0109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 15:49:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x4c) 15:49:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000e00", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:35 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000000c0)='{\bK\x00', r3) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="ad11d35a956003dae3e9297bc47e82e7b9e055d05aeb5bdb47579c076da2a4b3f81511e6439ecf032be955ecc1da740f274ee419f0055b24c1f497d47bfa7b4820b89ab7dc7eb29b309cfbcf499505b9b300518394cc76ce", @ANYRESOCT=0x0, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES16, @ANYBLOB="9233e36a367f98d4d54b78c4596344e98e707287517f99f61a102ea1d12b7d1e151db21fe0798937429688e64417064588ff54e825d72d44c6a750ea0b8852a75c840b115e062cf5b10fa5713a033ed9f4a3c5d56f5e83d63711b11092c40be5d89edb12256cfe8b39dd965e47bc44cf389f9a564155334a377a88a5a78f59891d8e3ca1da1efd424cdd29a3267d59fb096a5ea23116efe8e1ca906d3df0b5cbe646ef0c4fe4d46d1e53046e7012e21c0981f8c67ebf952daf9a76ee65eeab83d368ebc09f85dfc2ab040def0cf8e3ec50d9f39a28d89b70f3d8bd2f43c549812087"], 0x20}}, 0x40081c0) r4 = socket(0x10, 0x80002, 0x0) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:49:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002004, 0x0, 0x0, 0x0, 0x0, 0xb605}}], 0xc6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x9, 0x800, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x68, 0x0, 0x3, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, {[@rr={0x7, 0xb, 0x80, [@rand_addr=0x64010101, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000004140)=ANY=[@ANYBLOB="6772656b619bd3000000008c70466cfe25840616738d060f2e8600"/36, @ANYRES32=0x0, @ANYBLOB="0007800000000003000000004605009800660000022f9078ac14140d7f000001890bc6ac1414aaffffffff862d00000003070a5257e07d013b82e50712c31b4e0e6cda0b91cc6f8a3aefbb8350070b07cffb43b582c80f9a441c60c0000000020000cf7b0000000500000000000004f8ffffffff831382ac1414bbe000000164010100ac1414bb0707ccac1e010107072dac1e0001060f8fac1e0101ac1e00010a010102"]}) r6 = openat$cgroup_ro(r3, &(0x7f0000000300)='rdma.current\x00', 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000040c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r7}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000440)={r0, 0x1, 0x4, 0x5}) sendmsg$nl_route_sched(r1, &(0x7f0000003f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000000480)=@deltfilter={0x3a60, 0x2d, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0x3, 0x7}, {0xfff1, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x32b4, 0x2, [@TCA_CGROUP_ACT={0x27f8, 0x1, [@m_ife={0x178, 0x16, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x5, 0x3b4, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @dev={[], 0x39}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0xf3, 0x6, "a4604668f159b9b0cb671413a143215013577eeff43f4f578defef380f576d46876cfabd96fb75f7b28fb4eee671990fc38312a5cac50018cc1b5c421a7540b569c16f465ac4925da5bba5c86c713746912c935348854e93679ad1f3db9ceea0e8b3262b591b5ee07cd9872f60406ffdfb4f4d88639bc78eb977321247e3423c4f2bf8f8760e26708740d5c5dd9f48a93e523283d3e418556b16c6506f34fab1a39a41beb2821faed053304becb3b205beecd347e7d3a1e8c4c1972695533b7920928b4c1739fa9ef7e228f07491112806b9eadc8fc047f89abd86bd42b43bc2cac945a83dfa795b3fe000d840660e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x267c, 0xf, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x2554, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x1, 0x1, 0x1, {0x8, 0x0, 0xa2, 0xff, 0x8, 0xaa8}, {0x9, 0x2, 0x0, 0x100, 0xe69, 0x9}, 0x80, 0xffff, 0x1f}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x80000000, 0x485, 0xc, 0xe561, 0x7fff, 0x80, 0x1f, 0x65ca, 0xb58, 0xed, 0x8001, 0x40, 0x400, 0x5, 0x3, 0xbaa, 0xfffffff9, 0x0, 0xfffffff7, 0x20, 0x3, 0x6, 0x0, 0xffffffff, 0x2, 0x6, 0xa3, 0x4, 0x10001, 0xf19, 0x1, 0x20, 0x8, 0x1000, 0x0, 0x5, 0x7, 0x8, 0x0, 0x1, 0x0, 0x8, 0x8, 0x4, 0x0, 0x7ff, 0xffffff81, 0xff, 0x1, 0x7f, 0x0, 0x0, 0x1000, 0x80000000, 0x6, 0xd6, 0x1, 0x6, 0x8, 0x8001, 0x10000, 0x6d6, 0x9, 0xfffff7c9, 0xfffffbf5, 0x7, 0x4, 0x82, 0x101, 0x3, 0x1, 0x5, 0x0, 0x6, 0x276d5c7, 0x7, 0x1, 0x7ff, 0xffffffff, 0x1, 0x5, 0x5, 0x9, 0x80, 0x862, 0xd0f, 0x5, 0x6, 0x7, 0x8, 0x5, 0xfffffffc, 0x0, 0x5, 0x1f, 0x41de, 0x9, 0x53, 0xfffff9a0, 0x10000, 0x53d5, 0x80000001, 0x9, 0x9, 0x5, 0x100, 0x4, 0x100, 0x401, 0x1, 0x18, 0x6, 0x5, 0x40, 0x1, 0x9, 0x2, 0x3aa5, 0x3aa, 0x10001, 0x101, 0x100, 0x5, 0x6, 0xfffffffe, 0x4f29, 0x2, 0x7, 0xe12, 0x3, 0x8, 0x7ff, 0x6, 0x8, 0x252c, 0x9, 0x10001, 0x4, 0x3, 0x3ff, 0x81, 0x5, 0xb458, 0xff, 0x8, 0x19c7fe9c, 0x4, 0x3, 0x9, 0x1, 0xeb, 0x5d83, 0x2, 0xfff, 0x5d3, 0x2, 0x7, 0x0, 0x4, 0x1, 0x1ff, 0x3, 0x2, 0xffffff01, 0x7, 0x4, 0x6, 0x5, 0x8, 0x6, 0x0, 0x1, 0x2, 0xfd1c, 0x1000000, 0x7e, 0x10001, 0x9, 0x3f, 0x8, 0x4, 0x5e, 0x4, 0x8, 0x7fff, 0x6, 0x1f, 0x1, 0x5, 0xff, 0x3ff, 0x7, 0x20, 0xe86, 0x8000, 0x80000001, 0x5, 0x3, 0x4, 0x8, 0x7, 0x0, 0x9, 0x4, 0x200, 0x2, 0xfffffffe, 0x6, 0x9, 0x4, 0x0, 0x4, 0x7, 0x6, 0x2, 0x401, 0x89, 0x9, 0x19, 0x64e, 0x7, 0x5, 0x7ff, 0x6, 0x2, 0xfff, 0x7, 0x1, 0x7, 0x6, 0x6, 0x9f, 0x800, 0x3, 0x9, 0x63, 0x53d8, 0x6ae8d107, 0x80000000, 0x2, 0x3, 0x4, 0xc4, 0xdc3, 0x9, 0x7fffffff, 0xfff, 0x5, 0x9, 0xa, 0x1, 0x400, 0x8, 0x1f, 0x63b6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x8, 0x5, 0x8, 0x7, 0x0, 0x8, 0xc20, 0xaf5b, 0x6, 0x3, 0x8, 0x4dc, 0x1f, 0xc87, 0x3, 0x9, 0x8, 0x1, 0x7, 0x0, 0x5, 0x80000001, 0x6, 0xff, 0x101, 0x8, 0x1, 0x0, 0x1c, 0x100, 0x31b, 0x3, 0x0, 0x5, 0x8, 0x5, 0x9, 0x1, 0x5, 0x9b6a, 0x7f, 0x1, 0x4, 0x3, 0x101, 0x7, 0x100, 0x2, 0x1, 0x9, 0x4, 0x1, 0x7, 0x8001, 0x10000, 0x7ff, 0x101, 0x1, 0x1, 0xaa, 0x9, 0x3, 0x7ff, 0x5, 0x800, 0xfff, 0x3ff, 0x1ff, 0x7, 0x7, 0x4, 0x3, 0x401, 0x3b2, 0x911d, 0x55, 0x9, 0xffff4e34, 0x0, 0x2, 0x800, 0xff, 0x9, 0x2, 0x40, 0x40, 0x8001, 0x73f, 0x600, 0x5, 0x7, 0x7, 0x13, 0xffffffff, 0x3, 0x8000, 0xd97, 0x6d, 0xe3f5, 0xa0, 0x8, 0x8001, 0x10001, 0x792, 0x1000, 0xfffffffb, 0x4, 0x41b6, 0x3, 0xffff, 0x7f, 0x2, 0x800, 0x4, 0xa4, 0x50, 0xab, 0x8, 0x1, 0x1, 0x7fffffff, 0x100, 0x8001, 0x3b5f, 0x26, 0x6cf7, 0x5, 0x2, 0x3, 0x7, 0x7f, 0x5, 0x6ad741bd, 0x7f, 0x1, 0x9, 0x6, 0x0, 0x3, 0x1, 0x3f, 0x1, 0x800, 0x80, 0x7fffffff, 0x0, 0x28, 0x9, 0xbb31, 0x1000, 0xd64, 0x2, 0x2, 0xfffffffc, 0x80000001, 0x4, 0x4, 0x1ff, 0x6, 0x100, 0x3d36, 0x80000001, 0x80000001, 0x0, 0x9, 0x80000001, 0xffffffff, 0x8001, 0x2fc, 0x3, 0x6, 0x1, 0x6fea4f30, 0x2, 0x4, 0x0, 0x8e21, 0x6, 0x8, 0xeab, 0x1, 0x1, 0x2, 0x10000, 0x1, 0x9, 0xa85, 0xffff, 0x40000000, 0xc44, 0x5, 0x9, 0x92, 0x20, 0x9, 0xbf, 0x10001, 0x5, 0x5, 0x8001, 0x3, 0x4, 0x6, 0x0, 0x80, 0x7, 0xdd, 0x0, 0x40, 0x38, 0x7415, 0x7, 0x9, 0x40, 0x3f, 0x3, 0x9, 0x6, 0x7fffffff, 0x40, 0x5, 0x71bc, 0x8001, 0x8, 0xffffffc5, 0x6, 0x4e9b, 0x101, 0x8, 0x9, 0xfffffffa, 0x3, 0x1, 0x9198, 0xfffffffb, 0x72, 0x1, 0x9, 0x401, 0x9, 0xffff, 0x1000, 0x6d6, 0x3ff, 0x40, 0x7ff, 0x3, 0xe582, 0x7, 0x401, 0x8, 0x9, 0x1, 0xfffff801, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1f, 0x5, 0x7, 0x800, 0x9, 0x100, 0x10001, 0x4, 0xee19, 0x4, 0x10000, 0xffffffff, 0x9, 0x9, 0x9, 0x8, 0xffffffc8, 0x6, 0x10001, 0x9, 0xfffffeff, 0x0, 0xa91, 0xa12d, 0x7fffffff, 0x1ff, 0x80000001, 0x9d9, 0x3, 0x0, 0x10000, 0xfffffffe, 0x4, 0xfffffffb, 0xc0d0, 0x3, 0x7f, 0xabf, 0xe9, 0xff, 0x0, 0x5f965651, 0x7ff, 0x2, 0x3, 0x80000000, 0x7, 0x0, 0x2, 0x6, 0xd2, 0x100, 0x100, 0xab3, 0x8, 0x8000, 0xffffffff, 0x1, 0x0, 0x8, 0x2, 0x1ff, 0x7fffffff, 0x5, 0x80000000, 0x0, 0x401, 0x2, 0x0, 0x4, 0x6, 0x3, 0x1, 0xffffffe0, 0x8001, 0x0, 0xe08, 0x6, 0x9, 0x40, 0xffffffff, 0x5, 0x20, 0x6, 0x6, 0x6, 0x5, 0x8, 0x3, 0x7f, 0x2, 0x8, 0x4, 0x401, 0x6, 0x9, 0xffffffff, 0x1, 0x80000001, 0x1000, 0x5, 0x753, 0x0, 0x2, 0x1, 0x8, 0x2, 0xfffffffa, 0x3, 0x3, 0x2, 0x3, 0x5, 0x401, 0xec75, 0x3, 0xb39, 0x1, 0x1, 0x80000000, 0x89d0, 0x9, 0x7f, 0x9, 0x7, 0x8000, 0x8, 0x1, 0x6, 0xffffa67f, 0x9, 0x20, 0x9, 0xffffffff, 0x9, 0xb9c1, 0x200, 0xdf, 0x100, 0xffffffff, 0x9, 0x0, 0x34715cbe, 0x1, 0x3, 0x2, 0x8, 0xea2, 0xfffffe00, 0x400, 0x6, 0x7ff, 0x0, 0x8, 0x4e44, 0xffffffff, 0x9, 0x3, 0x7fffffff, 0x7e320eae, 0x9, 0x4, 0x7, 0x0, 0x0, 0x18000, 0x3, 0xe1, 0x2d506d22, 0xcfb, 0xfb95, 0x0, 0x3, 0x7, 0x7, 0xffffffff, 0x2, 0x4, 0x9, 0xfffffff7, 0x400, 0x0, 0x3, 0x6000, 0x9b7, 0x8, 0x2, 0x9, 0x9, 0x1ff, 0xff, 0x0, 0x5e47, 0x0, 0xf59, 0x5, 0x1, 0x5, 0xfffffb68, 0x800, 0x8, 0xe55, 0x0, 0xffffffff, 0x2, 0x0, 0x7, 0x6, 0x7ff, 0x3, 0x6, 0x80000000, 0x423e93c4, 0x1, 0x7fff, 0x0, 0x0, 0x7be, 0xe2, 0x7ff, 0x2, 0x3f, 0x3, 0x516e9a9b, 0x1, 0x3, 0x2, 0xfffffe40, 0xfffeffff, 0x1000, 0x200, 0x155b, 0x9, 0x1df, 0xfffffffb, 0x401, 0x6, 0x0, 0x4, 0x7, 0x5, 0x7f, 0xed1, 0x347, 0x9, 0x10001, 0xfffffffc, 0x9b47, 0x3, 0x0, 0x8, 0x3, 0x4, 0x80000001, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0xdb, 0x8, 0x0, 0xe2e, 0x93, 0x773f9634, 0x6, 0x1, 0x3, 0xdb, 0x7, 0x2, 0x1, 0x5, 0x3, 0x8, 0x35b, 0x7fffffff, 0x5, 0x80000000, 0x3, 0x4, 0x3, 0x200, 0x9, 0x1000, 0x7, 0xff, 0x20, 0x4, 0x1ff, 0x6, 0xb4, 0x4, 0xffffff83, 0x2, 0x1e, 0x1, 0x9, 0x40, 0x3, 0x6, 0x1ff8, 0xba03, 0x7fffffff, 0x34, 0x8b, 0x101, 0x100, 0x7, 0x8, 0x2b, 0x4, 0x9, 0x40, 0x3f, 0x2f29, 0x1, 0x1, 0x6, 0x9, 0x8001, 0xa9, 0x73d3, 0xe5d, 0x401, 0x0, 0x80, 0x8, 0x57, 0x6, 0xfffffff7, 0x1e6, 0x3, 0x7, 0x2, 0xfff, 0x4ab2, 0xc0000000, 0x1000, 0x4333, 0x1, 0x7, 0x1, 0x7, 0x3, 0x1, 0x5, 0x713, 0x8, 0x4, 0x0, 0x2, 0x3, 0x9, 0x556b, 0xff, 0x4ce8, 0x4, 0x10001, 0x400, 0x8, 0x1, 0x80, 0x3f, 0x6, 0x1, 0x2, 0x547, 0x6, 0xdc, 0x9fa2, 0xffff, 0x9, 0x101, 0x0, 0x9, 0x646, 0x53, 0x9, 0x7, 0x4, 0x1, 0xfffff0d1, 0x3, 0x328, 0x3, 0x3, 0x6f, 0x2, 0x338, 0x2, 0x3, 0xffffffff, 0x6, 0x8, 0xb8, 0x2, 0x4, 0x0, 0x609f, 0x1, 0x8, 0x2, 0x5, 0x3f, 0x5, 0x1, 0x200, 0xed3, 0x1, 0x1, 0x0, 0x9ed, 0x2, 0x7, 0x4, 0x100, 0x1, 0x4, 0xd6ce, 0x8000, 0x5, 0x1964, 0xffffffff, 0x6, 0x7fff, 0x100, 0x1ff, 0x4, 0x8000, 0x20, 0x80, 0x7, 0xfffffffd, 0xe83, 0x1, 0x9, 0xfffffffc, 0x80, 0x80, 0x1, 0x1b, 0xb29e, 0x4, 0xffffffff, 0x1f, 0x2, 0x8, 0xfff, 0x401, 0x3, 0x7, 0x2, 0x8436, 0x0, 0x9, 0x100, 0x3ff, 0x7f, 0x1ff, 0x5, 0xffffffff, 0x7a6, 0x9, 0xe3c10000, 0x2, 0x9, 0x1, 0xfffffffa, 0xa47c, 0x9, 0x0, 0xffffffff, 0x101, 0x3ff, 0x2, 0xffffff7d, 0x0, 0x8bc, 0x3, 0x240000, 0x4, 0x8, 0x5f30, 0x5, 0x6, 0x17, 0x5, 0xff, 0xc995, 0x8e, 0x2, 0x6, 0x8001, 0x0, 0x180000, 0x3, 0x0, 0x3, 0x8, 0x80000001, 0x3, 0xf2f4, 0x401, 0x1ff, 0x3, 0x303e, 0x6, 0x9, 0x2, 0x5, 0x1c7, 0x5a, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3f, 0xcf, 0x7fff, 0xffa4, 0x8, 0xffffffff, 0x7fffffff, 0x0, 0x2, 0x8, 0x6, 0x9, 0x1000, 0x1, 0x4, 0x6, 0x6, 0x8, 0x1000, 0x9bfd, 0x7fffffff, 0x1, 0x4e38, 0x0, 0x8, 0x9, 0x2, 0x2, 0x4, 0x4, 0x671, 0x9, 0x800, 0x6, 0xffffffff, 0x8001, 0x400, 0x0, 0x8000, 0x7, 0x101, 0xc00000, 0x2, 0x3, 0x5, 0x6, 0xfffffffe, 0x6, 0xffc0, 0x8, 0xffffff81, 0x5, 0x81, 0xa06, 0x7, 0x400, 0x32, 0x10000, 0x0, 0xd4, 0x0, 0x552d, 0x10001, 0x7fffffff, 0x900c, 0x4, 0x7, 0x10001, 0x1, 0x1, 0x200, 0xee7, 0x400, 0x1738, 0x837, 0x6, 0x7ff, 0x1ac7, 0x741, 0x101, 0x80000001, 0x8, 0x80, 0x100, 0x9, 0xee68, 0x8, 0x1e, 0x80000001, 0x9, 0x0, 0x5, 0x5, 0x1, 0xd4ac, 0x1f, 0x7fffffff, 0x5, 0x4, 0x3, 0x6, 0x4, 0x80000000, 0x16a6, 0x9, 0x8000, 0x0, 0x7ff, 0x1, 0x8a5, 0x4, 0x1, 0x5, 0x81, 0x10001, 0x6, 0x80000001, 0x80000001, 0x0, 0x6, 0x4, 0x6, 0x5, 0x1fba5e79, 0x5, 0x7, 0x7f, 0x9, 0x4, 0x6, 0xd5a, 0x7f, 0xfffff879, 0x765, 0x9, 0x5, 0x8001, 0x0, 0x24a6, 0x5, 0x4, 0x6, 0x6, 0x40000000, 0x0, 0x0, 0x20, 0x8c90, 0x4, 0x4, 0x10000, 0xfff, 0x0, 0x9, 0xfffffffa, 0x7, 0x7, 0xdc0, 0x50000000, 0x4, 0x401, 0x8, 0x3, 0x5, 0x9, 0xe6, 0x0, 0xfffff001, 0x80, 0x8001, 0x8, 0xf9, 0xff, 0xfff, 0x0, 0x3, 0x3f, 0x0, 0x26f, 0x1, 0x7, 0x1000, 0x1, 0x4, 0x840e, 0x7, 0xffffffff, 0x1, 0x1000, 0xf6, 0xff, 0x7, 0xfffff789, 0x1f, 0xff, 0x80000000, 0x1df, 0xfffffffb, 0x2, 0xa25, 0xffffffff, 0x4, 0x3f, 0x127, 0x8, 0x68f41f0f, 0x4, 0x8000, 0xa4, 0x7, 0xfff, 0x3, 0x1, 0x3, 0xffffffff, 0xfffff256, 0x55, 0x4, 0x45a22472, 0x8, 0x7, 0x62ae21bc, 0x0, 0xe7e, 0x10001000, 0xc4, 0x425, 0x0, 0x0, 0x5, 0x1, 0x5, 0x81, 0x6, 0x1, 0x10000, 0x277d6867, 0xb24a, 0x401, 0x5, 0xc2, 0xfff, 0x3f, 0x8001, 0xc9c, 0x23, 0x5, 0x1dbdf263, 0x9, 0x10001, 0x8, 0x2, 0x4, 0x6, 0xf5, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff851e, 0x2, 0x88, 0x833, 0x6, 0x3f, 0x39, 0xb3, 0x0, 0x6, 0x9, 0x8001, 0x1, 0x7, 0x1, 0xfff, 0x101, 0x5, 0x5, 0x8, 0x2, 0x8000, 0x8, 0x0, 0x9, 0x2, 0x80000001, 0x6, 0x0, 0xff, 0x800, 0x4, 0x8001, 0x7fffffff, 0xffff, 0x9, 0xfffffc8c, 0x0, 0xffff, 0x4, 0x4, 0x2, 0x2, 0x9, 0x3, 0x1ff, 0x3ff, 0x3, 0x9, 0x5b8e, 0x401, 0x4, 0x0, 0x7f, 0xd7b6, 0x9, 0x9, 0x2639d8a0, 0x7ff, 0x3ff, 0x3ff, 0x9, 0x10001, 0x2, 0x6, 0xff, 0xfffffff9, 0x7, 0xfffffff7, 0x76, 0xb2, 0x32bd4ed, 0x5, 0xfffffffc, 0xba, 0xfff, 0x342b, 0xffffffff, 0x6, 0x80, 0x401, 0x40, 0x9e0, 0x7fffffff, 0x8, 0x100, 0x9, 0x7, 0x1, 0xa769, 0xffff8001, 0x20, 0x300, 0x8, 0x9, 0xb921, 0xff000000, 0x1, 0x0, 0x2, 0x80000001, 0x400, 0x7, 0x1ff, 0x800, 0x6, 0x200, 0x4, 0x1ff, 0x80000001, 0x380d, 0x4, 0x1, 0x20, 0x97d, 0x8, 0x2, 0x6, 0x0, 0x8, 0x80, 0x1, 0xfffff1d6, 0x1, 0x9, 0xff, 0x5, 0x4b7, 0x7, 0x9, 0xffffffff, 0x3, 0x8b13, 0x7, 0x6, 0x3, 0x5, 0x80000001, 0x4, 0x9, 0x8, 0x22, 0x5a, 0x4, 0x1, 0xffffff22, 0x2, 0x0, 0x19, 0x7ff, 0x8001, 0x7, 0x4, 0x1, 0x2, 0x9, 0x1e9, 0x7fff, 0x6, 0x7ff, 0x10001, 0x3, 0x401, 0x100, 0x5, 0x9, 0x81, 0x819, 0x4, 0x7, 0x3, 0x0, 0x7f, 0x40, 0x9, 0x3, 0x6, 0x4fe7, 0x8, 0x0, 0xc488, 0x7, 0xfffffff9, 0x75, 0xc9, 0x3, 0x800, 0x0, 0x47, 0xfffeffff, 0x9371, 0xffff7fff, 0x8, 0x1, 0x100, 0x1, 0x6, 0x7, 0x2, 0xed, 0x9, 0x4, 0x1, 0x0, 0x7ff, 0x9, 0x5, 0x7, 0x5, 0x7, 0xc1, 0x1, 0x5, 0x0, 0xffffff00, 0x3ff, 0x9, 0x40, 0x5, 0x9, 0x5, 0x4, 0x3, 0x8, 0x1, 0x2, 0x81, 0x2, 0xffffffff, 0x3f, 0x5, 0x7fff, 0x5, 0x7f, 0x7fff, 0x80000, 0x7fff, 0x400, 0x8, 0x2, 0xff, 0x800, 0x9, 0x3, 0x51, 0x3ff, 0x3, 0x0, 0x1, 0xb0cb, 0x4, 0x4, 0x4, 0x7fffffff, 0x9e7, 0x7fffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe024, 0x4, 0x4, 0x1, 0x2, 0xffff, 0x3, 0x1f, 0xf8, 0x8, 0x5, 0x17, 0x1, 0x29, 0x5, 0x3, 0x5, 0x34e9, 0x1, 0x10000, 0x401, 0x5, 0x8000, 0x1, 0x101, 0x0, 0x2, 0x3, 0xfffffff7, 0x1, 0xd4c6, 0x5, 0x4, 0x3, 0x4, 0x7, 0xd5a, 0x6, 0x69f, 0x8, 0x80, 0x6, 0x7, 0x10000, 0x7, 0x3, 0x9, 0xfffff001, 0x10000, 0x9, 0x9, 0x4, 0x401, 0x2, 0x81, 0x0, 0x5b, 0x9, 0x10001, 0xe3, 0x5, 0xffff, 0x0, 0x8, 0x0, 0x8, 0x1, 0x1, 0x6, 0x4, 0x9, 0x7ff, 0x6a, 0x40, 0x1, 0x8, 0x6, 0x80000000, 0x80, 0x7fffffff, 0x0, 0x5, 0x4, 0x9, 0x80000000, 0x5, 0x7, 0x7, 0x2, 0x3ff, 0x1, 0x0, 0x6, 0x8, 0xff, 0x5703, 0x6, 0x8001, 0x4, 0x0, 0x1, 0x18000000, 0x3, 0xb95, 0x0, 0x10000, 0x1, 0x1f, 0x1ff, 0x6, 0x89f, 0x7, 0x1, 0x4, 0xe012, 0x3, 0x7fffffff, 0x7, 0x3c7, 0x7, 0xd, 0x401, 0x1, 0x400, 0xb7ef, 0x0, 0x4dd, 0x0, 0x8, 0x10001, 0x1ff, 0xa05, 0x3f, 0x8, 0x606, 0x1, 0x6, 0x1, 0xfffffffb, 0x3f, 0x1, 0x6, 0x2, 0x200, 0x7ff, 0x3, 0x2, 0x0, 0x1f, 0xfffffff9, 0xf4ab, 0x4, 0x5, 0x0, 0x9, 0x5, 0x100, 0x186, 0x6, 0xfffffffc, 0x3, 0x8, 0x3, 0x2, 0x1f, 0xc9e7, 0x0, 0x81, 0x18, 0x8, 0x5, 0x10000, 0x6, 0x5, 0x4, 0x1, 0x4, 0xf8c, 0x80000000, 0x7, 0x20, 0xb8, 0x17, 0x1, 0x7, 0xdbe1, 0x6, 0x6, 0x4, 0x7f, 0x0, 0x4, 0xfff, 0x4, 0x0, 0xfffffffd, 0x3ff, 0x9, 0x0, 0x9ca, 0x4, 0x5, 0x3, 0xab, 0x3, 0x8, 0x937, 0x2, 0x6, 0x10000, 0x3f, 0x1, 0x7fd, 0x3, 0x3, 0x0, 0x6, 0x9, 0x0, 0xd2, 0x77, 0x3, 0x9, 0x6, 0x80000001, 0x40, 0x20, 0xff, 0x1ff, 0x122, 0x3, 0x80000000, 0x9, 0xffff, 0x8, 0x40, 0x7, 0x401, 0x4, 0x0, 0xa5af, 0x101, 0x10000, 0x7, 0x5, 0x4dcb, 0xfffffff8, 0x7ff, 0x3, 0x7, 0x3259cabd, 0x2, 0x400, 0x78000000, 0x4, 0x9]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x88}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa4}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffff31d, 0x2, 0x3f, 0x80000000, 0x2, 0x9, 0x10000, 0xb, 0x64a, 0x8, 0x3, 0x2, 0x20, 0x6, 0xa30, 0x2, 0xa2, 0x2, 0x0, 0x98, 0x9, 0x8, 0xfffffffd, 0x9, 0x37, 0x7ff, 0x66, 0x7, 0x10000, 0x1, 0x6, 0x4, 0x5, 0x9, 0x6, 0x3, 0x7, 0xf8, 0xffff, 0x3, 0x6, 0xe5d, 0x18, 0xffffff7f, 0x80, 0x10000, 0x4, 0x80000001, 0x100, 0x5, 0x200, 0xff, 0x5, 0x9, 0xfffff001, 0x2, 0x1, 0x7, 0xd0, 0xd674, 0x74196b1f, 0x4, 0x7, 0x1, 0xe86, 0x2, 0x80, 0xffff0000, 0x9, 0xfffffff5, 0x10000, 0x800, 0x20, 0x2, 0x20, 0x1aec, 0x40, 0x401, 0x2, 0xc6, 0x2, 0x40, 0xfffffffd, 0x3, 0x800000, 0x7ff, 0x7f, 0xfffffff7, 0x5, 0x8, 0x2, 0x3, 0x4, 0x3, 0x3, 0x1, 0x60, 0x8, 0x0, 0xffffbc7b, 0x6, 0x8001, 0x0, 0x7, 0x7, 0x101, 0x5, 0x2, 0x5, 0x4, 0x800, 0x3, 0x0, 0x9, 0x101, 0x1000, 0x7, 0x2a, 0x1, 0x2000000, 0x5, 0x100, 0x6, 0x40, 0x3, 0x6, 0x0, 0x8, 0x3, 0x8, 0x4, 0x7, 0x8af, 0x8001, 0x7, 0xffffff7f, 0x8, 0x8, 0x20, 0x2, 0x7fffffff, 0x3, 0x3ff, 0x1, 0x1, 0x5, 0xfffffff9, 0x5, 0x310, 0x5, 0x6, 0x0, 0x9, 0xe470, 0x2c8, 0x80, 0x1200, 0x8000, 0x4, 0xfff, 0x7fffffff, 0x3, 0x3, 0x8b21, 0x94f, 0xb850, 0x5, 0x8, 0x8000, 0x10001, 0x8, 0x1, 0x5, 0x2f7d901b, 0x1, 0x2, 0xff, 0x8, 0x1fbc000, 0x0, 0x8001, 0x5, 0x7, 0x8, 0x6, 0x5, 0x80000001, 0x6d7, 0x61, 0x10001, 0x10001, 0x5, 0x9, 0x6, 0x5, 0x32, 0x6, 0xffff, 0x8, 0x5, 0x3, 0x3, 0x6, 0x3928, 0x3, 0x10000, 0x0, 0x6, 0x10001, 0x7, 0x1, 0x1ff, 0x1000, 0x3, 0x5, 0x4, 0x0, 0x4, 0x3ff, 0x800, 0xa7, 0x3, 0x1f, 0x0, 0x80000001, 0x1f, 0x7e4f0ec8, 0x81, 0xffffaa2f, 0x8, 0x1, 0x7fff, 0x4, 0x8, 0x7, 0x3, 0x2, 0x1ff, 0x4, 0x1, 0x1, 0x8, 0x80000001, 0x8, 0x1, 0xc826, 0x1, 0x2f, 0x6, 0x7, 0x47, 0xfffffff8, 0x2, 0x7ff, 0x7f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x6, 0x6, 0x3ff, {0x1f, 0x0, 0x1, 0x7, 0x0, 0x7ea}, {0xfa, 0x0, 0x20, 0x7, 0x80, 0x5}, 0x8, 0x95fc, 0x7ff}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xdc, 0x0, 0x326, 0x0, 0x10, 0x6, 0x2000000, 0xf7, 0xbac8, 0x2, 0x1f, 0x5, 0x70, 0x5, 0x7f6, 0x4, 0x0, 0xfffffffa, 0x6, 0x4, 0xffffffff, 0x1, 0x1240, 0x6, 0x7fff, 0x0, 0x4, 0x4000, 0x9, 0x0, 0xcc4b, 0xff, 0x3f, 0x80000001, 0x6, 0x8, 0x8, 0x8bec, 0xf2, 0x53, 0x0, 0x2, 0xfa, 0x0, 0x7, 0x8, 0xffff, 0x748, 0xfffffffb, 0xf42, 0x0, 0x59746cf1, 0x100, 0x4, 0x9, 0xec8, 0x4, 0x2b8f, 0x6, 0x9, 0xfffffff7, 0x2, 0x500, 0x7f, 0x35, 0x0, 0x3, 0x2, 0x67ef, 0x51, 0x9, 0x4, 0x6, 0x1, 0x6, 0x1, 0xab, 0x9, 0xa3, 0x10001, 0x1, 0x9000, 0x5, 0x6, 0xcb, 0x3, 0x80, 0x0, 0x797b, 0x7, 0x8, 0x3f, 0xffff1e8d, 0x0, 0x7fffffff, 0x3, 0x8001, 0x8, 0x5, 0x37, 0x0, 0x249, 0x6, 0x8, 0xfffff193, 0x8, 0x10000, 0x3, 0x9, 0x94b, 0x0, 0x1ff, 0x6, 0x1fd9, 0x401, 0x7fffffff, 0x752, 0x200, 0x58300bc2, 0x20, 0x800, 0x3, 0x5a3b, 0x7, 0x3, 0x3, 0x9fc, 0x0, 0x8, 0x3ff, 0x8, 0xfffffff7, 0x9, 0x0, 0x1ff, 0xfffffff8, 0x3ff, 0xff, 0x3, 0x1, 0x7fff, 0x100, 0x80000001, 0x7f, 0xfa, 0x1, 0x3f6b, 0x80000000, 0x20, 0x4, 0x2, 0xdf9, 0x7fff, 0x80000001, 0x5, 0x2, 0x200, 0x9, 0x8, 0x4, 0x101, 0xfffff000, 0x101, 0x9, 0x3ff, 0x0, 0x8, 0x80000001, 0x0, 0xdce1, 0x200, 0x4, 0x6, 0x2, 0x0, 0x0, 0xae5, 0xb4d, 0x2, 0x3, 0x40, 0x6, 0x4, 0x8000, 0x546, 0xc3c, 0x1, 0x0, 0x1, 0x1, 0x6, 0x7, 0x9, 0x401, 0x7, 0x80000000, 0x2, 0x3f, 0xaa0b, 0xffff, 0x4, 0x0, 0x1000, 0x1000, 0xffff2ca8, 0x77, 0x6287, 0x7916, 0x9, 0x3, 0x5, 0x172b, 0xffff7fff, 0x8, 0x96, 0xffff, 0xffffffff, 0x1, 0x1, 0x2, 0xfffffffe, 0x6, 0x2, 0x3, 0xffff, 0x2, 0x4, 0x4, 0x200, 0x1, 0x7, 0x5, 0x7, 0xfffffffd, 0x7fff, 0x2, 0x9, 0x0, 0x7ff, 0x10000, 0x3, 0x2, 0x9, 0x400, 0x20, 0x6, 0x7, 0x4, 0x2, 0x80000001, 0x2, 0x0, 0x1, 0x0, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x778}]]}, {0xfe, 0x6, "d8a65878ae272d747cc1fcd2123c65cfee4a7abb8077425471b49d67e9cca50037a09e15fe953f6484b75a9d6017c9426dfcf4e7130c2abf8536532138b3602b726c89b42af02f1a4740cb0586781584021d8f48354911329795842061ad2dd178c10266a0db6e8eb92761c053afa9378f4a8193996ea50baf39ffb046147d35880f0ae985a1f86bce80498fbd06cf5171555f0855c78baf2699e21831057bb64ceb4df62f70678daf1554528922095fa17ed73c2f4b25543a6794f8f97e3ea45a27c703463ae1315ff12794bc8114504516df306f96d7c77376b7c8b2f8936cadaac430afbbf780f40f65b17f8974420c960dc21d396a263141"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_ACT={0xaa0, 