][ T3615] usb 6-1: SerialNumber: syz [ 954.316859][T14409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 954.323772][T14409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 954.357814][ T3615] hub 6-1:250.228: bad descriptor, ignoring hub [ 954.364110][ T3615] hub: probe of 6-1:250.228 failed with error -5 [ 954.567848][ T3615] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 106 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 955.210576][T14409] usb 6-1: reset high-speed USB device number 106 using dummy_hcd [ 955.466614][T14409] usb 6-1: Using ep0 maxpacket: 8 [ 955.606890][T14426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.613935][T14426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.828949][T14426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.835792][T14426] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.886399][ C0] usblp0: nonzero read bulk status received: -71 [ 956.051049][ T3615] usb 6-1: USB disconnect, device number 106 [ 956.063192][ T3615] usblp0: removed 16:56:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b0, 0x805, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:56:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:56:35 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) fstatfs(r1, &(0x7f0000000000)=""/125) 16:56:35 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:56:35 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x7) 16:56:35 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(0x0, 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:56:35 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:56:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:56:35 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:56:35 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) fstatfs(r1, &(0x7f0000000000)=""/125) 16:56:35 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:56:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 966.247068][ T5] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 966.516626][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 966.646692][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 966.655243][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 966.664799][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 966.674305][ T5] usb 6-1: config 250 has no interface number 0 [ 966.680872][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 966.692662][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 966.703996][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 966.714654][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 966.728509][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 966.816734][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 966.825812][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 966.834238][ T5] usb 6-1: SerialNumber: syz [ 966.856855][T14437] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 966.863797][T14437] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 966.877580][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 966.883857][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 967.107398][ T5] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 107 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 967.717870][T14437] usb 6-1: reset high-speed USB device number 107 using dummy_hcd [ 967.966500][T14437] usb 6-1: Using ep0 maxpacket: 8 [ 968.106920][T14455] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 968.113807][T14455] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 968.340999][T14455] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 968.351323][T14455] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 968.416404][ C1] usblp0: nonzero read bulk status received: -71 [ 968.579836][ T3657] usb 6-1: USB disconnect, device number 107 [ 968.594179][ T3657] usblp0: removed 16:57:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b1, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:57:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:57:01 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x7) 16:57:01 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(0x0, 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:57:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) fstatfs(r1, &(0x7f0000000000)=""/125) 16:57:01 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) fstatfs(r1, &(0x7f0000000000)=""/125) 16:57:01 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d596872", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:57:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) fstatfs(r1, &(0x7f0000000000)=""/125) 16:57:01 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) fstatfs(r1, &(0x7f0000000000)=""/125) 16:57:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d596872", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 992.106655][ T3657] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 992.346559][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 992.467157][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 992.475554][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 992.485545][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 992.495156][ T3657] usb 6-1: config 250 has no interface number 0 [ 992.501614][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 992.513454][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 992.524331][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 992.535016][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 992.548754][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 992.626608][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 992.635745][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 992.644344][ T3657] usb 6-1: SerialNumber: syz [ 992.650980][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.657340][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.686829][T14471] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 992.701141][T14471] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 992.727796][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 992.734082][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 992.938246][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 108 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 993.549887][T14471] usb 6-1: reset high-speed USB device number 108 using dummy_hcd [ 993.826563][T14471] usb 6-1: Using ep0 maxpacket: 8 [ 993.976812][T14492] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 993.983680][T14492] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 994.198868][T14492] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 994.205769][T14492] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 994.256467][ C0] usblp0: nonzero read bulk status received: -71 [ 994.423230][ T140] usb 6-1: USB disconnect, device number 108 [ 994.430962][ T140] usblp0: removed 16:57:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x1b1, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:57:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) fstatfs(r1, &(0x7f0000000000)=""/125) 16:57:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d596872", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:57:14 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:14 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x7) 16:57:14 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:57:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d5968727800", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:57:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:14 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d5968727800", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:57:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 1005.646735][ T3744] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1005.926557][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 1006.046736][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1006.055108][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1006.064618][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1006.074273][ T3744] usb 6-1: config 250 has no interface number 0 [ 1006.080827][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1006.093382][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1006.104145][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1006.114778][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1006.128664][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1006.216713][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1006.227278][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1006.235345][ T3744] usb 6-1: SerialNumber: syz [ 