0x1, [@m_nat={0x10c, 0x7, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x0, 0x10001, 0x3460494f}, @rand_addr=0x64010100, @rand_addr=0x64010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x0, 0x5, 0x3f, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5b1f, 0x6, 0x353a}, @private=0xa010102, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7fff, 0x2, 0x171, 0x8}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x44, 0x6, "4a438dce218f419f37f1f1af8811d465eae6ff7e53d8c88d4aeb45d8b2189f52895adafd3720e75a6500593708802ec57dba4e9deede41557d683eba9a278922"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}, @m_ipt={0x288, 0x5, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x1b4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x63, 0x6, {0x40, 'raw\x00', 0xae, 0xdbd9, "5391d7da971b04e34bb23ad5f8cdc11227f0787054312bbbbd5af464b03f0b253dea8a75f77d98e8f581fabf77a0d6dfd13d022156737314e9"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xfa, 0x6, {0x0, 'raw\x00', 0x9, 0x3f, "d6f7e04d7ee6e141d75447f1d763d536d57defb5137efb72340dcb49a9e50ba55ebe8dc48c2c5843800b53a48f412646571e036e7b4a360046d42067d9a0f1dc678f7d322d74cfeed1322659e967f9621f8efc4cfd5d4e204ca71397d967d7ce296b23857c8e85b537f4ac492c7c08158ef21039a27789215bef6d9c785d58637bfb75049de5e9148b8a16c9a2c1cde521d3db709d8686e5e64e1407f7226ae9483e00177c0bf6e1f07973c2651ac7080921298cfae1c95b1638187276431b95cbcac50b250a32646a9f6cff87df92b7"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xb0, 0x6, "751a27154a26dab2e6066c91aaee6418b23395aef0b27abff8027f348120df87e7cc4285ec37f91dfbd052670912441fb9ad683ad0a5d1930e442752941d50e8e9f40453948794c7d85d559bc586202628a13c67095fca5778fbfc085b68e3e93765997dfd805c9248d59e496e93f5295e3d7a8c33f33047533c42d14646e16c14cc331b3ed2c98cf25624a888670fc9a315772b1796899cdf9248aad0e0de1b3cfb7e7b29a2c0ae79c77675"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_simple={0xd0, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '#-\\)-/(\'#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x6, 0xd0}}, @TCA_DEF_DATA={0x9, 0x3, '&*/:\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x80000000, 0x8, 0x7ff, 0x3}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x48, 0x6, "8bd576dd245bcd0a4777382b9f18081cc4d122284a2e8d73df95d59b3c2f4ee7269c8e3041d06f98a1dc406ed46ff127ffe18ab845b57b7077e11652676751fc09c8088d"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0xa8, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x62, 0x6, "469982c318383018ce7a73bb667ceca9ecbd4c6fa21e3cc4eee2f1cd5051760440c714f7ac1b4fc8365f2dd39fbd4db5209653d35ec2c13755a3d57ba2535f8dbeba86e2a61ed97b6092f9fea2ce1d4d6c716c299b73514e3c284d56a1bd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x120, 0xf, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x5, 0x0, 0x2, 0x99}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7fffffff, 0xffffffffffffffff, 0x100, 0x7}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x0, 0x1, 0x4, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb7, 0x9, 0x6, 0x400, 0x1000}, 0x1, r5}}]}, {0x73, 0x6, "3d69f0e7136580164ef2208e315166eb26fa95be6d6cacbda228cb95962bacdcf5cbd46a9cd54ad71d1447337aaab9c4501e2c20e3a926e7947f1767ec7c58ed4cca4ecc5a6516293b0b2155a74dc342a48d430a9a04dcaf0815877738a506de7991354b3a6b971552adc7e9015eea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x94, 0x7, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x13b, 0x1ff, 0x6, 0x4f6b, 0xfeb}}}]}, {0x41, 0x6, "842667868e36169d54ff92b2f8e90a45d94c88cb770d80d937a2f2a7c1be5fbf52f3420353731da9416f44c339418f38b148107244e749e7a348613f17"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x110, 0x4, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb9a}]}, {0xdc, 0x6, "9b53af2acee76542a184defd1bfa62d3b89361626a624f56747392ad7dfdb841d5cf4ecbb75fc19c31bde366f204971147a11c0fb2906a2361a451df4c03519e9c7aee538283fadf69fed119bdd6c1170f26a54e809f651fec6b28de87430dd21e059fbb23f44350172ec112e30d6da1cb60967ffad74519db9e50bc2513eb02b9bf8aeeec39b4a48dba393cc413dda8ea850200ca829322ffa5d71d4ec5a044277e7993db7c8f98bf725cf438dc14591da07a422b88f00b9ce4151df2d978a78bcb41ebe2ffe31734724b209c6098189d62361f3cc13e84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_skbmod={0x13c, 0xb, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x430, 0x5, 0x0, 0x9}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x96, 0x0, 0x7, 0x238d0b79}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x20}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xa5, 0x6, "3d7cb8efa89f9c45a1e9a4d4259db7d2f9101f62a92411ad6b8aa5884a37bcfc5d1a74bb955c630b903cb44c780b2b15b0c058075ad0ccf21b9b410cfaeb9bb5148bd9eea790cf2cad5d58b62cb233c87a1916806b3404fe18866adef2e9eb01974a4217bcb59279f91e82b4c92cecb31e15eaa00f0045a9bb8c54990cea4b3cb0600737d7c2c401d27615ee7b925b5d568f3f894b4c6c479350f987b302a87b30"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x190, 0x1e, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xff, 0x3, 0x7, 0x0, 0x7f}, 0x10}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf1, 0x5, 0x0, 0x20, 0xfff}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfff, 0xbe0, 0x2, 0x0, 0xe9}}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0x4, 0xc4, 0x8}, 0x2}}]}, {0xba, 0x6, "842b6c41bc93d3e13f9a63a93242bfc730aeada9136cf57e86cfe67139872c76c5a16ca41bece0b6da4b1da0b9bc7e3e5c3aa673fb976c09a72c6996eaea21e53c6fb0192769c45569dda1ad70da3867f2f48d26535897dfecec6bf16cd560175f1db0ea13427653d0db2032816bd0cc797a724ed0f41075676de8a53f759a9ecae234a198b77f913f5cf0edf34560fc6d0db3dd917a9019f6b20a33cf494cd1373bec954ff024521505844f8fef666efa865467097c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xe8, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0xb8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x2, 0x1ae, 0x4001ff, 0x7ff, {0x3, 0x0, 0x9, 0x8, 0x4, 0xfffffffe}, {0x7f, 0x2, 0x0, 0x6, 0x4, 0x5}, 0x0, 0x200, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0xc9, 0x8, 0x3, {0x1, 0x0, 0x20, 0x6, 0x1, 0x6}, {0x2f, 0x2, 0x3, 0x62a, 0x1, 0xce2}, 0xc3aa, 0x5, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff7813, 0x3, 0x2, 0x0, 0x95a, {0x9, 0x2, 0x238, 0x0, 0x9}, {0x0, 0x3, 0x80, 0x9a, 0x8, 0xf9}, 0x302, 0xbcc7, 0x8}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_FD={0x8, 0x6, r8}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x658, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_ACT={0x62c, 0x6, [@m_ipt={0x280, 0x1a, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x18c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xbf, 0x6, {0x3, 'filter\x00', 0x40, 0x1f, "1a0d161fc9be5a682f86799811c70e04decbe7e679b2349195880ec713e33386e9d630bd0c8d803c91ed266c3255ae6b89fda6717d10e4f6a6454b6fbf3f95fcf5a4888d3ca9b87dde4309f41c5dfa38f38e3fb25c69cb9e5e649f06ba173fb44a24050aad46ba330088682d314ffe340f943d49317642f93f5a8d1aa3519530d870dd3d72981c16d4ffea8dd5f6da8b77b57282fd"}}, @TCA_IPT_TARG={0x9b, 0x6, {0x1ac, 'raw\x00', 0x40, 0x8, "cf8e0e1408fe99fbb18b853fd7f21109614e74ac383e0daf18a93e78a90ca842b646d0b0caafeb39bb166f9c32de67c8d72f543bc71e984b64dd4d23dc201106877379c1abc9565b81e8d7f2bb9de43687cd620c4b159aea3988800e6f478017b0521f1aeb2ee08e95c985e7ab6927e104"}}]}, {0xd0, 0x6, "d739f558d2eb207852c7772577f03b170b8253bdaa123fd88aee74f6ad0dc23070c23d7957d25025665197970c671b5b54aa60e55edefe13ca29a204ebccbd68c2da5f386f8e09e8df77a9c5d2686f473ea6575c18c8c6882447a7d8ff07e4d9c95e06c13be84219960c2fcc7c656488ae13cdecc89108945d49dae141e3679a6b05e75ae73c0a31e79d74d51441eec9c090f16a6507ffc4824e0e1d37d54be0bcfbfacc6510a4f0e8d1ccf153646eb344a99380eff07972ad26577a97dc26b5a4a7a4901644ac2438c24ace"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x1d0, 0x17, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xab, 0x6, {0x4, 'nat\x00', 0x20, 0x20, "26bb815eaeb6d52575c38331d97d6fa60d17a8f58aea647ef2f958626e0082713c6fc84eda82dff5f084d0937dc84a1d74f3ad444e4a7d18c9cf70a35131fa27d7158cb1b859b90e1d068d56d6e1e5ef02cc50d71a949e4c3339ca698761a15349e631c17ae0c288a9fcc0185a979757fef892e34b67694c8dd9fc5688e709623a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xec, 0x6, "9c5cf2bc426e9684eb73b3cdb887b5d27ddbdf498a527fa9aad4cd63e12bc618df53c078cb057bb7821b6117004e8ce8a98f9d5cbb2c53191c6aff8d2594d5a3a1a09f454d8163626e1fb54faf4b88b2cf1f6bd8fc3c9beffdd33b6f0b8ed1d57daa9411737104d2fada99347ebc9182e85848645b5d54d445d66d8d8e456aeefaab2f9a015e73878af419b6e14530562befb1355921fbc304e6eec5cabef70172d88d3e900823a86368a4f25b0dad888b0de9fb2381208e28ad23bd1f741563c86672b4b5e0f8b92c6f55c2e652060f0d9803d8156a8933c18ff793e24f09c650541c31225e1f7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x1d8, 0x7, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x1, 0x10000000, 0x4b, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb2b3, 0x0, 0x3, 0x40, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x1ff, 0x2, 0x401, 0xed1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2118, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd1b, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2200, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a4d, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x78, 0x6, 0x10000000, 0x40, 0xfffffff9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x6ae, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x4, 0x8, 0x2, 0x4}}]}, {0xf6, 0x6, "9bbcf99868bd560c187a4d9686afe3db298a97504d357bc9dddca8880f93db03596e85bbe57f6a61072fecaa1624cbfa3a7a79facbea3bbb1e5134889b251c3ee22df134e6d63c027224207e9210d886a625806c5ef022e3579f06bf823081c6fe954ab1c6397e7b3195a594038e5ceace8736a7d037159526605446c67909b2365d7cbe190efba6df698b96e6772b0bbb646467964c51bbd623e5c4a2e18f1aa5aee88ce15970f7db3bc06799cb91b7cb32dcd85d50ab0c438cf479edb27d14ea20fd33e5841794414e98e377047bd8da8657bb6fef18a56025564babdee9d5343869dab367242262ed9fe8377bcd7c4ac3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x2d457324a5c749b3}}]}}, @TCA_RATE={0x6, 0x5, {0xf6, 0x6}}]}, 0x3a60}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000003f80)={{0x5, 0x208a935a40c5fceb, 0x0, 0x1, '\x00', 0x6}, 0x5, 0x10, 0x5, r9, 0x6, 0x1f, 'syz1\x00', &(0x7f0000000140)=['&*/:\x00', '\x00', 'cgroup\x00', 'simple\x00', '/\x00', 'sample\x00'], 0x1d, [], [0x2, 0xff, 0x2, 0x2]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000108000000000000000000eaff004fc957f21317bc87f5c01fe99e516c", @ANYBLOB], 0x3c}}, 0x0) [ 710.127959][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 710.151176][T20014] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 710.175023][T20014] device ip6gretap1 entered promiscuous mode [ 710.211955][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000f00", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 710.440936][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.467533][ T12] usb 4-1: new high-speed USB device number 85 using dummy_hcd 15:49:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00`\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400f000", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 710.858295][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.881982][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.918581][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 710.962460][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:49:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34002603", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 711.006287][ T12] usb 4-1: config 0 descriptor?? 15:49:36 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendto$inet(r0, &(0x7f0000000040)="ae45f8533d9badd39934e02758b5940093944789b5a066d29f2c7cb8482808969215ad48ae98a16e6620007910952a43089b4410987515d368f64c82cc9d254d689e27f4529820c599ce4c1ee4f52dc600"/91, 0x5b, 0x48c0, &(0x7f00000001c0)={0x2, 0x1, @rand_addr=0x4}, 0x10) [ 711.070118][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x5c) 15:49:36 executing program 2: unshare(0x40600) read$usbfs(0xffffffffffffffff, &(0x7f00000000c0)=""/198, 0xc6) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080), 0x0) ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) [ 711.213418][T20057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 711.235825][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.282913][T20057] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 711.335111][T20057] device ip6gretap1 entered promiscuous mode [ 711.377602][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 711.383785][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 711.440433][ T12] usb 4-1: USB disconnect, device number 85 [ 711.877414][ T12] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 712.267987][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.277880][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.297356][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.307247][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 712.337400][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.346906][ T12] usb 4-1: config 0 descriptor?? [ 712.365216][ T7509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.315448][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.387628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.396419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.404750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.413053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.421336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.429714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.437995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.507501][ T12] uclogic 0003:5543:006E.0033: failed retrieving string descriptor #200: -71 [ 713.523081][ T12] uclogic 0003:5543:006E.0033: failed retrieving pen parameters: -71 [ 713.559862][ T12] uclogic 0003:5543:006E.0033: failed probing pen v2 parameters: -71 [ 713.581524][ T12] uclogic 0003:5543:006E.0033: failed probing parameters: -71 [ 713.597442][ T12] uclogic: probe of 0003:5543:006E.0033 failed with error -71 [ 713.613188][ T12] usb 4-1: USB disconnect, device number 86 15:49:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 15:49:39 executing program 2: unshare(0x40600) read$usbfs(0xffffffffffffffff, &(0x7f00000000c0)=""/198, 0xc6) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080), 0x0) ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) 15:49:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000e", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:39 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendto$inet(r0, &(0x7f0000000040)="ae45f8533d9badd39934e02758b5940093944789b5a066d29f2c7cb8482808969215ad48ae98a16e6620007910952a43089b4410987515d368f64c82cc9d254d689e27f4529820c599ce4c1ee4f52dc600"/91, 0x5b, 0x48c0, &(0x7f00000001c0)={0x2, 0x1, @rand_addr=0x4}, 0x10) 15:49:39 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x60) 15:49:39 executing program 1: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0xffffffff, 0x81, 0xffff7fff, 0x7fff, 0xa, "963939d73b82d1818b0c18cd953bd76defda28"}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x80000000, @local, 0x8000}}, 0x0, 0x0, 0x29f, 0x0, 0xd0}, 0x9c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{r1, 0x4, 0x100000001, 0x0, 0x410, 0x9, 0x6, 0x5, 0x770, 0x81, 0x80, 0x5, 0x4, 0xb67, 0x7b}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000070d40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000070f40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}], 0xe0, "98b8d77550f840"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000060000)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "6b108fd640bb23"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061000)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3}], 0x1, "060c9cdc5c0dfb"}) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_vs_stats_percpu\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x8001, 0x8}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x6788, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='8', 0x1}], 0x1) r5 = dup(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x5, 0xfffffffa, 0x0, 'queue0\x00', 0x400}) 15:49:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="66b82f000f00d0c9f001d0c4c3e149a46d00000000028fe94096d4f30f1ef8b88a871c81ef66bafc0cb003ee66baa00066edc42fd1fb5c4bb2b266c16414e6e636f7460001000000", 0x48}], 0x1, 0x0, 0x0, 0x0) [ 714.069785][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:39 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000340)=0x10) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x5, 0x48000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0xae62}) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x48402, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0) io_submit(r3, 0x2, &(0x7f00000021c0)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, [], 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x800}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x6008048) [ 714.144051][T20102] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:49:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400c00e", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 714.185265][T20102] device ip6gretap1 entered promiscuous mode 15:49:39 executing program 1: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) madvise(&(0x7f00001a3000/0x4000)=nil, 0x4000, 0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x434f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x10000000000003}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0000f, 0x4, 0x0, 0x0, 0x2000000000002) get_mempolicy(&(0x7f0000000000), &(0x7f00000000c0), 0x3, &(0x7f0000394000/0x3000)=nil, 0x0) socketpair(0x22, 0x0, 0x0, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) 15:49:39 executing program 2: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c010020b7a2d4da314d4ee5c1ed61875696e8c177930e759dcfbdc90607e7", @ANYRES64, @ANYBLOB="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"], 0x15c}}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x83a4}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xa0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="2711a1ec5c133669f5e96dc3e50c9bb5f26361f6c73422dce70f2d3602941c80b0f8675a9f555c6077fbe6eda48a695caf", 0x31}, {&(0x7f0000000080)="0d484187465b53b7932eef7dfc45323eac00e93f04c1cf38f018e41cecf5376b0c7802de5f4835617e40b83fbe8f1beab8021344e7ac22356472f8e8e5dbfc727e6288115ad967", 0x47}, {&(0x7f0000000200)="d92503acff3f94f5", 0x8}], 0x3, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 714.437338][ T12] usb 4-1: new high-speed USB device number 87 using dummy_hcd 15:49:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000f", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 714.828093][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.867388][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.913646][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 714.944252][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.973242][ T12] usb 4-1: config 0 descriptor?? [ 715.348423][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 715.354499][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 715.397702][ T12] usb 4-1: USB disconnect, device number 87 [ 715.807214][ T12] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 716.208043][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.219071][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.229249][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 716.238395][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.247587][ T12] usb 4-1: config 0 descriptor?? [ 717.377153][ T12] uclogic 0003:5543:006E.0034: failed retrieving string descriptor #200: -71 [ 717.385996][ T12] uclogic 0003:5543:006E.0034: failed retrieving pen parameters: -71 [ 717.394568][ T12] uclogic 0003:5543:006E.0034: failed probing pen v2 parameters: -71 [ 717.403002][ T12] uclogic 0003:5543:006E.0034: failed probing parameters: -71 [ 717.410920][ T12] uclogic: probe of 0003:5543:006E.0034 failed with error -71 [ 717.421452][ T12] usb 4-1: USB disconnect, device number 88 [ 717.474530][T10286] net_ratelimit: 63 callbacks suppressed [ 717.474536][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 15:49:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl$TIOCGWINSZ(r1, 0x5413, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x90000) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000180)={0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 15:49:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000326", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd88, &(0x7f0000000040)}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x110, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xdf, 0xac, "09a4339216f92cce133e42d7d0f64227d13d9e7e29c7c173ebd018845c8eeb9ee99c30bdd5b407d799cfa847bb0d584ce1e649522b755590a33be31c7629c9b24b5e2bb729f5358056c04563b235a7d8965de50bbcea7bbb5e1ce14b4eb4309850d4c6595ed6ce17667458dae858e210680bff85fdc4f46c89892553e2393e8dad97059e8e5399244e12e915c6c4f6bd6ed3109e66c97cb291768021657f5e58d674f8fed63bdfdafbd237761ee250b1e58597a7bfd939710df52f990dc9174aab44e8c35a7ff13f81c270bf486d2223eda882fe08c679dc917487"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1c, 0x13, "ddbdf69e90974cc7509e66dbbd5c21fc6f5ab15b087e8903"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x40100) 15:49:43 executing program 2: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c010020b7a2d4da314d4ee5c1ed61875696e8c177930e759dcfbdc90607e7", @ANYRES64, @ANYBLOB="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"], 0x15c}}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x83a4}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xa0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="2711a1ec5c133669f5e96dc3e50c9bb5f26361f6c73422dce70f2d3602941c80b0f8675a9f555c6077fbe6eda48a695caf", 0x31}, {&(0x7f0000000080)="0d484187465b53b7932eef7dfc45323eac00e93f04c1cf38f018e41cecf5376b0c7802de5f4835617e40b83fbe8f1beab8021344e7ac22356472f8e8e5dbfc727e6288115ad967", 0x47}, {&(0x7f0000000200)="d92503acff3f94f5", 0x8}], 0x3, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15:49:43 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x68) [ 717.956669][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @broadcast}, {0x6}, 0x20, {0x2, 0x4e23, @private=0xa010101}, 'wg1\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) tgkill(0x0, r1, 0x22) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xcf8, 0x0, 0x120, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x842, 0x80, "3074fd35b073a87ad1b596696db8274c34e46395e016c6eafa4d84aeb2c0d7b9c1bd3ceb18fd42adb8667e4ac3d2deb94ef05212d2f089fd783a801bfeafb173e83e0255f24f693fc76b045f9a194fb79d85eeb223f1a5278907f52b1bea3a8f4a85569d7090c3105eb41f8c6fa1b6b0b9311c468f9b3fe016dd4af314866ab858494b3d84849692e9d06a01e8c6dbc42ab13ae0799cc7caaef36fc2e5f8701569401a00623fef413bee4cd15cf703997690bbc1267173f0e9d30f3c27fb1c510f557e810fd28f273c3c86f3e7c82e9fb3b7a3018cddec93acb18c0b4aeba41f33fc81df1ccc3f3cee778e2fbae4e0bfb93c2ecc1f42ada9ebd66f132170a6826dbaa9a94275dda1b924ff8790d4e2f6381c12e7d1e0317d2ed98c2f3815ffe25a8d30457c2969f2604fde27e996dd4de38a6f884a44b46ba2ede7d50b093590eff5c8e96fb8fb45e7f3f5de37dffbff2819d7532ab8a9c71595836bd4f3f33710809556be2276a3ec7e747fb5403e1dc988130434752e5163f7d86e9e59b77d75b0ef8b19a03aa5a99290dc6a94a7d038b6a122b27d836ccdc8aa66d4203cfaa67a631f65104487a3e7657db814917ddf808bc6444a0349c12c2dcd94cdb64c0699b3a869a8707cb663b0a1b0afebd61d05db6334ed8f86c6cdd3d2bb3867947b7114c5fdfb389deeb52f160f0e790aeb9dbb2a3a1f46e4ede44364fd65012fe8b1cdc517d060ddf0c36b2172ef6209fa87112fddfaa8b153597e9c003f1b5c6fe5e5212df4fc13b6a90c85d609ff87e9f7c77bcbd0eb4cf6cc33345ccc2c85a1a6057da2dd365e0ca1d014a4bd80ae12c7fa9f48e7a95ed284b3b13cd18a2b73264e88c7d2327a7dabfff024fb40281b7415766d850d70f0702d263f8cfaffda06742b017623e6b8e2429c407c13056ec8c2c17ba39db2df29ad8e8c1b088f0e3a0c93721bbd4ad8d227457f23d8da80952d86100b38ce8f99138067f3a3dc03361dfb57085b61fee1b89d6f4a7e707d23df4344a889875a0156c4271b67441f694360e8ca7f795631cfbb9897fc9146b5518d61c4c5e6915e78140e7f24e24a069d1d6a296181d239b5a05b00fe77bfa373f3378bc04ab1ff00921c8f40715f780821026c22e5edd94d66652edfcf1412e772ff1987a9c442b457707b2932846bd6e4480b0cd9c385fced183d8ce6c1d07224bf508722357cb4f1844b3fed68bb703c1426896383d10b43861fc7c348860d2068f84f60540adb380524de9ab64bb991a0d6776dc0ce9716bd1cdadd894a8ebe70b6e2c6d49fb74da5750d02fa37b1327a77e985a6d508e56e871a30a8e68e364c1be3d3e05b3dfb39735be85b15ebeba987ae244d0318c8c0a6106d64173a5271855abe58d74f57f626c8f3216caef9e37e4e3319eaddc159ceec9ffac18bf5dd6b374d410197a4dcd592a30ca9d4b79ea64c69cdf6db3028a0fd0462d5cde2686d7322ad0007496d124d0511734cdc9ca80877ad61a0b14208655e773adc3c0e92f2e9b2c0ab089eccc35a4029d7e46d37b7765ef459c466e98515cf3f9611038eeff9be07e9f9521a6c74988f968af5202e77e6a09e27e0e6553a747aeb4d37bcd7dcbc026e0c83a27b37a92da73b14650b050a618fb14105acc7927ec785628b236e3af303f3e3e9a27b848fc7319ba714ef67a4b45b0b252420c9f4d6fa1924d6bb09598744b7f8b38d57f66e55087e96607fdf4c62f7799c775d718b5971b7f79f947a295855bba5ea73d8433cc9956c12a19b748fd40a2b36bce32e2a9c80312e5dc77969dc615efbda0755fe119bb50f1f694617c8b4b012383930e5c2d675db03e1764323cc7c013a80d124eac3cf7104669e7694eb83ca28f0b69185262f62780426c8cda94c85c8ba9ac4078e0b481a817c449f9b5e0a1092b639a9331d48d4d70867438bccd01c6d5d003a650fc23373a845fa51922b180b83cd16b56adf77e633bab72158b4b37c9bedb95aa1c4b60a68d33b6372904a909fa6559c0ed048bfb8002c6b37303369620f906f65e6f336e11c316fcf634cf7b3878122c94a6c1c9539a74b138cdb3931ea21a387598d159d0e647fbcfb136516d74e58dfea6a5a185186d51453c216022b2fe824b76d2b90e7742f992f340296b3f2ac5b40b258e81a05e10c256d6d15a8a18506d80465ade8f1f69206e1693da119f46e966b5d657f8b239d0b272425da6c71fac2de1ba937e9343ae01874d343aa4482274953bd959c5cdfa437d6ea990fd459484d56c57f97b949474653af782f3edb4d49b2265819313e6bb3e54a55e0f59deb3faf073107418f2fa5ea4fc66ead88bdc33abc15584756a39f64e820751f2c1840179775c31c80cfef8fb9aa80ac435485611207a0febeb3b921740dde0c126dc4a1831feab181076fc97a669e7f6924eedc3033369de467f3e282a8a8af99b0ea0a447620fc858807c78769a7f87f445cfb2121b0dfb66529bba02b3c5a5ee94bfa0b5a57329da6d18a9c65b752575eab701f74d116ab1dbefc33325a079bc2e466b4f43f2901d51a43682fcc77400f318baa65e1a484eafd50bf4620b054ed76b7bf5cf9289afa7cb37d969164108f3c0874fef28f1eaeb95bb19cd8165724c2bde2929fc7939b886601861a4102b610c7c0a1e1f5b4244f9b52c113e54efab690c9ee0dca4377a5e4cb0c2b55d1a0ccb5f22bfe8442c9b0770f398a3d1f8c2361b05101db127e9355f66d46a481a51c67e0641f10a248898a54c0388bf55ed601a6b2a2fe08ce45705b1d41fb55e644cd09c6abb6829d74cdc9b4ccae429c9796222b85c8c9fc7376af985e128f10961dc5fb9878b03805a3b441c349bd354ec4ce5c84227000f6c962f5c74b2aa7a804fa38c58e62d010349a2cd41d394a958c8d51e4a17af7147284b554245107df7a9f5b3f53b6dd0f4c2e89d254d1cd24cf9a0ee49da0974f14270d9fff9abf488e0945320d"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_AKM_SUITES={0x24, 0x4c, [0xfac0f, 0xfac10, 0xfac0c, 0xfac02, 0xfac08, 0xfac10, 0xfac09, 0xfac08]}, @NL80211_ATTR_BEACON_HEAD={0x460, 0xe, "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"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0xcf8}}, 0x8010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x4000) [ 718.024239][T20193] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 718.055262][T20193] device ip6gretap1 entered promiscuous mode 15:49:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00`', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:43 executing program 2: getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x1, 0x2, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x400) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f00000002c0)={0x9}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x48094) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805, 0x0) poll(0x0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x578, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x0, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip6erspan0\x00'}]}]}, 0x578}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) pipe(&(0x7f0000000040)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1000000c8) sendfile(r0, r0, 0x0, 0x24001a0d) 15:49:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x22, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffff4d, 0xc0010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1000}, 0x800, 0x2, 0x7, 0x5, 0x9, 0x7, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e28000026010511d25a80648c63940d0424fc60100016400a000263e3a465feaaf50288aab81189246fbf000200000037153e370a00018004000000d1bdf679ed52e206393d09f9db3dae7b9b0868e5a68ea7713e1c75ab2e15923d2aa4e8b2b30a7dc94dbf0efb39df9ec059ba10cd38eb9fc5b54548b709a114ca45bf892f09b359f36413dd4236e4715a69f8ba7c1a02dfb8b71cc417862355e653459ec5e7b778519d5d1c5493a03d4faaf44be0920b4fc0029526a134d4a764814503b500"/207, 0xcf}], 0x1}, 0x24040044) gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x6) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x6611, 0x0) r4 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)="fca9449bcc6c434badbc4238bde9697f267d05eb41934ebf9e066de031a03f1a0b2882b8b8ead7a5bad109eec8b4d4f77bb803dd60326326fbb98885dc2cdba331bf315d15ae5ee0eb4ae2cd8488815073bfe0f070eb59c4ec3fd612cec3e70da89399b040af4ba7ca33088c", 0x6c, r4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000240)={0x0, 0x70, 0x3f, 0x0, 0x4, 0x80, 0x0, 0xfffffffffffffffc, 0xe104, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x8, 0x3f, 0x0, 0x7, 0x1, 0x911e, 0x80}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 15:49:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000ec0", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 718.287080][ T12] usb 4-1: new high-speed USB device number 89 using dummy_hcd 15:49:43 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) write$binfmt_aout(r1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80044df9, 0x0) r3 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x9) sched_setscheduler(0x0, 0x5, 0x0) [ 718.509421][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.678413][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.725789][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.786792][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 718.823395][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.862122][ T12] usb 4-1: config 0 descriptor?? [ 718.886357][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.203161][ T28] audit: type=1800 audit(1598802584.472:41): pid=20235 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15705 res=0 errno=0 [ 719.277061][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 719.283316][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 719.294370][ T12] usb 4-1: USB disconnect, device number 89 [ 719.552956][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.716942][ T12] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 720.126985][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.138126][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.149219][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 720.158534][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.168797][ T12] usb 4-1: config 0 descriptor?? [ 720.596917][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.669687][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.308178][ T12] uclogic 0003:5543:006E.0035: failed retrieving string descriptor #200: -71 [ 721.317855][ T12] uclogic 0003:5543:006E.0035: failed retrieving pen parameters: -71 [ 721.325947][ T12] uclogic 0003:5543:006E.0035: failed probing pen v2 parameters: -71 [ 721.346787][ T12] uclogic 0003:5543:006E.0035: failed probing parameters: -71 [ 721.354391][ T12] uclogic: probe of 0003:5543:006E.0035 failed with error -71 [ 721.364687][ T12] usb 4-1: USB disconnect, device number 90 [ 721.633393][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:49:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x98, r1, 0x309, 0x0, 0x25dfdbfc, {0x26}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15:49:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:47 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x6c) 15:49:47 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) write$binfmt_aout(r1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80044df9, 0x0) r3 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x9) sched_setscheduler(0x0, 0x5, 0x0) 15:49:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) write$binfmt_aout(r1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80044df9, 0x0) r3 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x9) sched_setscheduler(0x0, 0x5, 0x0) [ 721.909433][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 721.951110][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:47 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000001280)="00f0258bad08bcccc75e955305631362151d35bf818609083cd52118fedb95d18f7f0120461f667486f534649e56c7a24ea400559bd281398aa73ea8161e68df90bf95949e9bf02bbe51e340d68cf715eddd82cd60ac73ec", 0x58, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) sendfile(r3, r2, 0x0, 0x265) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000380)=0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x50000000000443) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f00000011c0)={0xa0, 0x960, 0x190, 0x8220e680046525c8, 0xee29, 0x81, 0x2, 0x0, {0x80, 0x200, 0x1}, {0xff, 0x100}, {0x0, 0x5, 0x1}, {0x40, 0x7c}, 0x1, 0x2, 0x0, 0xfffff801, 0x0, 0x817, 0xd9ef, 0x5, 0x800, 0xe7, 0x2, 0x9, 0x8, 0x2, 0x3, 0x8}) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000000c0)=0x7) 15:49:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00@', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 722.032429][T20277] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:49:47 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0/bus\x00', 0x2000000) socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x655844dc, 0x200, 0x3, 0x2, 0x1, [0xc8, 0x2328, 0x80000001, 0x1]}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 15:49:47 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) write$binfmt_aout(r1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x80044df9, 0x0) r3 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x9) sched_setscheduler(0x0, 0x5, 0x0) [ 722.075076][T20277] device ip6gretap1 entered promiscuous mode [ 722.246808][ T8181] usb 4-1: new high-speed USB device number 91 using dummy_hcd 15:49:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000003", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r1 = accept4$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @initdev}, &(0x7f0000000700)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="0500020008018110"], &(0x7f0000000780)=0xc) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8828, 0x10000}, 0x0, 0x10000, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x80f, 0x1fd) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10c00, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000100)={0x1, {0x2, 0x1, 0x1, 0x8, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000180)={{0x1, 0x1, 0x633, 0x0, 0x7}, 0x6, 0x1}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x200040, 0x0) fchmod(r5, 0x2) times(&(0x7f0000000080)) [ 722.617484][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.646815][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.676916][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 722.699951][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.730453][ T8181] usb 4-1: config 0 descriptor?? [ 722.825539][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.096818][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 723.102976][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 723.146199][ T8181] usb 4-1: USB disconnect, device number 91 [ 723.586748][ T8181] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 723.877007][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.948442][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.959644][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.969728][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 723.978985][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.988627][ T8181] usb 4-1: config 0 descriptor?? [ 724.907013][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.986876][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.126645][ T8181] uclogic 0003:5543:006E.0036: failed retrieving string descriptor #200: -71 [ 725.135631][ T8181] uclogic 0003:5543:006E.0036: failed retrieving pen parameters: -71 [ 725.151997][ T8181] uclogic 0003:5543:006E.0036: failed probing pen v2 parameters: -71 [ 725.162780][ T8181] uclogic 0003:5543:006E.0036: failed probing parameters: -71 [ 725.175266][ T8181] uclogic: probe of 0003:5543:006E.0036 failed with error -71 [ 725.185618][ T8181] usb 4-1: USB disconnect, device number 92 15:49:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:50 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="c02fd2b3110ae7b8f3b473bbf1f12f47db6f27a3f61f110b6e91c825281e6002b2fa9d30f39f7c3ca2e5552434f015dcd5ce668ce74221d26e6ea7d3451a306e9cb15a6c7754e1d5d30676fca4a18f4ac0e7c1a42d521e4838cf07de41f9699839caa935403ebeaeef399a9853e9ec95af5ab4915ea8f62e44759d6d2f8d", 0x7e}, {&(0x7f0000000580)}], 0x2}, 0x4008880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x3}, 0x0, 0x0, &(0x7f0000000280)={0x2, 0xf, 0x7, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x1}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x10\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') recvmsg(0xffffffffffffffff, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)="2f491a0a97e1b5b5204f0b8d037838ed58463e17dbc3d47e9029393f8642db4e442bb6174940e8d8da5337d9ed1dcb29ca541c0ba2f0ef16ad71cbff0e475f2cf90f1507ef3e15276dba68aa4292ee3db0e9535f9aedb1dc3ee1c82b6eb313392cfdabe630c032c4811adfa0dac091e2fa85c783195fe842671999d975cf9190b9ac6f0e80f75a805d2487af1f56285f1d52fabdfef0f5790888001588854adf70946d555d341c24b3cf224345f799f14d4bb3068e1362de5d4ed03087e904e0f8133b529629e8776a6f225d0ad07fa2bf7bacd23f6951af56d1df8ae99a615a234075d86097e92ad94208724bce5f405d03ae1f22451ec2285c5fd114c42cbbc1a67a5a857f3f132f2140bbd2c052a07c5dba10788078307c9873cccef18e252ba1fda323b163f92a259cddf2ed4839677ea0c0843ec0e3ec134aa2effa6912e3b162a7878e382995c146c5096a464e9ad967e58c71a97b419598830685897df4f6e07aee0ebe59dcfee430e76e85fdcdbc82b034b3ae58c2072fe7589c7d2173084746c16dc6531e3b05736a7383d57dade42175751813918d003a712fa464729a913fb5a56324832ae5fced6a0923df5d22be071f7e387999b47a6b6f53a928f53aadd02a90ba816da88cc6", 0x1cd}, {&(0x7f0000000700)="4aa606d3b704b2225678d5582407141e397750d0346f9ebccc6adea0a575e4918534b6f8bdd0cd42abe8baaf814b2b53917bb191be9645ac30281d2df181f8a2ffd8a2121f93d2c97d48d288307c172223298bc2b0cea01a51f750a9e914e838be89b299732cc56cb027ff564d0c8e6ed681772786471174bc3690492b8371538400ab12878ab3b830d04496bf9063671dc69002581383866cb33a0f79847b6d716cfb3f17fef7dee63a323c42", 0xad}], 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="100300000000000000010000070000008e7c9d43960000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aae0000002000000001100000000000000000000000100000080000000000000001c000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff000000005c00000000000000000000000700000094040100442492a1e000000200007fffffffffff00008000ac1e00010000004000000000000001014424ed810000000000000400ac1414aa00000006ac1414bb00000004e000000200000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f00000100000000110000000000000000000000010000004a0000000000000010000000000000000000000007000000110000000000000000000000010000000400000000000000"], 