1006.256897][T14502] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1006.263804][T14502] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1006.277143][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 1006.283442][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 1006.512268][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 109 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1007.178786][T14502] usb 6-1: reset high-speed USB device number 109 using dummy_hcd [ 1007.436474][T14502] usb 6-1: Using ep0 maxpacket: 8 [ 1007.577116][T14523] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.584255][T14523] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.801330][T14523] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.808613][T14523] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.856394][ C0] usblp0: nonzero read bulk status received: -71 [ 1008.046829][ T1130] usb 6-1: USB disconnect, device number 109 [ 1008.057890][ T1130] usblp0: removed 16:57:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b1, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 16:57:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d5968727800", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:57:26 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:26 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x7) 16:57:26 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:57:26 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d596872780000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:57:26 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:26 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:26 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d596872780000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 1016.996613][ T3657] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1017.256566][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 1017.376681][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1017.385133][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1017.394551][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1017.403871][ T3657] usb 6-1: config 250 has no interface number 0 [ 1017.410899][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1017.422639][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1017.433143][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1017.443595][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1017.457938][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1017.536659][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1017.545854][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1017.564946][ T3657] usb 6-1: SerialNumber: syz [ 1017.586738][T14535] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1017.593603][T14535] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1017.608172][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 1017.614472][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 1017.827845][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 110 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1018.449571][T14535] usb 6-1: reset high-speed USB device number 110 using dummy_hcd [ 1018.706555][T14535] usb 6-1: Using ep0 maxpacket: 8 [ 1018.866920][T14553] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1018.873808][T14553] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1019.092829][T14553] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1019.099909][T14553] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1019.156403][ C0] usblp0: nonzero read bulk status received: -71 [ 1019.322338][ T3657] usb 6-1: USB disconnect, device number 110 [ 1019.330740][ T3657] usblp0: removed 16:57:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(0x0, 0x0, 0x0) 16:57:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d596872780000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:57:37 executing program 0: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:37 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x7) 16:57:37 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:57:37 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:57:37 executing program 0: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:57:37 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:37 executing program 0: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1028.376428][ T3744] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1028.636481][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 1028.786662][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1028.795145][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1028.804624][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1028.814612][ T3744] usb 6-1: config 250 has no interface number 0 [ 1028.822130][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1028.833995][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1028.844698][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1028.855348][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1028.868999][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1028.956790][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1028.965977][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1028.974763][ T3744] usb 6-1: SerialNumber: syz [ 1029.007056][T14563] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1029.013965][T14563] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1029.037449][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 1029.043739][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 1029.251897][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 111 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1029.897415][T14563] usb 6-1: reset high-speed USB device number 111 using dummy_hcd [ 1030.136491][T14563] usb 6-1: Using ep0 maxpacket: 8 [ 1030.276691][T14583] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1030.283543][T14583] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1030.499502][T14583] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1030.506490][T14583] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1030.556374][ C1] usblp0: nonzero read bulk status received: -71 [ 1030.746811][ T140] usb 6-1: USB disconnect, device number 111 [ 1030.754420][ T140] usblp0: removed 16:57:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(0x0, 0x0, 0x0) 16:57:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:57:48 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:48 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:57:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x7) 16:57:48 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:57:48 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:57:48 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:57:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 16:57:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:57:49 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1039.748003][ T3744] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1039.996550][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 1040.136525][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1040.145047][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1040.154170][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1040.163523][ T3744] usb 6-1: config 250 has no interface number 0 [ 1040.170226][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1040.182003][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1040.193537][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1040.204107][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1040.217938][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1040.326803][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1040.335907][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.344207][ T3744] usb 6-1: SerialNumber: syz [ 1040.376750][T14596] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.383671][T14596] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.397658][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 1040.403944][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 1040.617965][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 112 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1041.257517][T14596] usb 6-1: reset high-speed USB device number 112 using dummy_hcd [ 1041.506465][T14596] usb 6-1: Using ep0 maxpacket: 8 [ 1041.646707][T14615] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1041.653583][T14615] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1041.868625][T14615] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1041.875506][T14615] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1041.926814][ C1] usblp0: nonzero read bulk status received: -71 [ 1042.089221][ T3744] usb 6-1: USB disconnect, device number 112 [ 1042.102997][ T3744] usblp0: removed 16:58:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 16:58:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000980)="ca", 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) syz_open_dev$sg(0x0, 0x0, 0x0) 16:58:00 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 16:58:00 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:58:00 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x7) 16:58:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 16:58:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 16:58:00 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 16:58:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 1051.116666][ T3744] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1051.416501][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 1051.568071][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1051.576666][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1051.585686][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1051.595106][ T3744] usb 6-1: config 250 has no interface number 0 [ 1051.601567][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1051.613401][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1051.624034][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1051.634492][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1051.648159][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1051.746864][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1051.757304][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1051.765377][ T3744] usb 6-1: SerialNumber: syz [ 1051.790003][T14625] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1051.797280][T14625] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1051.807768][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 1051.814053][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 1052.018637][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 113 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1052.636929][T14625] usb 6-1: reset high-speed USB device number 113 using dummy_hcd [ 1052.893491][T14625] usb 6-1: Using ep0 maxpacket: 8 [ 1053.066992][T14648] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1053.073895][T14648] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1053.289533][T14648] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1053.297458][T14648] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1053.356427][ C0] usblp0: nonzero read bulk status received: -71 [ 1053.546875][ T1130] usb 6-1: USB disconnect, device number 113 [ 1053.556952][ T1130] usblp0: removed [ 1054.088303][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.094622][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 16:58:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 16:58:11 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000140001"], 0xdc}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 16:58:11 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:58:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c}]}, 0x30}}, 0x0) 16:58:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 16:58:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 16:58:11 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 16:58:11 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf258020", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 1062.468311][ T5] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1062.736472][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 1062.866537][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1062.875148][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1062.884697][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1062.894396][ T5] usb 6-1: config 250 has no interface number 0 [ 1062.901084][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1062.913034][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1062.924607][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1062.936301][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1062.949938][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 16:58:12 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1063.066832][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1063.080551][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1063.096462][ T5] usb 6-1: SerialNumber: syz [ 1063.127472][T14660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1063.134371][T14660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1063.147717][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 1063.154018][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 1063.369100][ T5] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 114 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1063.977415][T14660] usb 6-1: reset high-speed USB device number 114 using dummy_hcd [ 1064.226630][T14660] usb 6-1: Using ep0 maxpacket: 8 [ 1064.376835][T14690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1064.383785][T14690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1064.598771][T14690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1064.605645][T14690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1064.656440][ C1] usblp0: nonzero read bulk status received: -71 [ 1064.822025][ T5] usb 6-1: USB disconnect, device number 114 [ 1064.830887][ T5] usblp0: removed 16:58:14 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, 0x0, 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) [ 1065.616477][ T5] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1065.876509][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 1066.016873][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1066.025444][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1066.034717][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1066.044584][ T5] usb 6-1: config 250 has no interface number 0 [ 1066.051298][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1066.063289][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1066.074490][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1066.085282][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1066.099694][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1066.196699][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1066.205844][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1066.214322][ T5] usb 6-1: SerialNumber: syz [ 1066.236880][T14692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1066.243785][T14692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1066.257887][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 1066.264165][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 1066.467598][ T5] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 115 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1067.111452][T14692] usb 6-1: reset high-speed USB device number 115 using dummy_hcd [ 1067.388127][T14692] usb 6-1: Using ep0 maxpacket: 8 [ 1067.528531][T14693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1067.535855][T14693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1067.751182][T14693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1067.758622][T14693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1067.806464][ C1] usblp0: nonzero read bulk status received: -71 [ 1067.997051][ T3657] usb 6-1: USB disconnect, device number 115 [ 1068.008412][ T3657] usblp0: removed 16:58:33 executing program 1: set_mempolicy(0x2000, 0x0, 0x0) 16:58:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 16:58:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf258020", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:33 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:58:33 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:33 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, 0x0, 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:58:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 1084.028928][T14703] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 16:58:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf258020", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:33 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:58:33 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 16:58:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 1084.187137][T14715] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1084.266652][ T5] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1084.516477][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 1084.636525][ T5] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1084.644902][ T5] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1084.654683][ T5] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1084.664282][ T5] usb 6-1: config 250 has no interface number 0 [ 1084.670833][ T5] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1084.682749][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1084.693698][ T5] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1084.704310][ T5] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1084.718046][ T5] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1084.796632][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1084.805710][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1084.814584][ T5] usb 6-1: SerialNumber: syz [ 1084.847646][T14702] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1084.854557][T14702] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1084.867756][ T5] hub 6-1:250.228: bad descriptor, ignoring hub [ 1084.874045][ T5] hub: probe of 6-1:250.228 failed with error -5 [ 1085.078196][ T5] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 116 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1085.727091][T14702] usb 6-1: reset high-speed USB device number 116 using dummy_hcd [ 1085.976529][T14702] usb 6-1: Using ep0 maxpacket: 8 [ 1086.136804][T14723] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1086.143680][T14723] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1086.370238][T14723] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1086.377645][T14723] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1086.436405][ C0] usblp0: nonzero read bulk status received: -71 [ 1086.629143][ T1130] usb 6-1: USB disconnect, device number 116 [ 1086.640332][ T1130] usblp0: removed 16:58:45 executing program 1: set_mempolicy(0x2000, 0x0, 0x0) 16:58:45 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 16:58:45 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:58:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:45 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, 0x0, 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:58:45 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) [ 1096.529114][T14734] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 16:58:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:58:46 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:58:46 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:58:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c000900", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 1096.679778][T14745] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1096.826390][ T3709] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1097.076554][ T3709] usb 6-1: Using ep0 maxpacket: 8 [ 1097.196588][ T3709] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1097.205095][ T3709] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1097.214265][ T3709] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1097.224877][ T3709] usb 6-1: config 250 has no interface number 0 [ 1097.231290][ T3709] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1097.242896][ T3709] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1097.253397][ T3709] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1097.263816][ T3709] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1097.277538][ T3709] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1097.356647][ T3709] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1097.365712][ T3709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1097.374046][ T3709] usb 6-1: SerialNumber: syz [ 1097.406849][T14736] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1097.413733][T14736] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1097.428126][ T3709] hub 6-1:250.228: bad descriptor, ignoring hub [ 1097.434415][ T3709] hub: probe of 6-1:250.228 failed with error -5 [ 1097.658370][ T3709] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 117 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1098.287563][T14736] usb 6-1: reset high-speed USB device number 117 using dummy_hcd [ 1098.546517][T14736] usb 6-1: Using ep0 maxpacket: 8 [ 1098.687135][T14751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1098.694042][T14751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1098.918188][T14751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1098.925084][T14751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1098.986435][ C0] usblp0: nonzero read bulk status received: -71 [ 1099.177997][ T3744] usb 6-1: USB disconnect, device number 117 [ 1099.188927][ T3744] usblp0: removed 16:59:04 executing program 1: set_mempolicy(0x2000, 0x0, 0x0) 16:59:04 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:04 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002", 0x17}], 0x1}, 0x0) 16:59:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c000900", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:04 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:59:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002", 0x17}], 0x1}, 0x0) 16:59:04 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c000900", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:04 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 1115.270218][T14768] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1115.325581][T14771] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 16:59:04 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:04 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1115.527496][ T3657] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1115.527605][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.542063][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.766563][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 1115.886522][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1115.895847][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1115.905385][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1115.914959][ T3657] usb 6-1: config 250 has no interface number 0 [ 1115.922374][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1115.934252][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1115.945185][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1115.955829][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1115.970161][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1116.056641][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1116.066299][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1116.074913][ T3657] usb 6-1: SerialNumber: syz [ 1116.097485][T14769] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1116.104426][T14769] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1116.117497][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 1116.123949][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 1116.349193][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 118 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1116.397403][ T3657] usb 6-1: USB disconnect, device number 118 [ 1116.405222][ T3657] usblp0: removed [ 1116.946456][ T3657] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1117.186465][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 1117.326581][ T3657] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1117.335090][ T3657] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1117.344513][ T3657] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1117.354037][ T3657] usb 6-1: config 250 has no interface number 0 [ 1117.360636][ T3657] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1117.372471][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1117.383227][ T3657] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1117.393828][ T3657] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1117.408168][ T3657] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1117.497942][ T3657] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1117.507238][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1117.515247][ T3657] usb 6-1: SerialNumber: syz [ 1117.546937][T14769] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1117.553836][T14769] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1117.567491][ T3657] hub 6-1:250.228: bad descriptor, ignoring hub [ 1117.573777][ T3657] hub: probe of 6-1:250.228 failed with error -5 [ 1117.787723][ T3657] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 119 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1117.827291][ T3657] usb 6-1: USB disconnect, device number 119 [ 1117.834783][ T3657] usblp0: removed 16:59:19 executing program 1: set_mempolicy(0x2000, 0x0, 0x0) 16:59:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c0009000200", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002", 0x17}], 0x1}, 0x0) 16:59:19 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:19 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:19 