0x128}, 0x40004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4a510, 0xfffffffffffffffe, 0x0, 0x8, 0xedad}, 0x0, 0x6, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xf0) 15:49:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc70e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000089a0402f0400000000001090224000100000000090400000103010000092100199c761fa94c4f9139f31e"], 0x0) syz_usb_ep_read(r1, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x8a, &(0x7f0000000100)="6b271aba585103eab9b10000000000002ee7761b08fdadcf2b8af2226ae828318300535746a4a0b8b0fb9481f50e3fb4aed7136f1c41db9e731789f0ae69f98fdc24c0c33b18515d30b9c4c48b2d9f70dd1f6f1ef42649d2df61329e0ad657656c72573d8aa6c0b629e4b2c6bb99abab4b7592e0c4947db7df07173200"/138) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0xa, &(0x7f0000000300)=[{0x8000, 0x3, 0x4, 0x400}, {0x0, 0x0, 0x7, 0x1}, {0x6, 0x5, 0x17, 0x3f}, {0xc3, 0x8, 0x4}, {0x0, 0x1, 0x1, 0x7}, {0xe4, 0x81, 0x0, 0x10000}, {0xfff, 0x4, 0x0, 0xb5a}, {0x1, 0xf2, 0x0, 0xe1}, {0x20, 0x0, 0xab, 0x3}, {0x101, 0x81, 0xdd, 0xf8b}]}) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000240)={0x1, 0x8, &(0x7f0000000040)=[0x3, 0x681, 0x6, 0x3, 0xffff, 0x6d, 0x7, 0x10], &(0x7f0000000080)=[0x100, 0x8], &(0x7f00000001c0)=[0x4], &(0x7f0000000200)=[0xea, 0x6, 0x100, 0x2e, 0x8341, 0x401, 0x5, 0x471]}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000002c0)=0x10) 15:49:50 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x74) 15:49:50 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10200, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "3fc8d0e2471e7386", "b5b69e2274830310296813e4ef9d268dcf1b6378bf7688a13987ce1a4c3a68c3", "651db228", "5fcdb2d2bfc1b87a"}, 0x38) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000000500)={0xfffffffffffffcae, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f00000000c0)={0x2001, 0xda5, 0x5, 0xfffffff9}) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000000)={0x1, 0x100}) 15:49:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:49:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 725.698150][T20359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 725.744013][T20359] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 725.761455][T20359] device ip6gretap1 entered promiscuous mode 15:49:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 725.936513][ T8181] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 725.951513][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 726.016565][T10286] usb 4-1: new high-speed USB device number 93 using dummy_hcd 15:49:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 726.186550][ T8181] usb 5-1: Using ep0 maxpacket: 8 15:49:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:51 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@delsa={0x28, 0x11, 0x313, 0x0, 0x0, {@in6=@ipv4={[], [], @remote}, 0x0, 0xa, 0xff}}, 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) [ 726.306727][ T8181] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.332403][ T8181] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.40 15:49:51 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x78) [ 726.386785][ T8181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.406831][ T8181] usb 5-1: config 0 descriptor?? [ 726.487369][T10286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.503943][T20408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 726.513862][T10286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.539911][T10286] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 726.553335][T20408] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 726.567708][T20408] device ip6gretap1 entered promiscuous mode [ 726.574080][T10286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.593741][T10286] usb 4-1: config 0 descriptor?? [ 726.656691][T18992] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 726.887308][T20354] udc-core: couldn't find an available UDC or it's busy [ 726.894314][T20354] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.976733][T10286] usbhid 4-1:0.0: can't add hid device: -71 [ 726.982908][T10286] usbhid: probe of 4-1:0.0 failed with error -71 [ 727.001815][T10286] usb 4-1: USB disconnect, device number 93 [ 727.024078][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.046748][T18992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.069165][T18992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.085861][T18992] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 727.096558][T18992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.114481][T18992] usb 2-1: config 0 descriptor?? [ 727.273704][ T28] audit: type=1326 audit(1598802592.543:42): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=20351 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 727.324311][T20435] Unknown ioctl 17925 [ 727.476570][T18992] usbhid 2-1:0.0: can't add hid device: -71 [ 727.482859][T18992] usbhid: probe of 2-1:0.0 failed with error -71 [ 727.496499][T10286] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 727.504332][T18992] usb 2-1: USB disconnect, device number 4 [ 727.886528][T10286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.897569][T10286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.907674][T10286] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 727.917286][T10286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.932209][T10286] usb 4-1: config 0 descriptor?? [ 727.996598][T18992] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 728.027276][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.035428][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.386611][T18992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.402161][T18992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.414353][T18992] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 728.430893][T18992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.444942][T18992] usb 2-1: config 0 descriptor?? 15:49:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:53 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x7a) 15:49:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) [ 728.719627][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 728.735185][T20461] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 728.744499][T20461] device ip6gretap1 entered promiscuous mode [ 728.756594][ T8181] usbhid 5-1:0.0: can't add hid device: -71 [ 728.762965][ T8181] usbhid: probe of 5-1:0.0 failed with error -71 [ 728.797289][ T8181] usb 5-1: USB disconnect, device number 17 [ 729.056351][T10286] uclogic 0003:5543:006E.0037: failed retrieving string descriptor #200: -71 [ 729.066066][T10286] uclogic 0003:5543:006E.0037: failed retrieving pen parameters: -71 [ 729.140371][T10286] uclogic 0003:5543:006E.0037: failed probing pen v2 parameters: -71 [ 729.152979][T10286] uclogic 0003:5543:006E.0037: failed probing parameters: -71 [ 729.186309][T10286] uclogic: probe of 0003:5543:006E.0037 failed with error -71 [ 729.216617][T10286] usb 4-1: USB disconnect, device number 94 [ 729.267054][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:54 executing program 2: shmget(0x2, 0x10000, 0x8, &(0x7f0000fef000/0x10000)=nil) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x84100) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000001c0)={0x2, 0xffffffff}) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 15:49:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 15:49:54 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x8e) 15:49:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 729.577289][T18992] uclogic 0003:5543:006E.0038: failed retrieving string descriptor #200: -71 [ 729.586123][T18992] uclogic 0003:5543:006E.0038: failed retrieving pen parameters: -71 [ 729.639065][T20503] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 729.651179][T18992] uclogic 0003:5543:006E.0038: failed probing pen v2 parameters: -71 [ 729.687883][T18992] uclogic 0003:5543:006E.0038: failed probing parameters: -71 [ 729.724377][T20503] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 729.734098][T20509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.742974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.770822][T18992] uclogic: probe of 0003:5543:006E.0038 failed with error -71 [ 729.793633][T18992] usb 2-1: USB disconnect, device number 5 [ 729.815099][T20503] device ip6gretap1 entered promiscuous mode [ 729.981438][T20499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.982514][ T345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.983019][T20499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.991453][T20509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.991718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.066325][ T8181] usb 4-1: new high-speed USB device number 95 using dummy_hcd 15:49:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440)={0x2400, {"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", 0x597}}, 0x1006) 15:49:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:55 executing program 2: shmget(0x2, 0x10000, 0x8, &(0x7f0000fef000/0x10000)=nil) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x84100) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000001c0)={0x2, 0xffffffff}) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 15:49:55 executing program 2: shmget(0x2, 0x10000, 0x8, &(0x7f0000fef000/0x10000)=nil) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x84100) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000001c0)={0x2, 0xffffffff}) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 15:49:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 730.457050][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.507860][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:49:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b716304b717100000078b500006f000000000000000700002002000000d90f9173c5359500"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffea2}, 0x48) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc040) [ 730.507901][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 730.507921][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:49:55 executing program 2: shmget(0x2, 0x10000, 0x8, &(0x7f0000fef000/0x10000)=nil) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x84100) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000001c0)={0x2, 0xffffffff}) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) [ 730.515108][ T8181] usb 4-1: config 0 descriptor?? 15:49:56 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x9a) 15:49:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x4e20, @remote}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000140)="5cdd30c35acb6533ea2752ac768f7f3e0a6633c9f7b90800", 0x0, 0x4, 0x0, 0x28, 0x0, 0x0, 0x0}, 0x40) 15:49:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 730.847487][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 730.866408][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 730.866551][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 15:49:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x5a) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000100)) tkill(r0, 0x37) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x3, 0x80000001, 0x9, 0x1647, 0x7, 0x3, 0x2112, 0x1, 0x4}) [ 730.869754][ T8181] usb 4-1: USB disconnect, device number 95 [ 730.882703][T20559] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 730.882741][T20559] device ip6gretap1 entered promiscuous mode [ 731.336199][ T8181] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 731.737062][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.753921][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.784477][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 731.805122][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.824991][ T8181] usb 4-1: config 0 descriptor?? [ 732.966208][ T8181] uclogic 0003:5543:006E.0039: failed retrieving string descriptor #200: -71 [ 732.981857][ T8181] uclogic 0003:5543:006E.0039: failed retrieving pen parameters: -71 [ 733.024078][ T8181] uclogic 0003:5543:006E.0039: failed probing pen v2 parameters: -71 [ 733.049178][ T8181] uclogic 0003:5543:006E.0039: failed probing parameters: -71 [ 733.066169][ T8181] uclogic: probe of 0003:5543:006E.0039 failed with error -71 [ 733.078922][ T8181] usb 4-1: USB disconnect, device number 96 15:49:58 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xc0) 15:49:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0xa, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) 15:49:58 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x800004, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000300)=""/90, 0x5a}) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0x3f) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x40000) [ 733.591581][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 733.675026][T20615] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:49:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 733.734469][T20615] device ip6gretap1 entered promiscuous mode [ 733.736414][ T28] audit: type=1804 audit(1598802599.003:43): pid=20623 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/367/file0/bus" dev="sda1" ino=15759 res=1 errno=0 [ 733.814967][ T7379] net_ratelimit: 23 callbacks suppressed [ 733.815000][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffff2, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x2}}}}}}]}, 0x48}}, 0x0) [ 733.861477][ T28] audit: type=1804 audit(1598802599.103:44): pid=20626 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/367/file0/file0/bus" dev="sda1" ino=15705 res=1 errno=0 15:49:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34007fff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 734.106220][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:49:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[], 0xfffffecc) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x90, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:setrans_exec_t:s0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0xc010}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:49:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34009eff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x3}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0xfff) 15:49:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400f0ff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 734.506299][T20634] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:49:59 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xf0) [ 734.570319][T20638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:49:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:49:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffff2, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x2}}}}}}]}, 0x48}}, 0x0) [ 734.684980][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 734.729422][T20664] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 734.757951][T20664] device ip6gretap1 entered promiscuous mode [ 734.775916][T18992] usb 4-1: new high-speed USB device number 97 using dummy_hcd 15:50:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000080)='X', 0x20000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15:50:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 734.856257][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:00 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/219) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000600)={r2, 0x1}) ioctl$VT_RELDISP(r0, 0x5605) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x4c53, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x10, r3, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac6fc8e3c001c8b06de1ca4086abe29e13a4e6666329cdf4ec5b0e8c967fcba79efc", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYBLOB="bc01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004003f00fcc7f7ffffff8e8c0008f10000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="480202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f", @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f6400000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f46000000000000000000050003000e00000008000400050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff01000008", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2c020280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400c9b9", @ANYRES32=0x0, @ANYBLOB="7c0102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040001", @ANYRES32=0x0, @ANYBLOB], 0xccc}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) [ 735.146754][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.168870][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.208820][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 15:50:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 735.270235][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.349668][T18992] usb 4-1: config 0 descriptor?? [ 735.599750][T20673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 735.726150][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 735.732232][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 735.757388][T18992] usb 4-1: USB disconnect, device number 97 [ 735.874233][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.225861][T18992] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 736.586727][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.597708][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.608784][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 736.619508][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.632516][T18992] usb 4-1: config 0 descriptor?? [ 736.916509][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.146223][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.952108][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/219) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000600)={r2, 0x1}) ioctl$VT_RELDISP(r0, 0x5605) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x4c53, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x10, r3, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac6fc8e3c001c8b06de1ca4086abe29e13a4e6666329cdf4ec5b0e8c967fcba79efc", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYBLOB="bc01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004003f00fcc7f7ffffff8e8c0008f10000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="480202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f", @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f6400000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f46000000000000000000050003000e00000008000400050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff01000008", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2c020280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400c9b9", @ANYRES32=0x0, @ANYBLOB="7c0102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040001", @ANYRES32=0x0, @ANYBLOB], 0xccc}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) 15:50:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffff2, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x2}}}}}}]}, 0x48}}, 0x0) 15:50:04 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) [ 738.986173][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/219) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000600)={r2, 0x1}) ioctl$VT_RELDISP(r0, 0x5605) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x4c53, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x10, r3, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac6fc8e3c001c8b06de1ca4086abe29e13a4e6666329cdf4ec5b0e8c967fcba79efc", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYBLOB="bc01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004003f00fcc7f7ffffff8e8c0008f10000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="480202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f", @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f6400000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f46000000000000000000050003000e00000008000400050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff01000008", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2c020280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400c9b9", @ANYRES32=0x0, @ANYBLOB="7c0102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040001", @ANYRES32=0x0, @ANYBLOB], 0xccc}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) 15:50:04 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc517, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xea, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x400, 0x4, 0x1, {0x22, 0xc81}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7f, 0x5, 0x0, 0xff, 0x6}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0x7, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x8, 0x8}]}, 0x3, [{0x3d, &(0x7f00000001c0)=@string={0x3d, 0x3, "7d56d6b928470011d24676161a679196e3d121f51ded590cc191c7ecf104b23a33ee3031a700e78b0cb7f6b92ce0ec1f72851d1193074117d43e47"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x809}}, {0x34, &(0x7f0000000240)=@string={0x34, 0x3, "83686dd72c85ecf06f0369ae9018594c6c9e19137d6a377fc586728445c4781bb4dc9799a8a3f7c56e92e0bc25ba4549a10b"}}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_read(r0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) [ 739.050841][T18992] uclogic 0003:5543:006E.003A: failed retrieving string descriptor #100: -71 [ 739.078699][T18992] uclogic 0003:5543:006E.003A: failed retrieving pen parameters: -71 [ 739.110944][T20736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 739.163333][T18992] uclogic 0003:5543:006E.003A: failed probing pen v1 parameters: -71 [ 739.250578][T18992] uclogic 0003:5543:006E.003A: failed probing parameters: -71 [ 739.264709][T20736] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:50:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 739.321694][T18992] uclogic: probe of 0003:5543:006E.003A failed with error -71 [ 739.344964][T20736] device ip6gretap1 entered promiscuous mode 15:50:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/219) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000600)={r2, 0x1}) ioctl$VT_RELDISP(r0, 0x5605) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x4c53, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x10, r3, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac6fc8e3c001c8b06de1ca4086abe29e13a4e6666329cdf4ec5b0e8c967fcba79efc", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYBLOB="bc01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004003f00fcc7f7ffffff8e8c0008f10000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="480202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f", @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f6400000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f46000000000000000000050003000e00000008000400050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff01000008", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2c020280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400c9b9", @ANYRES32=0x0, @ANYBLOB="7c0102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040001", @ANYRES32=0x0, @ANYBLOB], 0xccc}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) [ 739.402906][T18992] usb 4-1: USB disconnect, device number 98 15:50:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) prctl$PR_SET_FP_MODE(0x2d, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') fstat(0xffffffffffffffff, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'raw\x00'}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f00000006c0)=""/208, 0xd0}], 0x9, &(0x7f00000008c0)=""/180, 0xb4}, 0x20) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000f40), &(0x7f0000000f80)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000980)='westwood\x00', 0x9) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80042407, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) write$binfmt_elf64(r0, &(0x7f0000002940)=ANY=[], 0x5af) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480541ba7860ac5cf65ac618ded8974895abeaf4b4831cf922b3f1e0b02bd67aa03059bbecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ptype\x00') [ 739.681119][T20768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.694855][T20768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.705212][T20768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 739.739579][T20765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.758465][T20765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.785630][T18992] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 739.829265][T20765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.858969][T20765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/219) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000600)={r2, 0x1}) ioctl$VT_RELDISP(r0, 0x5605) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x4c53, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x10, r3, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac6fc8e3c001c8b06de1ca4086abe29e13a4e6666329cdf4ec5b0e8c967fcba79efc", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYBLOB="bc01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004003f00fcc7f7ffffff8e8c0008f10000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="480202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f", @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f6400000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f46000000000000000000050003000e00000008000400050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff01000008", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2c020280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400c9b9", @ANYRES32=0x0, @ANYBLOB="7c0102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040001", @ANYRES32=0x0, @ANYBLOB], 0xccc}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x200000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) [ 739.876793][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.884977][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 740.166907][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.191554][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.232302][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 15:50:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 740.281268][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.326377][T18992] usb 4-1: config 0 descriptor?? 15:50:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 740.401353][T20739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffff2, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x2}}}}}}]}, 0x48}}, 0x0) [ 740.593030][T20742] udc-core: couldn't find an available UDC or it's busy [ 740.607971][T20742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 740.632814][T20801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 740.645054][T20742] udc-core: couldn't find an available UDC or it's busy [ 740.679618][T20742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:50:06 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x10c) 15:50:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) prctl$PR_SET_FP_MODE(0x2d, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') fstat(0xffffffffffffffff, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'raw\x00'}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f00000006c0)=""/208, 0xd0}], 0x9, &(0x7f00000008c0)=""/180, 0xb4}, 0x20) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000f40), &(0x7f0000000f80)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000980)='westwood\x00', 0x9) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80042407, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) write$binfmt_elf64(r0, &(0x7f0000002940)=ANY=[], 0x5af) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480541ba7860ac5cf65ac618ded8974895abeaf4b4831cf922b3f1e0b02bd67aa03059bbecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ptype\x00') [ 740.831122][T20811] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 740.853906][T20811] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 740.882720][T20811] device ip6gretap1 entered promiscuous mode [ 740.902224][T20742] udc-core: couldn't find an available UDC or it's busy [ 740.970754][T20742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.106764][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 741.114206][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 741.129295][T18992] usb 4-1: USB disconnect, device number 99 [ 741.805492][T20233] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 742.205613][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.216876][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.227935][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 742.237717][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.251203][T20233] usb 4-1: config 0 descriptor?? 15:50:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_read(r2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:50:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) llistxattr(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = socket(0x0, 0x803, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xfe4a, 0x0, 0x1, {0x22, 0x128}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6d, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x0, 0xae, 0x10, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0xbe, &(0x7f0000000300)=@string={0xbe, 0x3, "d708611a508a0f614baa0eb3daa8646cc24a2a1ddd2fd82a2e48ce298a29f62ee9ae3b7358221512d25b0bcb0c8225ae7deb0be9316f1281255ea49cf31a0b95ef05025bcf3592371b5bdec7dacfdeb78381cf7bfe338e70af6430ed528e945fc04f1b4d33b83ec10ed1f89576b19cd9d85712348b0c9163aa4bb117da649915d33c2b5954c328ea0d21afe929c6692852ba1efe615f6dc1ea4aa8f4071459e74cae1979e1fda6d09893e8687effc75658e90e5fff765e489c4d8e78"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x429}}]}) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) fchmodat(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 15:50:07 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="011a1f119727f927d3b116f7e5efcec0f96420d28caa6fc99fff19887a9b88691794b7a2756c2cdb7eb8f8205022350087dbc8883502ba70df64767bb7547176eed37e73ff3f2817cb7dbe82c38782eb8b9b88dad7e471945766f13465f56411307373ab2eb0a1ca15a9f15dd5e14c21881aa02d25957349cb1a47b285f9f86e7b3962c729d3df25e92e28261f4af5f65f373fce81e38b0b889422af6ac36c8fadf141c63ef8c0add53c3d61b480e8e3f0d69c5b3a0bc7bfd8fb6a824e8e99ad0222c5f6dbe1ba560452886e2633c0afebe949c2e8b5f023"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_procfs(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x123000, 0x0) pipe(&(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x29f) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x604429}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000000)=ANY=[]) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) 15:50:07 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x116) 15:50:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x7fff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x0, 0x80000000, 0x101, 0x0, 0x4c7, 0x0, 0x9fe8, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000280)={0x3, 0xffffffffffffffff, 0xf54e70b7ae2b119e}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4200, 0x0) connect$can_bcm(r4, &(0x7f0000000040), 0x10) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000180)={0xff, 0x4, 0x80000001, 0x8, 0x8, "337ad3fda4cddcc80ae76e3ff73862d997355d", 0x0, 0x1}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) write$UHID_CREATE(r5, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000003c0)=""/136, 0x88, 0x0, 0x8, 0x5, 0x1, 0x2}}, 0x120) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 742.520124][T20849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 742.530565][T20233] usbhid 4-1:0.0: can't add hid device: -71 [ 742.538047][T20233] usbhid: probe of 4-1:0.0 failed with error -71 15:50:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 742.573651][T20233] usb 4-1: USB disconnect, device number 100 [ 742.601223][T20849] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 742.701292][T20849] device ip6gretap1 entered promiscuous mode 15:50:08 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r1 = gettid() r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x200, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000140)={r4, r3}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @win={{0x6, 0x7f, 0x80, 0x1ff}, 0x8, 0x3184, &(0x7f0000000180)={{0x5, 0x7bf, 0x4, 0x4}, &(0x7f0000000100)={{0x800, 0x101, 0x0, 0x4}, &(0x7f00000000c0)={{0x3ff, 0x8001, 0x401}}}}, 0x1ff, &(0x7f0000000240)="f8f0f4329b1587190e18331fdcfb653ccadbb6d16226b6cdefedcbf075d5260ec4c3531d4c9961e9d1aee97dfc660cb7e6b4d87b9868e70d7ed44d56fd33b1d857f6b8ca30415d83669b8f94b80e2febb15bcb4c586f830b1b372a0efba225a8aca78a84ea847b189216ca3475b9ed89fcebf56f4e60e72cf0de5002e1ddcbc46e82acaeffaeade48b9e8288d555347956ea6eaff44c3553cfb469658640b91db89536e82e17c7cbbc73edf9ae329c46afcff929f3d309dc77c252a8ba8ac00a1817238b9baf318e88890775d19c122e315fe59b9560d22436fa3566a29ca07858056985", 0x3f}}) 15:50:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 743.025476][T20233] usb 4-1: new high-speed USB device number 101 using dummy_hcd 15:50:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:08 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x138) [ 743.407978][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.470989][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.483951][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 743.494638][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.514445][T20900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 743.518008][T20233] usb 4-1: config 0 descriptor?? [ 743.548417][T20900] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 743.561698][T20900] device ip6gretap1 entered promiscuous mode [ 743.885676][T20233] usbhid 4-1:0.0: can't add hid device: -71 [ 743.891752][T20233] usbhid: probe of 4-1:0.0 failed with error -71 [ 743.925873][T20233] usb 4-1: USB disconnect, device number 101 [ 744.275835][ T28] audit: type=1800 audit(1598802609.554:45): pid=20843 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15705 res=0 errno=0 [ 744.375318][T20233] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 744.434723][ T8180] net_ratelimit: 554 callbacks suppressed [ 744.434733][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.738096][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.749067][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.758909][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 744.768064][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.777395][T20233] usb 4-1: config 0 descriptor?? [ 745.021350][T20860] udc-core: couldn't find an available UDC or it's busy [ 745.028548][T20860] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 745.465504][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.155298][T20233] uclogic 0003:5543:006E.003B: failed retrieving string descriptor #100: -71 [ 746.164270][T20233] uclogic 0003:5543:006E.003B: failed retrieving pen parameters: -71 [ 746.173244][T20233] uclogic 0003:5543:006E.003B: failed probing pen v1 parameters: -71 [ 746.181800][T20233] uclogic 0003:5543:006E.003B: failed probing parameters: -71 [ 746.189719][T20233] uclogic: probe of 0003:5543:006E.003B failed with error -71 [ 746.208283][T20233] usb 4-1: USB disconnect, device number 102 [ 746.511383][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.520788][ T234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.531087][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.541003][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.595600][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.915153][ T12] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 747.325256][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.336385][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.348175][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 747.358040][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.369284][ T12] usb 4-1: config 0 descriptor?? 15:50:12 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x101003, 0x9) r1 = socket(0x200040000000016, 0x805, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt(r1, 0x114, 0x2710, 0x0, &(0x7f0000000040)=0x2393000) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={0x0, 0x20, 0x1000}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'wp384-generic\x00'}}, &(0x7f0000000180)="56673d7dd00ba77eb0f2d9eda2f0b537d43561cd640f15103b19b34551ba8034", &(0x7f00000001c0)=""/4096) 15:50:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b8000006d717072696f000058000200010000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000008d03"], 0x88}}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81800) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) 15:50:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x182) 15:50:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00000e6000/0x1000)=nil, 0x1000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) clone(0x1000, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0xaca) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) 15:50:12 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x4e, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0xe0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x8c, {{0x6, 0x24, 0x6, 0x0, 0x0, "a1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0xb27, 0xb8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xd9, 0x0, 0x52}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x1, 0x8, 0x8, 0x20, 0x6}, 0xa0, &(0x7f00000001c0)={0x5, 0xf, 0xa0, 0x3, [@generic={0x80, 0x10, 0x3, "6377a9bd5374ce4eb1c6f880a447946157ac7ade0df7eec694322b86724b311eed3cf1eb05435e8976f99bb5e69da45730af9374aa82e69080ec8e5216c1d192b7e45487b06b1f93421f5e26cea1d770fd070f82ec1d8f8c1b3cce26e347b7740036ebc1835c1b273475efb79474c13e38d4dd90383c6e3b9e84e622ea"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4ca4be57e01dc1a984fe4beb52a77f09"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x7, 0x5}]}, 0x1, [{0xb1, &(0x7f0000000340)=@string={0xb1, 0x3, "9e3abca293ea3171780280c4502cae34ab50024bcb694203817df0f401ab3f5e809ba2044ea38fed46088c828d04039205654036c675b7d022a4c7044007b5f7dc7595826eae6a8e6cada290a502411c1a3e849c398e4343c8c391701c4c5783ef8272c8a745f0603fb78a57ab924c3851b6333809984b50748ed4b11ec2cba18283c3aeec3423a380f5470d9ed7d4afe56ce47fc006c8203ea7108666ceb88f4eea8c9569e1ada03afb2c8ca4f8de"}}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00030400000054611c78"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r3 = getpid() sched_getscheduler(r3) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x8) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) [ 747.525330][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 747.535631][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 747.542533][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 747.602925][T20959] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 747.610475][ T12] usb 4-1: USB disconnect, device number 103 [ 747.625481][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000002", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 747.658248][T20959] device ip6gretap1 entered promiscuous mode 15:50:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94d84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x80000042}, 0x28a, 0x0, 0x7, 0x8, 0x2, 0x4, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) connect$inet(r0, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1a7610}], 0x1) 15:50:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\b', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 748.032317][ T12] usb 4-1: new high-speed USB device number 104 using dummy_hcd 15:50:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000e", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 748.140654][T20960] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 748.160379][T21000] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. 