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:59:19 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e", 0x23}], 0x1}, 0x0) 16:59:19 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c0009000200", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:19 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:19 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1129.972038][T14809] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1130.086616][ T3744] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1130.328115][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 1130.466547][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1130.475055][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1130.484523][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1130.494144][ T3744] usb 6-1: config 250 has no interface number 0 [ 1130.500834][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1130.513047][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1130.523996][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1130.534713][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1130.548608][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1130.646742][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1130.657066][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1130.665188][ T3744] usb 6-1: SerialNumber: syz [ 1130.689026][T14796] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1130.695909][T14796] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1130.707712][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 1130.714000][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 1130.937842][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 120 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1130.987905][ T3744] usb 6-1: USB disconnect, device number 120 [ 1130.998298][ T3744] usblp0: removed [ 1131.536539][ T3744] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1131.806599][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 1131.958509][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1131.967621][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1131.976960][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1131.986178][ T3744] usb 6-1: config 250 has no interface number 0 [ 1131.992758][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1132.004623][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1132.015409][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1132.025995][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1132.040161][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1132.146834][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1132.155956][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1132.164416][ T3744] usb 6-1: SerialNumber: syz [ 1132.196890][T14796] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1132.203815][T14796] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1132.217622][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 1132.223892][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 1132.437816][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 121 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1132.487966][ T3744] usb 6-1: USB disconnect, device number 121 [ 1132.495963][ T3744] usblp0: removed 16:59:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c0009000200", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e", 0x23}], 0x1}, 0x0) 16:59:38 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6}, 0x8) recvmsg(r1, 0x0, 0x40010000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:38 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:38 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 16:59:38 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e", 0x23}], 0x1}, 0x0) 16:59:38 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x0, 0x0, 0x3, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c000900020000", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 1148.608492][T14820] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 16:59:38 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000", 0x29}], 0x1}, 0x0) 16:59:38 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c000900020000", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000", 0x29}], 0x1}, 0x0) [ 1148.808887][T14834] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 16:59:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c000900020000", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000", 0x29}], 0x1}, 0x0) [ 1148.866745][ T3658] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1149.146532][ T3658] usb 6-1: Using ep0 maxpacket: 8 [ 1149.279611][ T3658] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1149.288500][ T3658] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1149.297880][ T3658] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1149.307414][ T3658] usb 6-1: config 250 has no interface number 0 [ 1149.313680][ T3658] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1149.325549][ T3658] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1149.336205][ T3658] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1149.349714][ T3658] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1149.363748][ T3658] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1149.457378][ T3658] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1149.466774][ T3658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1149.474798][ T3658] usb 6-1: SerialNumber: syz [ 1149.510073][T14821] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1149.517797][T14821] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1149.527660][ T3658] hub 6-1:250.228: bad descriptor, ignoring hub [ 1149.533935][ T3658] hub: probe of 6-1:250.228 failed with error -5 [ 1149.755840][ T3658] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 122 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1149.807501][ T3658] usb 6-1: USB disconnect, device number 122 [ 1149.817629][ T3658] usblp0: removed [ 1150.346456][ T3658] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1150.586462][ T3658] usb 6-1: Using ep0 maxpacket: 8 [ 1150.706503][ T3658] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1150.714909][ T3658] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1150.723923][ T3658] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1150.733623][ T3658] usb 6-1: config 250 has no interface number 0 [ 1150.740345][ T3658] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1150.752555][ T3658] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1150.763401][ T3658] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1150.774077][ T3658] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1150.788697][ T3658] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1150.866778][ T3658] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1150.875857][ T3658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1150.884785][ T3658] usb 6-1: SerialNumber: syz [ 1150.916917][T14821] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1150.923836][T14821] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1150.940743][ T3658] hub 6-1:250.228: bad descriptor, ignoring hub [ 1150.947269][ T3658] hub: probe of 6-1:250.228 failed with error -5 [ 1151.167366][ T3658] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 123 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1151.217517][ T3658] usb 6-1: USB disconnect, device number 123 [ 1151.228750][ T3658] usblp0: removed 16:59:41 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) [ 1151.976446][ T140] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1152.216546][ T140] usb 6-1: Using ep0 maxpacket: 8 [ 1152.336695][ T140] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1152.345185][ T140] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1152.354446][ T140] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1152.363834][ T140] usb 6-1: config 250 has no interface number 0 [ 1152.370325][ T140] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1152.382866][ T140] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1152.393440][ T140] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1152.403869][ T140] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1152.418305][ T140] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1152.496934][ T140] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1152.506003][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1152.514098][ T140] usb 6-1: SerialNumber: syz [ 1152.536820][T14850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1152.544452][T14850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1152.557707][ T140] hub 6-1:250.228: bad descriptor, ignoring hub [ 1152.563991][ T140] hub: probe of 6-1:250.228 failed with error -5 [ 1152.787853][ T140] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 124 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1152.827373][ T140] usb 6-1: USB disconnect, device number 124 [ 1152.834833][ T140] usblp0: removed [ 1153.336461][ T140] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1153.586555][ T140] usb 6-1: Using ep0 maxpacket: 8 [ 1153.716816][ T140] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1153.725188][ T140] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1153.734383][ T140] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1153.743912][ T140] usb 6-1: config 250 has no interface number 0 [ 1153.751565][ T140] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1153.763503][ T140] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1153.774217][ T140] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1153.784887][ T140] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1153.798718][ T140] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1153.886912][ T140] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1153.896049][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1153.905095][ T140] usb 6-1: SerialNumber: syz [ 1153.927184][T14850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1153.934044][T14850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1153.947558][ T140] hub 6-1:250.228: bad descriptor, ignoring hub [ 1153.954400][ T140] hub: probe of 6-1:250.228 failed with error -5 [ 1154.167929][ T140] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 125 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1154.225184][ T140] usb 6-1: USB disconnect, device number 125 [ 1154.232792][ T140] usblp0: removed 16:59:52 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:52 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:52 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 16:59:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700", 0x2c}], 0x1}, 0x0) 16:59:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:52 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) [ 1163.149861][T14853] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 16:59:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700", 0x2c}], 0x1}, 0x0) 16:59:52 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 16:59:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 16:59:52 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 1163.217396][T14863] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 16:59:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700", 0x2c}], 0x1}, 0x0) 16:59:52 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1163.344965][T14872] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1163.456719][ T3744] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1163.706485][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 1163.836621][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1163.845005][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1163.854444][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1163.864039][ T3744] usb 6-1: config 250 has no interface number 0 [ 1163.870627][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1163.882451][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1163.893642][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1163.905838][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1163.919717][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1164.006766][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1164.015848][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1164.024430][ T3744] usb 6-1: SerialNumber: syz [ 1164.046928][T14862] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1164.053952][T14862] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1164.067732][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 1164.074031][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 1164.287904][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 126 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1164.327573][ T3744] usb 6-1: USB disconnect, device number 126 [ 1164.339347][ T3744] usblp0: removed [ 1164.846481][ T3744] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1165.096467][ T3744] usb 6-1: Using ep0 maxpacket: 8 [ 1165.226555][ T3744] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1165.234938][ T3744] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1165.244213][ T3744] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1165.253863][ T3744] usb 6-1: config 250 has no interface number 0 [ 1165.260382][ T3744] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1165.272280][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1165.283446][ T3744] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1165.294105][ T3744] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1165.307850][ T3744] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1165.386609][ T3744] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1165.395662][ T3744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1165.404290][ T3744] usb 6-1: SerialNumber: syz [ 1165.426744][T14862] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1165.433598][T14862] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1165.447547][ T3744] hub 6-1:250.228: bad descriptor, ignoring hub [ 1165.453823][ T3744] hub: probe of 6-1:250.228 failed with error -5 [ 1165.677943][ T3744] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 127 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1165.717427][ T3744] usb 6-1: USB disconnect, device number 127 [ 1165.730562][ T3744] usblp0: removed [ 1176.967479][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.973787][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 17:00:16 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:00:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x4010010) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 17:00:16 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:00:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) 17:00:16 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:00:16 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 17:00:16 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:00:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) 17:00:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 1187.070087][T14889] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 17:00:16 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:00:16 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:00:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002d000563d25a80648c63940d0324fc60100002400a000000053582c137153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) [ 1187.240931][T14901] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1187.337357][ T3615] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1187.626553][ T3615] usb 6-1: Using ep0 maxpacket: 8 [ 1187.776546][ T3615] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1187.785040][ T3615] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1187.794748][ T3615] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1187.804259][ T3615] usb 6-1: config 250 has no interface number 0 [ 1187.810765][ T3615] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1187.822741][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1187.833443][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1187.844120][ T3615] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1187.858757][ T3615] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1187.956660][ T3615] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1187.965752][ T3615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1187.974511][ T3615] usb 6-1: SerialNumber: syz [ 1187.997362][T14890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1188.004265][T14890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1188.017485][ T3615] hub 6-1:250.228: bad descriptor, ignoring hub [ 1188.023752][ T3615] hub: probe of 6-1:250.228 failed with error -5 [ 1188.230064][ T3615] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1188.277737][ T3615] usb 6-1: USB disconnect, device number 2 [ 1188.289583][ T3615] usblp0: removed [ 1188.866423][ T3615] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1189.126779][ T3615] usb 6-1: Using ep0 maxpacket: 8 [ 1189.286656][ T3615] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1189.295128][ T3615] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1189.304334][ T3615] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1189.313752][ T3615] usb 6-1: config 250 has no interface number 0 [ 1189.321086][ T3615] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1189.332923][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1189.343627][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1189.354358][ T3615] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1189.368240][ T3615] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1189.446700][ T3615] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1189.455769][ T3615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1189.464245][ T3615] usb 6-1: SerialNumber: syz [ 1189.486904][T14890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1189.493736][T14890] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1189.507528][ T3615] hub 6-1:250.228: bad descriptor, ignoring hub [ 1189.513798][ T3615] hub: probe of 6-1:250.228 failed with error -5 [ 1189.737689][ T3615] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1189.787452][ T3615] usb 6-1: USB disconnect, device number 3 [ 1189.799791][ T3615] usblp0: removed 17:00:29 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 17:00:29 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:00:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 17:00:29 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:00:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x70}]}, 0x84}}, 0x0) 17:00:29 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 17:00:30 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe0a, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 17:00:30 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1200.576296][T14915] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 17:00:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 17:00:30 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:00:30 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x3) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:00:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 1200.778684][T14929] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1200.846790][ T3615] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1201.116607][ T3615] usb 6-1: Using ep0 maxpacket: 8 [ 1201.267310][ T3615] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1201.275690][ T3615] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1201.285327][ T3615] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1201.295491][ T3615] usb 6-1: config 250 has no interface number 0 [ 1201.302176][ T3615] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1201.314217][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1201.324959][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1201.335643][ T3615] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1201.349565][ T3615] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1201.436628][ T3615] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1201.445712][ T3615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1201.454353][ T3615] usb 6-1: SerialNumber: syz [ 1201.476818][T14917] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1201.483836][T14917] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1201.497592][ T3615] hub 6-1:250.228: bad descriptor, ignoring hub [ 1201.503993][ T3615] hub: probe of 6-1:250.228 failed with error -5 [ 1201.718811][ T3615] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1201.767514][ T3615] usb 6-1: USB disconnect, device number 4 [ 1201.780847][ T3615] usblp0: removed [ 1202.296544][ T3615] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1202.570431][ T3615] usb 6-1: Using ep0 maxpacket: 8 [ 1202.726678][ T3615] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1202.735056][ T3615] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1202.744250][ T3615] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1202.753927][ T3615] usb 6-1: config 250 has no interface number 0 [ 1202.760460][ T3615] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1202.772328][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1202.782858][ T3615] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1202.793254][ T3615] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1202.808349][ T3615] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1202.886804][ T3615] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1202.896581][ T3615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1202.905670][ T3615] usb 6-1: SerialNumber: syz [ 1202.936903][T14917] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1202.943817][T14917] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1202.961148][ T3615] hub 6-1:250.228: bad descriptor, ignoring hub [ 1202.967665][ T3615] hub: probe of 6-1:250.228 failed with error -5 [ 1203.187878][ T3615] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1203.237516][ T3615] usb 6-1: USB disconnect, device number 5 [ 1203.248477][ T3615] usblp0: removed 17:00:55 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, 0x0, 0x80) sendmsg(r0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@llc={0x1a, 0x1b, 0x1, 0x40, 0xff, 0x40, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="218d8ae23f1860d648c64c24fbdf55584f31cb6235d0159af759d8fa66cb59049dcfe4dbca0d9c09c7d817c9e93715148eae6d9cfbd4330a5fe1b4b2cf25424d01bedd36853414e9f01cb81d", 0x4c}, {&(0x7f00000006c0)="dfc0955e4707bfb77acb2dd0cb20571b126f394957b8405d0fad6f29", 0x1c}, {&(0x7f0000000780)="bce3d23b9012fbb14e9a3de16bd2a5", 0xf}, {&(0x7f00000007c0)="6224a64cfa3d682fcbf12d79b12239332ddf2c4ef01de3dbbd561fd8974fa2b321c453b86ad0d16157ea354266002005e473ef168f865cdcc1baa3c9c415ea6f092ad162d9e7", 0x46}, {&(0x7f0000000840)="60055682369fb001964eedb3e0257a8e553ba9f09396f1c37d28807206eff70fe56b8e0321af3b114d4e668c77629bf56eb0a25316d1cdb394f54f0e4e3be1a6abdeedc5d5f227220c7e66ebb043019501239a2188995c6dd20ccda7fd78fc227cbc5e866f44207788ea64763dea722715758f3326656c70e07f8a3786e3bf79b615cf817c439f56bfb5767c46e861273d93a10a4841ce0f5e", 0x99}, {0x0}], 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001cc0)={0x6, 0x0}, 0x8) recvmsg(r1, 0x0, 0x40010000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=r2, 0x4) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='io_uring_poll_arm\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 17:00:55 executing program 2: socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:00:55 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) bind$inet(r0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:00:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 17:00:55 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe0a, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 17:00:55 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2250000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905820224"], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)=ANY=[], 0xbf) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './bus\x00'}) 17:00:55 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe0a, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 17:00:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000020001e0050ff307cbd9543865b2bbd7000fddbdf250a1020037f0000040a000100140001000000000000000000100000bb14000200fe8000000000000000000000000000bb0c00141094d2030513d1ae7466a8b1c9dd00000000000021000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="14000100fe80000000000000000000000000001314000100000014000200fe8000000000000000000000000000241af2099c00"/60], 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) [ 1226.504832][T14944] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 17:00:56 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x66, 0x0, 0x0, 0xfffffff7}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:00:56 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002200055bd25a80648c63940d0524fc60100005400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 17:00:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000004c0)) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000880)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, 0x2, 0x80000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000500)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c4c2509ff04934909aed1a4dd30d629fa830d64cdc7681344741fe3644692aa5fcb8316166ee4c0e9a9300d96cb810eaea35a8fbc10aa91e4c7ec56e36c84b528e046118ce1f62ab76eec735ca4662701b11078fe748635591636bdc2e510e032571f761ad704e72371eff47cdc4aff628634f0844f2cc22ed9e5eb9cb064d6b3501394242bd2251674c21d1055e9f535f8698e7ce5e3c5554", 0x99, 0x40000, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800100028bd7000fcdbdf2580200028ff00c809001000000c00090002000009", @ANYRES32=r4, @ANYBLOB="08b57445f653974d1e64c0b7087443d5a0b57c3a794a156c114a66511641fd25e4811a4f31b7efe6c333ecb562a12153c14b2b3f4e8da8abb679a39125c16015642d59687278000000", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4010010) sendmsg$nl_route(r1, 0x0, 0x80000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x232b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 17:00:56 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe0a, 0x0, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) [ 1226.694331][T14958] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1226.776611][ T1130] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1227.016523][ T1130] usb 6-1: Using ep0 maxpacket: 8 [ 1227.136646][ T1130] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1227.145007][ T1130] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1227.154521][ T1130] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1227.164132][ T1130] usb 6-1: config 250 has no interface number 0 [ 1227.171448][ T1130] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1227.183466][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1227.194207][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1227.204647][ T1130] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1227.218362][ T1130] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1227.296610][ T1130] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1227.305690][ T1130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1227.314165][ T1130] usb 6-1: SerialNumber: syz [ 1227.336954][T14946] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1227.343906][T14946] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1227.357678][ T1130] hub 6-1:250.228: bad descriptor, ignoring hub [ 1227.363979][ T1130] hub: probe of 6-1:250.228 failed with error -5 [ 1227.569505][ T1130] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1227.608743][ T1130] usb 6-1: USB disconnect, device number 6 [ 1227.617519][ T1130] usblp0: removed [ 1228.166776][ T1130] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1228.416459][ T1130] usb 6-1: Using ep0 maxpacket: 8 [ 1228.537654][ T1130] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1228.546060][ T1130] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1228.555434][ T1130] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1228.565083][ T1130] usb 6-1: config 250 has no interface number 0 [ 1228.574910][ T1130] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1228.587145][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1228.597930][ T1130] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 1228.609289][ T1130] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1228.623181][ T1130] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1228.706777][ T1130] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.25 [ 1228.715880][ T1130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1228.724008][ T1130] usb 6-1: SerialNumber: syz [ 1228.747011][T14946] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1228.753940][T14946] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1228.767770][ T1130] hub 6-1:250.228: bad descriptor, ignoring hub [ 1228.774065][ T1130] hub: probe of 6-1:250.228 failed with error -5 [ 1228.979513][ T1130] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1229.027488][ T1130] usb 6-1: USB disconnect, device number 7 [ 1229.035767][ T1130] usblp0: removed [ 1235.894991][ T3591] ------------[ cut here ]------------ [ 1235.900466][ T3591] WARNING: CPU: 0 PID: 3591 at arch/x86/kernel/fpu/core.c:768 fpregs_assert_state_consistent+0x80/0xe0 [ 1235.911537][ T3591] Modules linked in: [ 1235.915419][ T3591] CPU: 0 PID: 3591 Comm: syz-fuzzer Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1235.924947][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.935001][ T3591] RIP: 0010:fpregs_assert_state_consistent+0x80/0xe0 [ 1235.941669][ T3591] Code: e9 55 ca 4c 00 e8 50 ca 4c 00 e8 db 97 2b 08 89 c3 65 48 8b 05 e9 90 d6 7e 4c 8d a5 80 18 00 00 49 39 c4 74 10 e8 30 ca 4c 00 <0f> 0b 5b 5d 41 5c e9 25 ca 4c 00 e8 20 ca 4c 00 4c 89 e2 48 b8 00 [ 1235.961262][ T3591] RSP: 0018:ffffc90001f0fef0 EFLAGS: 00010093 [ 1235.967332][ T3591] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1235.975289][ T3591] RDX: ffff88801a2e8000 RSI: ffffffff812bdec0 RDI: 0000000000000000 [ 1235.983248][ T3591] RBP: ffff88801a2e8000 R08: 0000000000000000 R09: 0000000000000000 [ 1235.991215][ T3591] R10: ffffffff812bde8e R11: 0000000000000000 R12: ffff88801a2e9880 [ 1235.999177][ T3591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1236.007143][ T3591] FS: 000000c0001d2c90(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1236.016082][ T3591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1236.022738][ T3591] CR2: 0000555557540808 CR3: 000000001d2ba000 CR4: 00000000003506f0 [ 1236.030699][ T3591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1236.038656][ T3591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1236.046703][ T3591] Call Trace: [ 1236.049979][ T3591] [ 1236.052919][ T3591] exit_to_user_mode_prepare+0x57/0x290 [ 1236.058530][ T3591] syscall_exit_to_user_mode+0x19/0x60 [ 1236.064055][ T3591] do_syscall_64+0x42/0xb0 [ 1236.068462][ T3591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1236.074343][ T3591] RIP: 0033:0x4665e0 [ 1236.078224][ T3591] Code: e5 48 83 e4 f0 ff d0 48 89 ec 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 83 ec 30 48 89 6c 24 28 48 8d 6c 24 28 48 89 1c 24 4c 89 64 24 [ 1236.097827][ T3591] RSP: 002b:000000c000291ab8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1236.106337][ T3591] RAX: 0000000000000000 RBX: 000000c00001e000 RCX: 000000000049dfbb [ 1236.114315][ T3591] RDX: 000000c000291ac0 RSI: 000000c000291bf0 RDI: 0000000000000017 [ 1236.122286][ T3591] RBP: 000000c003675460 R08: 0000000000000001 R09: 000000c0005e2780 [ 1236.130244][ T3591] R10: 000000000000001a R11: 0000000000000202 R12: 000000c0036754f0 [ 1236.138203][ T3591] R13: 0000000000000000 R14: 000000c0000001a0 R15: 000000000000001f [ 1236.146171][ T3591] [ 1236.149188][ T3591] Kernel panic - not syncing: panic_on_warn set ... [ 1236.155760][ T3591] CPU: 0 PID: 3591 Comm: syz-fuzzer Not tainted 5.17.0-rc2-next-20220204-syzkaller #0 [ 1236.165288][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.175327][ T3591] Call Trace: [ 1236.178598][ T3591] [ 1236.181528][ T3591] dump_stack_lvl+0xcd/0x134 [ 1236.186116][ T3591] panic+0x2b0/0x605 [ 1236.190032][ T3591] ? __warn_printk+0xf3/0xf3 [ 1236.194615][ T3591] ? __warn.cold+0x1d1/0x2cf [ 1236.199208][ T3591] ? fpregs_assert_state_consistent+0x80/0xe0 [ 1236.205350][ T3591] __warn.cold+0x1ec/0x2cf [ 1236.209756][ T3591] ? fpregs_assert_state_consistent+0x80/0xe0 [ 1236.215816][ T3591] report_bug+0x1bd/0x210 [ 1236.220194][ T3591] handle_bug+0x3c/0x60 [ 1236.224346][ T3591] exc_invalid_op+0x14/0x40 [ 1236.228859][ T3591] asm_exc_invalid_op+0x12/0x20 [ 1236.233696][ T3591] RIP: 0010:fpregs_assert_state_consistent+0x80/0xe0 [ 1236.240362][ T3591] Code: e9 55 ca 4c 00 e8 50 ca 4c 00 e8 db 97 2b 08 89 c3 65 48 8b 05 e9 90 d6 7e 4c 8d a5 80 18 00 00 49 39 c4 74 10 e8 30 ca 4c 00 <0f> 0b 5b 5d 41 5c e9 25 ca 4c 00 e8 20 ca 4c 00 4c 89 e2 48 b8 00 [ 1236.259955][ T3591] RSP: 0018:ffffc90001f0fef0 EFLAGS: 00010093 [ 1236.266010][ T3591] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1236.273965][ T3591] RDX: ffff88801a2e8000 RSI: ffffffff812bdec0 RDI: 0000000000000000 [ 1236.281928][ T3591] RBP: ffff88801a2e8000 R08: 0000000000000000 R09: 0000000000000000 [ 1236.289905][ T3591] R10: ffffffff812bde8e R11: 0000000000000000 R12: ffff88801a2e9880 [ 1236.297873][ T3591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1236.305870][ T3591] ? fpregs_assert_state_consistent+0x4e/0xe0 [ 1236.311937][ T3591] ? fpregs_assert_state_consistent+0x80/0xe0 [ 1236.318006][ T3591] exit_to_user_mode_prepare+0x57/0x290 [ 1236.323568][ T3591] syscall_exit_to_user_mode+0x19/0x60 [ 1236.329028][ T3591] do_syscall_64+0x42/0xb0 [ 1236.333442][ T3591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1236.339331][ T3591] RIP: 0033:0x4665e0 [ 1236.343213][ T3591] Code: e5 48 83 e4 f0 ff d0 48 89 ec 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 83 ec 30 48 89 6c 24 28 48 8d 6c 24 28 48 89 1c 24 4c 89 64 24 [ 1236.362821][ T3591] RSP: 002b:000000c000291ab8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1236.371232][ T3591] RAX: 0000000000000000 RBX: 000000c00001e000 RCX: 000000000049dfbb [ 1236.379277][ T3591] RDX: 000000c000291ac0 RSI: 000000c000291bf0 RDI: 0000000000000017 [ 1236.387242][ T3591] RBP: 000000c003675460 R08: 0000000000000001 R09: 000000c0005e2780 [ 1236.395227][ T3591] R10: 000000000000001a R11: 0000000000000202 R12: 000000c0036754f0 [ 1236.403183][ T3591] R13: 0000000000000000 R14: 000000c0000001a0 R15: 000000000000001f [ 1236.411177][ T3591] [ 1236.414537][ T3591] Kernel Offset: disabled [ 1236.418874][ T3591] Rebooting in 86400 seconds..