15:50:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000361000/0x3000)=nil, 0x3000, 0x8003, &(0x7f0000000140)=0x1, 0x6, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) 15:50:13 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1f1) 15:50:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x280, 0x150, 0x150, 0x0, 0x0, 0x360, 0x238, 0x238, 0x360, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000004c0)=0x6, 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x1e0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, [], 0x19}, [0xff, 0xffffffff, 0xff], [0xff000000, 0xff000101, 0x89813f6d7c1a5a8b, 0xff000000], 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x80, 0x4, 0x0, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xc, "1a20", 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, [0xff, 0xff, 0xff], [0xff, 0xffffffff, 0xffffffff, 0xff], 'vlan0\x00', 'xfrm0\x00', {0xff}, {}, 0x2f, 0x7, 0x1, 0x3c}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bc24000d3589a2ee64920d2607bae1aeb504587857b46c5cff94d7d36c86"}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffff00, 0xff000000, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'syzkaller1\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x6c, 0x9, 0x2, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x3, 0x5}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x4}, {0xffffffffffffffff, 0x1, 0x4}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) tkill(r1, 0x24) kcmp(0x0, r1, 0x4, r0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x280, 0x150, 0x150, 0x0, 0x0, 0x360, 0x238, 0x238, 0x360, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) [ 748.324026][T21007] Cannot find add_set index 0 as target 15:50:13 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1fc) 15:50:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:50:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000f", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 748.405253][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.442062][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.476203][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 748.478168][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 748.513261][T21015] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 748.532432][T21015] device ip6gretap1 entered promiscuous mode [ 748.557784][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.622121][ T12] usb 4-1: config 0 descriptor?? [ 748.675973][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.904805][T20967] udc-core: couldn't find an available UDC or it's busy [ 748.916629][T20967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 749.143108][T20967] udc-core: couldn't find an available UDC or it's busy [ 749.164127][T20967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 749.295155][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 749.301188][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 749.314456][ T12] usb 4-1: USB disconnect, device number 104 [ 749.465322][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.625303][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.716033][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.965030][T18992] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 750.335063][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.349723][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.360772][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 750.373877][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.386818][T18992] usb 4-1: config 0 descriptor?? 15:50:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00`', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:15 executing program 2: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={{0x1, 0x0, @reserved="d48e7bf4fb9325adb47cca0b9220a5c7e43e695ab27b309528648c0222632358"}}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0xe, 0x2, 0x2, 0x0, 0x0, 0x0}) 15:50:15 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) 15:50:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:50:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x23c) 15:50:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x41, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x41, r4) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a2f6465762f696e7075742f6d69636500203030303336303238373937303138393633393638203608616639353700f2223210b7c3f0402d0a8ab1a99f825962eb1f13e5930da32c12427f1350c1d6f71611861a7911570a2bc15dc694d7fe22a90cd7dfb5e773a80b13ac903c3c6f95ac154531911b816e2a89430a09452818044426d669dedf39334dfcfefba71679bf731a058cf22304168c8c8683f9c5868db480f529d4551425415b8a3a4e920c9315d10c45f760c6cedab3a759a06fb18cb3b38d27d3059e577f82c95f7d4b9c9bff916272df84ac05d4d2fdb5cbe4071b88505a49ab389ebfff03000000000000174984b26b9c4950784f80fcf1c9fe1b"], 0x41, r6) r7 = syz_usb_connect(0x4, 0x24, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES16=r4, @ANYRES16=r2, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRESOCT=r6, @ANYRES64=r1], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x40485404, &(0x7f0000000140)={{0x0, 0x1, 0x8001}, 0x9, 0x1}) syz_usb_control_io(r7, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000080)) [ 750.677420][T21063] vhci_hcd: default hub control req: 230e v0002 i0002 l0 [ 750.694990][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 750.702390][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 750.702642][T21065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x4c, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x101, 0xf000, 0xe, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}]}, 0x50}}, 0x0) [ 750.749749][T18992] usb 4-1: USB disconnect, device number 105 [ 750.771533][T21075] vhci_hcd: default hub control req: 230e v0002 i0002 l0 [ 750.790376][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:16 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x4480, 0x0) io_submit(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={&(0x7f0000000080)=@ipx={0x4, 0x3ff, 0x1, "490f1ffbf837", 0x1f}, 0x80, 0x0}, 0x4000014) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x40012100) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x7f, 0x100000001, 0xc, 0x791e1381, 0x4, [{0x7, 0x2, 0x9}, {0x2c8000, 0x0, 0x21, [], 0x2}, {0x8, 0xfffffffffffffff7, 0x3, [], 0x1}, {0x3, 0x10001, 0x4, [], 0x102}]}) 15:50:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:16 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xfeb9, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 750.839028][T21065] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 750.891194][T21065] device ip6gretap1 entered promiscuous mode [ 751.000021][T21091] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a5e0ff963f500f000126bd7000f9dbdf25040016000400fd49c53c34b5f159a967c5112ac86e018008000200"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0xffffffffffffff7f, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x1ff, 0x70600) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000003c0)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x3b, 0xff, 0x1, 0xff, 0x5, 0x53, 0xb1, 0x3f, 0xa, 0x7, 0x8, 0x3, 0x64, 0x20, 0x4}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="b079d3eb27d9fe59a4218e010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x24040081}, 0x20044) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000540)=""/91, 0x0, 0x0, 0x7f, 0x3}, 0x20) 15:50:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00&', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 751.165085][T18992] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 751.354108][T21088] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:16 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x6}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 15:50:16 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x82d43, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f00000002c0)={{0x0, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000300)) r5 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="1f74854a4d559498fd7a0b6890beb648ec4937bd867f5df0a960b9453b53d9231735767598", 0x25, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, r5) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x78, r6, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008851}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008804}, 0x0) [ 751.536004][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:50:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x27e) [ 751.579183][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:50:16 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x6}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 751.666940][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 751.738724][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.813487][T18992] usb 4-1: config 0 descriptor?? [ 751.867500][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.918157][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 751.960225][T21134] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 751.979886][T21134] device ip6gretap1 entered promiscuous mode [ 752.184922][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 752.185107][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 752.212519][T18992] usb 4-1: USB disconnect, device number 106 [ 752.666004][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.905088][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.074761][ T8223] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 753.434866][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.446881][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.459940][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 753.469205][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.478528][ T8223] usb 4-1: config 0 descriptor?? 15:50:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000140403ac98"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:50:18 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x6}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 15:50:18 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x500, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x6) dup3(r0, r1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010102, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {0x0, 0x0, 0x0, 0xfffffffffbfffffc}, 0x3fc, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xfffffffd}}, 0xe8) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) keyctl$chown(0x4, 0x0, 0x0, r5) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 15:50:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a5e0ff963f500f000126bd7000f9dbdf25040016000400fd49c53c34b5f159a967c5112ac86e018008000200"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0xffffffffffffff7f, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x1ff, 0x70600) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000003c0)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x3b, 0xff, 0x1, 0xff, 0x5, 0x53, 0xb1, 0x3f, 0xa, 0x7, 0x8, 0x3, 0x64, 0x20, 0x4}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="b079d3eb27d9fe59a4218e010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x24040081}, 0x20044) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000540)=""/91, 0x0, 0x0, 0x7f, 0x3}, 0x20) 15:50:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000c0", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2c8) [ 753.785612][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 753.791689][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 [ 753.805687][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x41, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x41, r4) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x41, r6) r7 = syz_usb_connect(0x4, 0x24, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES16=r4, @ANYRES16=r2, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRESOCT=r6, @ANYRES64=r1], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x40485404, &(0x7f0000000140)={{0x0, 0x1, 0x8001}, 0x9, 0x1}) syz_usb_control_io(r7, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000080)) [ 753.852636][ T8223] usb 4-1: USB disconnect, device number 107 [ 753.871077][T21185] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 753.888485][T21185] device ip6gretap1 entered promiscuous mode [ 753.953249][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.204780][ T7379] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 754.258212][ T8223] usb 4-1: new high-speed USB device number 108 using dummy_hcd 15:50:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x300) 15:50:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41c1, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20, 0x40000, 0x3, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) dup(0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6e", 0x9f}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fff], 0x1f000, 0x40240}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000380)) [ 754.443110][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 754.460452][T21214] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 754.479462][T21214] device ip6gretap1 entered promiscuous mode [ 754.500807][T21218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:50:19 executing program 1: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) close(r1) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x20000) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000004c0)=0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000440)={0x400, 0x5, &(0x7f0000000140)=[0x1f, 0xd29a, 0x0, 0x6, 0x2], &(0x7f0000000380)=[0x101, 0x80000001, 0x1f, 0x94c, 0x1c00000], &(0x7f00000003c0)=[0xfffff47e, 0x0, 0x7, 0x1000, 0x64b], &(0x7f0000000400)=[0x9], 0x0, 0xffffffffffff0000}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$CHAR_RAW_DISCARD(r4, 0x1277, &(0x7f0000000500)) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0xfffffffffffffc70) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000002c0)=@v2={0x5, 0x1, 0x5, 0x1, 0x97, "a4e4cd6af64ec9690a7e34f9064e47622b0dd138580d093ecdc0fca548793b401b75b73dbb087e21a932e14eebedb82fe48e6840b6652da66c74bbaa4f9a6f132eebb11df5081b0e3b1c80551998929100a7e603b902b571591e6e758c99a9a325fb8c427e03ed5048070296d8d7178683e68e8c89b2eaf0a421c81d7224c876a055e4785bf6008d611c4bf35019eeeb7f1ab5d61d8cc5"}, 0xa0, 0x2) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000001c0)="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") splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) [ 754.614956][ T7379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.634111][ T7379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.638362][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.646846][ T7379] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 754.674659][ T7379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.683661][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.707533][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 754.709809][ T7379] usb 5-1: config 0 descriptor?? 15:50:20 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x8000) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)}) [ 754.747144][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.784043][ T8223] usb 4-1: config 0 descriptor?? 15:50:20 executing program 1: syz_open_dev$sg(0x0, 0x9, 0x2da502) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x79) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x101, 0x82081) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x0) setpgid(0x0, r1) ioprio_set$pid(0x3, r0, 0x4007) [ 754.993128][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.105332][ T7379] usbhid 5-1:0.0: can't add hid device: -71 [ 755.111389][ T7379] usbhid: probe of 5-1:0.0 failed with error -71 [ 755.134174][ T7379] usb 5-1: USB disconnect, device number 18 [ 755.144769][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 755.150815][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 [ 755.161991][ T8223] usb 4-1: USB disconnect, device number 108 [ 755.664589][ T8223] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 755.705020][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.024783][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.036223][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.047732][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 756.057740][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.070097][ T8223] usb 4-1: config 0 descriptor?? [ 756.079745][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.984672][ T8223] usb 4-1: language id specifier not provided by device, defaulting to English [ 757.146652][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.434576][ T8223] uclogic 0003:5543:006E.003C: failed retrieving string descriptor #200: -71 [ 757.443591][ T8223] uclogic 0003:5543:006E.003C: failed retrieving pen parameters: -71 [ 757.465590][ T8223] uclogic 0003:5543:006E.003C: failed probing pen v2 parameters: -71 [ 757.473972][ T8223] uclogic 0003:5543:006E.003C: failed probing parameters: -71 [ 757.494570][ T8223] uclogic: probe of 0003:5543:006E.003C failed with error -71 [ 757.509527][ T8223] usb 4-1: USB disconnect, device number 109 [ 758.185461][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.195065][ T7379] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 758.557000][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.568039][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.578459][ T7379] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 758.587942][ T7379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.600903][ T7379] usb 4-1: config 0 descriptor?? 15:50:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, 'xfrm0\x00', {}, 0x3}) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES16], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3b26f2956e02282c"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x1, "002e400ca2"}, 0x7, 0x1) 15:50:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0xfffffffffffffffe, 0x0) r1 = getpid() ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='limits\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x84) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg(r3, &(0x7f0000006d00)=[{{0x0, 0x1002007, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0xa2ffff}], 0x19, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x82cd, 0xcbff}, {0x4, 0x3ff}]}, 0x14, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) 15:50:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x324) 15:50:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x81, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 15:50:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendfile(r2, r0, &(0x7f0000000000)=0xb323, 0x6) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x404000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000080)={0x8, 0x32315659, 0x200, 0x0, 0x3, @stepwise={{0x1, 0x2}, {0x1ff, 0x4}, {0x6, 0x74}}}) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/165, 0xa5}], 0x1, 0x200000000001f6, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 758.759559][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.824851][ T7379] usbhid 4-1:0.0: can't add hid device: -71 [ 758.830909][ T7379] usbhid: probe of 4-1:0.0 failed with error -71 [ 758.848394][T21301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000003", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 758.896247][ T7379] usb 4-1: USB disconnect, device number 110 [ 758.942545][T21301] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 758.965819][T21301] device ip6gretap1 entered promiscuous mode 15:50:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000180)={{r0}, "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"}) r4 = dup2(r0, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa86dd60b8044400303a0020010000000000000000000000000002ff020000000000000000000000000001"], 0x6a) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r5, 0x0, r9, 0x0, 0x18102, 0x0) [ 759.068168][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 759.224774][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.274478][ T7379] usb 4-1: new high-speed USB device number 111 using dummy_hcd 15:50:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000e", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x342) [ 759.655101][ T7379] usb 4-1: config 24 has an invalid descriptor of length 60, skipping remainder of the config [ 759.677837][ T7379] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.712591][ T7379] usb 4-1: New USB device found, idVendor=7543, idProduct=006e, bcdDevice= 0.40 [ 759.730443][ T7379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.740009][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 759.781741][T21348] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 759.791324][ T7379] usbhid 4-1:24.0: couldn't find an input interrupt endpoint [ 759.822831][T21348] device ip6gretap1 entered promiscuous mode [ 759.995204][ T12] usb 4-1: USB disconnect, device number 111 [ 760.264791][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.614475][ T12] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 761.024332][ T12] usb 4-1: config 24 has an invalid descriptor of length 60, skipping remainder of the config [ 761.034764][ T12] usb 4-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.048373][ T12] usb 4-1: New USB device found, idVendor=7543, idProduct=006e, bcdDevice= 0.40 [ 761.057870][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.115628][ T12] usbhid 4-1:24.0: couldn't find an input interrupt endpoint [ 761.304549][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.784894][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000340)=0xaac7, 0x7fff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@int=0xfffffffb, 0x4) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x22, 0x3, "9bf12609d6398be6eec36000114fc34229aa85c7a6c70e9f7778601f283a2b"}}, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1e79, &(0x7f0000000200)={0x0, 0xe88b, 0x0, 0x0, 0x2e8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x413, 0xc40) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000003c0)={0x1, 0x2, 0x54fb, 0x1, 0x5, 0x7, 0xfffffffffffffffc, 0x3, 0x6, 0x6, 0x2, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x5, 0xef, 0x14, @local, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x1, 0x80000000, 0x1}}) 15:50:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 15:50:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x80800, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00400008000000067fffffff4e20007800cd274055d0a1f16d68000007049078e0000001640101029404000044280ae0000064fb0000000700000800000000050000000800010000000000030000000400010000861a000000010606e5a16a2b070e7ee588443c4f2c43a7dc56a28313277f00000164010101ffffffff64010100860a00000002070440c8007b527602f8a83247c04ed1945fdb7b75e7c60e81c8b477f7118262b6c6e77e1bb1a19cef651f1d3bf37a665f63d3905b9bb64de14034dd443a9188c6bf495d867758abeeb6"]}) r3 = syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/pid\x00') getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000006c00000825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="101006000100000008000a00", @ANYRES32=r2, @ANYBLOB="08002000771e000008002c00c05800"/28, @ANYRES32=r3, @ANYBLOB="0400140008000d000400000008001f00faffffff08001300", @ANYRES32=r0, @ANYBLOB], 0x64}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000500)=0x2002, 0x4) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000580), 0x3}, 0x21890, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x4, 0xffffffffffffff9c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4, 0x60000) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000003c0)) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000200)={0x0, @capture={0x0, 0x0, {0x6, 0x5}, 0x0, 0x4b0}}) 15:50:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x348) 15:50:27 executing program 1: getsockname$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open_tree(r1, &(0x7f0000000180)='./file0\x00', 0x8800) mq_timedreceive(r2, &(0x7f0000000300)=""/226, 0xe2, 0x100000000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_tables_targets\x00') openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) getsockopt(r3, 0x4, 0x8, &(0x7f0000000100)=""/95, &(0x7f0000000040)=0x5f) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a4465ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600400001c00100000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04004f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04a10d9942d20dcdf634c1f215ce3bb9ad809d5e1cace81ed0b3fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f4527261e9792e717", 0xd8}], 0x1}, 0x0) [ 762.330639][ T12] usb 4-1: USB disconnect, device number 112 [ 762.382914][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.402043][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 762.473657][T21398] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 762.494806][T21398] device ip6gretap1 entered promiscuous mode 15:50:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24008814) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000340012800b0001f6b26d4200116514a3156e7678ab254a6970766c616e00002400090000000100010000000600020002000000060002000100"/80, @ANYRES32=0x0, @ANYBLOB="0500270005000000"], 0x70}}, 0x0) 15:50:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 762.844183][ T12] usb 4-1: new high-speed USB device number 113 using dummy_hcd 15:50:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 762.978005][T21408] IPv6: NLM_F_CREATE should be specified when creating new route [ 762.990507][T21408] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 763.012817][T21408] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 763.027488][T21417] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 763.039512][T21417] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 763.061986][T21427] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 15:50:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x80800, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00400008000000067fffffff4e20007800cd274055d0a1f16d68000007049078e0000001640101029404000044280ae0000064fb0000000700000800000000050000000800010000000000030000000400010000861a000000010606e5a16a2b070e7ee588443c4f2c43a7dc56a28313277f00000164010101ffffffff64010100860a00000002070440c8007b527602f8a83247c04ed1945fdb7b75e7c60e81c8b477f7118262b6c6e77e1bb1a19cef651f1d3bf37a665f63d3905b9bb64de14034dd443a9188c6bf495d867758abeeb6"]}) r3 = syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/pid\x00') getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000006c00000825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="101006000100000008000a00", @ANYRES32=r2, @ANYBLOB="08002000771e000008002c00c05800"/28, @ANYRES32=r3, @ANYBLOB="0400140008000d000400000008001f00faffffff08001300", @ANYRES32=r0, @ANYBLOB], 0x64}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000500)=0x2002, 0x4) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000580), 0x3}, 0x21890, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x4, 0xffffffffffffff9c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4, 0x60000) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000003c0)) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000200)={0x0, @capture={0x0, 0x0, {0x6, 0x5}, 0x0, 0x4b0}}) [ 763.079886][T21427] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 763.214897][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.255256][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.284095][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 763.293370][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.315303][ T12] usb 4-1: config 0 descriptor?? [ 763.385288][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.654224][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 763.660328][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 763.675697][ T12] usb 4-1: USB disconnect, device number 113 [ 764.134100][ T12] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 764.201648][ T0] NOHZ: local_softirq_pending 08 [ 764.424206][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.534881][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.545833][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.557590][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 764.568003][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.581839][ T12] usb 4-1: config 0 descriptor?? [ 764.834189][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.464122][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.914074][ T12] uclogic 0003:5543:006E.003D: failed retrieving string descriptor #100: -71 [ 765.923005][ T12] uclogic 0003:5543:006E.003D: failed retrieving pen parameters: -71 [ 765.937865][ T12] uclogic 0003:5543:006E.003D: failed probing pen v1 parameters: -71 [ 765.951566][ T12] uclogic 0003:5543:006E.003D: failed probing parameters: -71 [ 765.966340][ T12] uclogic: probe of 0003:5543:006E.003D failed with error -71 [ 765.976287][ T12] usb 4-1: USB disconnect, device number 114 [ 766.504669][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.683923][T18992] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 767.044464][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.055702][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.066925][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 767.076719][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.093714][T18992] usb 4-1: config 0 descriptor?? 15:50:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:50:32 executing program 1: syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2db4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x29, 0x5, 0x0, &(0x7f00000000c0)) 15:50:32 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x350) 15:50:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:32 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/195, 0xc3, 0x3f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r2) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r4 = geteuid() r5 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x1, r4}, {0x2, 0x4, r5}, {0x2, 0x7}]}, 0x3c, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@audit='audit'}, {@audit='audit'}, {@dont_hash='dont_hash'}]}}) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x100000000}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@fsmagic={'fsmagic', 0x3d, 0xe689}}, {@euid_eq={'euid', 0x3d, r4}}]}}) r6 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4000, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000080)='./cgroup/syz0\x00', &(0x7f0000000100)='./file1\x00', r7) 15:50:32 executing program 2: socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000240)=0x2) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47f, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000015, 0x12, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x1000000c8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="493082e67ff25eb6752193d9ad07979c576fa69af9a147d2eb84822f8f5e55474f1c7f0f5be3e53bb87b5eadcf14aeaf687481dd2e3113e84b0658dbf0f503cd3e4086f4a4b4c856edfacb9d291f", 0x4e, 0x4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x24001a0d) ioctl$LOOP_CLR_FD(r1, 0x4c01) [ 767.282552][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 767.324204][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 767.331783][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 767.347946][T21482] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:50:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x1420000a77, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006a0003"], 0x1}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000024000b0f00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736671001700020000010000000000000000000000000000000000000000000000000000000000000042305f7a823726d60000008100"/96], 0x78}}, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000080)=r7) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 767.382797][T18992] usb 4-1: USB disconnect, device number 115 [ 767.420633][T21482] device ip6gretap1 entered promiscuous mode 15:50:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 767.544184][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 767.664033][ T8223] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 767.773891][T18992] usb 4-1: new high-speed USB device number 116 using dummy_hcd 15:50:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 767.903835][ T8223] usb 2-1: Invalid ep0 maxpacket: 64 15:50:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 768.008515][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.019513][T21509] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x4) clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) [ 768.053830][ T8223] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 768.153943][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.180731][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.223973][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 768.233047][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.268878][T18992] usb 4-1: config 0 descriptor?? [ 768.333842][ T8223] usb 2-1: Invalid ep0 maxpacket: 64 [ 768.339588][ T8223] usb usb2-port1: attempt power cycle [ 768.586130][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.623913][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 768.630115][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 768.643141][T18992] usb 4-1: USB disconnect, device number 116 [ 768.677986][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.073786][ T8223] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 769.103762][T18992] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 769.165696][ T8223] usb 2-1: Invalid ep0 maxpacket: 64 [ 769.313824][ T8223] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 769.424050][ T8223] usb 2-1: Invalid ep0 maxpacket: 64 [ 769.429590][ T8223] usb usb2-port1: unable to enumerate USB device [ 769.463925][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.474936][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.484781][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 769.493939][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.510399][T18992] usb 4-1: config 0 descriptor?? [ 769.623949][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.666765][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.873708][T18992] uclogic 0003:5543:006E.003E: failed retrieving string descriptor #100: -71 [ 770.882622][T18992] uclogic 0003:5543:006E.003E: failed retrieving pen parameters: -71 [ 770.891119][T18992] uclogic 0003:5543:006E.003E: failed probing pen v1 parameters: -71 [ 770.899606][T18992] uclogic 0003:5543:006E.003E: failed probing parameters: -71 [ 770.907838][T18992] uclogic: probe of 0003:5543:006E.003E failed with error -71 [ 770.919742][T18992] usb 4-1: USB disconnect, device number 117 [ 771.073832][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.623595][ T8223] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 771.705364][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.984132][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.995320][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.006466][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 772.016342][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.027549][ T8223] usb 4-1: config 0 descriptor?? 15:50:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403ac98a2f74b"], 0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:50:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:37 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x35a) 15:50:37 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup2(r0, r1) 15:50:37 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x41, r1) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0x20, 0xa1, 0x4, 0x0, 0x3, 0x34}) syz_usb_connect(0x5, 0x44, &(0x7f0000000080)=ANY=[], 0x0) 15:50:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000edfeffffffff64391a71b8e45d31505d891ad3ff0000000000000100000086dd60cbd5a4316012c85580000000000001000000000000003bff02000000000000000000000000000103009078662ac55d2dc8860000000060c01c8efad7741aba8eb06f00002f0000000000000000000000000000000001fc02000000000000000000a06c839cba8f9f7cc6f807f5bf3722957bdfc03197bd059beb6600cb26db20c58e336e044bff5b7136e1859fa441f50767989c4bb41fdd9658a6666193cf815d1080fde3683ddddd5cdc160e9c034db888092cb86c3458c54d"], 0x76) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18102, 0x0) [ 772.251248][T21585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 772.283670][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 772.290109][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 15:50:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0xc}, 0x2200, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) fcntl$getflags(r1, 0x3) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x47}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={r2, 0x7, 0x16}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/164) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e21, @multicast2}}) [ 772.348403][T21585] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 772.367176][ T8223] usb 4-1: USB disconnect, device number 118 [ 772.407383][T21585] device ip6gretap1 entered promiscuous mode 15:50:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 772.477942][T21609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.499224][T21609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.513841][ T8180] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 772.552948][T21609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.581568][T21609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 772.619068][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.649525][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.674303][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.773894][ T8223] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 772.793703][ T8180] usb 5-1: device descriptor read/64, error 18 15:50:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400007f", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 773.144394][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.162168][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.186378][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 773.197689][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.205244][ T8180] usb 5-1: device descriptor read/64, error 18 [ 773.220767][ T8223] usb 4-1: config 0 descriptor?? [ 773.473672][ T8180] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 773.573598][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 773.579859][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 [ 773.615458][ T8223] usb 4-1: USB disconnect, device number 119 [ 773.779463][ T8180] usb 5-1: device descriptor read/64, error 18 [ 774.084661][ T8223] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 774.183508][ T8180] usb 5-1: device descriptor read/64, error 18 [ 774.304819][ T8180] usb usb5-port1: attempt power cycle [ 774.380157][ T8223] usb 4-1: device descriptor read/64, error 18 [ 774.773509][ T8223] usb 4-1: device descriptor read/64, error 18 [ 775.023481][ T8180] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 775.043537][ T8223] usb 4-1: new high-speed USB device number 121 using dummy_hcd 15:50:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20008015) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) [ 775.220626][ T8180] usb 5-1: device descriptor read/8, error -71 15:50:40 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000008c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@dev, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x85717a326f4e0c0, r4}) r5 = socket$inet6(0xa, 0x80003, 0x3) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private2={0xfc, 0x2, [], 0x16}, r4}, 0x14) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x705, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0xfff, 0x12, 0x3, 0x8, "02d5c8eeeee22c119f07e76388444843c12b307fe51a3fb4ef116250b52fe8f8099622d05a269eed547d80b9bd429b29ce22190087b0abe9e693396445219090", "ef044a88ea7086803c9c951ed2ae783ca84a0f458acc565cd288baa79e1d4e7a", [0x1, 0x100]}) 15:50:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400009e", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x378) 15:50:40 executing program 1: openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x325d03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000100)={0x2}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x406, r3) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) sendfile(r5, r2, 0x0, 0x20006) 15:50:40 executing program 2: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000001e, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x40) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x5000000000016) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000240)={0x3, 0x3, {0xfffffffffffffff7, @struct={0x81, 0xffffff00}, 0x0, 0x4, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8, 0x24, @usage=0x7, 0xeb9e136, 0x9, [0x6, 0x2, 0x0, 0xd7f, 0x4, 0x200]}, {0x4e9b9875, @struct={0x3ff, 0x101}, 0x0, 0x100000000, 0x6f64, 0xa29f, 0x10000, 0x8, 0x404, @usage=0x4, 0x3, 0x4667, [0x2, 0x101, 0x6, 0x7f, 0x2, 0x7fff]}, {0x1, @usage=0x100, 0x0, 0x2, 0x100000000, 0x2, 0x88, 0xc0000000000, 0x19, @struct={0x80000000, 0x100}, 0xfffffff8, 0xe3cb, [0x8, 0x235001cc, 0xfff, 0xaa4, 0x5257, 0x7db]}, {0x7, 0x9, 0x5}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000340)={{r7}, r8, 0x0, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000003000000000000006e30000007000000010000000000000000000000000000000900000000000000030000000000000200000000000000ff00000000ff0300"/87]}, @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000640)={{r1}, r8, 0xa, @unused=[0x100000000, 0x7fff, 0x3, 0x6], @devid=r4}) [ 775.313578][ T8223] usb 4-1: device descriptor read/64, error 18 [ 775.345691][T21661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:40 executing program 1: add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1c01) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000240)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe331, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b702000000400400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040000010000001704000009000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000a93e90832ff9d40a409f01f6147c8f6fd267bf410e76c540106f89ec68823ce3c4bcc4ce81e97719ea969f2a019a6137ad1efc966f1cfdc4ea29f673efc20c07ec082bc6de68ab0a5ebf4ee60253516cc871311ab25868e1d9a014263697ca83c57fc2ead0d85a2bcc922a3aa71489fa000000004bcff56cf5a84cefb43ea72351190a711fd2b83a3596d80729476ab7140606791e81960ea313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf7316a4fed35f16ae8b3aa4c6dd4880c76e5837f39a161b050abc5a34588ea19114caebb79951084e7113c77ae25a0121de52e5e8cceddf2cb4b9895a592558509d6bc95bfb57834fdb2b8c0738fda3ea38c09e75b1f39ae8af2c746fbb43e3530767d8ee296487c0e650ead90030000008fee2e02ece680c0d3d19b2b62fc202240219f497e89548a2977f86137ecb5753dfc87f1f73e2392ef113cbe241a98b4e8f3bf878f1dc0e115ddfe318f54369bc8dfd3a4ea21259ed518ae80606ef83d69b9d0d972b2211d05b2e31d61bf49ca69bdb022a6cff57d5f16769d1605e8045c6880b425f8575f863a7e1b7174281ab87fba93555853df9dbd3da536d88168217230eabfaf7ff9b0146acffea06f3b0ba7b7357ba84c953523e92ee8cc4d8be0050000002c305d59cb68bff089979504c71418bd62ec60cfae7d75ce2adc8d4b2eabae5937b47e07da3f62be170ac03ca60b10c8123a7ae91659fc79fc36c84dd1b2b8972c5c2544e3b50acd3b00000000000d62fae930c2308e2401bb761565ac4eda4ca118ebbe000000000000000000000000000000a52d598dbcfeb90dd310175435c843624027f7d55431a5756e4be9698bcd550c272c1448f8784db63fd4f36ec14cc67fcdd41c8ba146dc7d3fb07df9687b95efcd74ad8d0b15234dab4da83fa33391a2925b49f6040087cfaa9f83a6cdb0e031d9eb6cbff6eba616992f3ba6c277e7820a84365d650b9f057394a543c3210df7268ec32ac38db9d3062571ec8eb3290bb4a823674e89cf1716d4bc9fac0c47d854632a1d943a9dc58e6f4d0b687a055983a46fdd52f3c87506ae419c604f62b56ad1420eca5484ee0092563332124c612f00000000000000000000000000006642491872a9ce32db42bc8d424b49b7a2b9b793cad871f80997fd7c4affeb1cb8af9854b6d3b882909f20a3eb1a22b4577b5e20cb1819765e51bb160f3147ec8811b60c3bd37806151dfb76444fb08725ffc40c8c4c3871c51fd4244e4d50f9d26ad88640a217d5edfec3bb170278e77e59f031a90df816b95ba6d9c7957c115d26252e208bf3a87488aba80c4e85b5cfa63ff27b0f83ae3f21ebfc9839de819a762799422e40d8c239b28706ca7fc44c1c6fea61741cd7fa57b6f038d72e49f92ce383a0fdff42d8b4de7f0f128f6058515840388ecbba79f9d6a41c54d15a2e56fdb87930c71356963e2e7484c8e8ba80e4846eea39edaebf3fec1d358cf4cd6278c49e397afccb974faf3995ec2ac43da2c5bbd38bf8007d6af5410524cb570cd408d7ce75ce34c66abaabc7ccfb26ad1cc3a50cd4c189ff7d8802d98ff7e9a754cc16d053fb069cc994d23de19eb8d2d9a907dd6a0e7a3da23df4e3886af4e79a4fea53e2893e3f442f0335b656d9854983627a4d7ba8fb98317e4f4416d1b1cc978371756690ac7d959adac0f02599f48e22ea977ec4f8cf38efce5d4c89494265cc15a50d9d07c3e9072a8d0295625bd3950bc8bc43cab63126b00199d499d90b57badffdfe5b035e68805777b53812be375235c83a6e695c7af9e0bce92baa48128009745ece8b847f8ce316ff2fcee62764aef300efa9ce56abf6c0"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xbc00}], 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000300)={0xfff, 0x8001}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1c01) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7, 0x7ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) [ 775.411659][T21661] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 775.443482][ T8180] usb 5-1: device descriptor read/8, error -71 15:50:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000f0", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 775.457091][T21661] device ip6gretap1 entered promiscuous mode 15:50:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:40 executing program 1: syz_emit_ethernet(0x136, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9b268c", 0x100, 0x0, 0x0, @remote, @dev, {[@dstopts={0x0, 0x1e, [], [@enc_lim={0x4, 0x1, 0x40}, @calipso={0x7, 0x40, {0x1, 0xe, 0x1, 0xff, [0xffffffff, 0x7fffffff, 0x9, 0x100000001, 0x9, 0x8, 0x5]}}, @jumbo={0xc2, 0x4, 0x20480}, @generic={0x0, 0xa9, "da4139dc760ab8c222a50fa54629701f49ae0b4b4645a4b918852722ccd83a052a52fe21d744f3fdbca668d5e312d539eba6eb0e1dd8aaa548d1ffecdc67564fa1ff459a4ed16686365b68ff11e7e75e93b3224919bc490b8fe61b1928e0202b1442c192e2da84a49c675fcd036dcc998f64d4a8c2547f968b610abe1cd73b5fd27fc43dac3cab99f133d22c27ff6c3cdaad4fa512d8346db5e83bc996355e753da69e881f148c7ca0"}]}]}}}}}, 0x0) 15:50:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[@ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000840)) [ 775.866346][ T8223] usb 4-1: device descriptor read/64, error -71 [ 775.993581][ T8223] usb usb4-port1: attempt power cycle [ 776.123463][ T7379] net_ratelimit: 11 callbacks suppressed [ 776.123510][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.703292][ T8223] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 776.913403][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.928119][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.938320][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 776.951412][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.963677][ T8223] usb 4-1: config 0 descriptor?? [ 777.143444][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.152036][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.303347][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 777.309448][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 [ 777.317654][ T8223] usb 4-1: USB disconnect, device number 122 [ 777.783268][ T8223] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 778.143365][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.154472][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.165755][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 778.175832][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.188886][ T8223] usb 4-1: config 0 descriptor?? [ 778.198634][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.263599][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) 15:50:43 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x3cc) 15:50:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:43 executing program 4: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000680)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5c010100", @ANYRES16=0x0, @ANYBLOB="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"], 0x15c}}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='*nrL', @ANYRES16=0x0, @ANYBLOB="100325bd7000f5dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4040000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf25020010000000000000000000000800810018020000"], 0x34}, 0x1, 0x0, 0x0, 0x440c4}, 0x8) symlinkat(&(0x7f0000000040)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xa0) fallocate(r1, 0x0, 0x0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 15:50:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[@ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000840)) 15:50:43 executing program 2: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000001e, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x40) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x5000000000016) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000240)={0x3, 0x3, {0xfffffffffffffff7, @struct={0x81, 0xffffff00}, 0x0, 0x4, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8, 0x24, @usage=0x7, 0xeb9e136, 0x9, [0x6, 0x2, 0x0, 0xd7f, 0x4, 0x200]}, {0x4e9b9875, @struct={0x3ff, 0x101}, 0x0, 0x100000000, 0x6f64, 0xa29f, 0x10000, 0x8, 0x404, @usage=0x4, 0x3, 0x4667, [0x2, 0x101, 0x6, 0x7f, 0x2, 0x7fff]}, {0x1, @usage=0x100, 0x0, 0x2, 0x100000000, 0x2, 0x88, 0xc0000000000, 0x19, @struct={0x80000000, 0x100}, 0xfffffff8, 0xe3cb, [0x8, 0x235001cc, 0xfff, 0xaa4, 0x5257, 0x7db]}, {0x7, 0x9, 0x5}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f00000000c0)=ANY=[], 0x7fffffff) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000340)={{r7}, r8, 0x0, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000003000000000000006e30000007000000010000000000000000000000000000000900000000000000030000000000000200000000000000ff00000000ff0300"/87]}, @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000640)={{r1}, r8, 0xa, @unused=[0x100000000, 0x7fff, 0x3, 0x6], @devid=r4}) 15:50:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 778.509307][T21739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 778.523289][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 778.529585][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 [ 778.541485][T21739] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 778.557974][T21739] device ip6gretap1 entered promiscuous mode [ 778.583530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.592361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.600856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.655894][ T8223] usb 4-1: USB disconnect, device number 123 15:50:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[@ANYRES16], 0x1a0) fallocate(r0, 0x100000003, 0x0, 0x80019c) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000840)) 15:50:44 executing program 4: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000680)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5c010100", @ANYRES16=0x0, @ANYBLOB="00020000000000000000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000000000006001100000000000e0001006e657464657673696d00000049ff02006e657464657673696d300000080003000100000008000b00010000000600110077060000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b000004000006001100000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000000000006001100070000000e0001006e657464657673696d0000000f00025aa612bf64657673696d30000008000300020000000600110000020000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00000000000600110000080000d3ed39296b59882bdad779cd457d92e31578cf85a2fbf26169b035971669ff478802d50eb0cee9858259a9eac6c67b8e239ff6ae3b6996ee655b0bd4434b128341f2ad2b65391d229e14e205014466b5892e30dca05060139d4551cce055035f964734b39d9a52ce4f338378a2ce4936f1f8e2aad2454f121e1f9b95ee353506c19aa80e6065ffefd029b3cde629ec114a6f44df81ba6d4e8540ffe151b8888383fc36e8ee496758e9f82bada0da82c34a3c420ecc1aa7421ba2d8048de7bf0ab9c713d9cffc10c1788edfca334c26ceb373fbf8fd8e8efd2f2c41243585fbc1a13b33a5e1f925da6aedcf702cdd75cdfe83d74c5a4c07c735d934217106a5d3256664b042d0a02aa9315cc637fdcfcf68a750263f68a52d93e3bec60ee6168bf1cebf952739feffb64783759dda78d2dc713ba91ccf75212dc18f786bb7dd92a3e1b58b59eaaf29f7bffc5d78e943088d73c4b7ce174855222f2f00df1e21faf0079639c9b285e25c90e1919623291ef326e86970bb8583c3e1549aa0da91bf63f61b6bce233eee18c1d0b449bdea95d4cf29c45119d13a2573d8bf7448a677ae973a53abb9779f"], 0x15c}}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='*nrL', @ANYRES16=0x0, @ANYBLOB="100325bd7000f5dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4040000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf25020010000000000000000000000800810018020000"], 0x34}, 0x1, 0x0, 0x0, 0x440c4}, 0x8) symlinkat(&(0x7f0000000040)='./bus\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x0, {0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xa0) fallocate(r1, 0x0, 0x0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 15:50:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 779.053195][ T8223] usb 4-1: new high-speed USB device number 124 using dummy_hcd 15:50:44 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x1407, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040000) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="a4", 0x1}, {0x0}, {0x0}], 0x3}, 0x40800) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x4000, &(0x7f0000000a00)=[{&(0x7f0000000280)="04", 0x140000}], 0x1}, 0x20000) [ 779.223535][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.418807][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.446691][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.463626][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 779.487253][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.509680][ T8223] usb 4-1: config 0 descriptor?? [ 779.863217][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 779.869477][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 [ 779.883310][ T8223] usb 4-1: USB disconnect, device number 124 [ 780.184737][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.343242][ T8223] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 780.703126][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.714109][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.725494][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 780.735275][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.749084][ T8223] usb 4-1: config 0 descriptor?? [ 781.304885][ T7379] net_ratelimit: 1 callbacks suppressed [ 781.304892][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.113025][ T8223] uclogic 0003:5543:006E.003F: failed retrieving string descriptor #100: -71 [ 782.121870][ T8223] uclogic 0003:5543:006E.003F: failed retrieving pen parameters: -71 [ 782.130124][ T8223] uclogic 0003:5543:006E.003F: failed probing pen v1 parameters: -71 [ 782.138414][ T8223] uclogic 0003:5543:006E.003F: failed probing parameters: -71 [ 782.146081][ T8223] uclogic: probe of 0003:5543:006E.003F failed with error -71 [ 782.156006][ T8223] usb 4-1: USB disconnect, device number 125 [ 782.353086][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.753740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.872918][ T7379] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 783.223048][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.253071][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.264021][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.275602][ T7379] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 783.285378][ T7379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.296190][ T7379] usb 4-1: config 0 descriptor?? 15:50:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e00400000000001090224100100000000090400000103014c25c5820000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) write$qrtrtun(r2, &(0x7f0000000140)="ca9e7c0fa560a60585521b428d9ab26e7d6ec1532e31e3e8ac392d", 0x1b) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x303200, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x200100, 0x20) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000200)={r4, 0x4, 0x200, r3}) 15:50:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:48 executing program 4: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x2000000000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="726177b9f70000000000000000000000000000000000000000000000000000000200000003000000880400000000000098000000000000009800000500000000f0030000f0030000f0030000f0030000f00300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000010000070000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e6400000065716c00000000000000000000000000000000000000b10000000000000000000000000000000000000000000000000000000000000000001003580300000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000000000269705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000fcffffff0e0000600000000000000000000000005001686173686c696d697400000001000000000000000000000000000000000276657468305f746f5f7b737200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000006e00000000000000000000000900000008000000000000000000000000000000480054454500000000000000000000ba60eabc545ffd22000000000000000001ac1414bb0000000000000000000000007465716c8e7cc0557efac6322e966f79ac3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff7b716a664f628212dcf440de3b68a82b523fef3e0ea496ba870769a59963e492589d4276665b2c92d80ae4d4e639e952156bb08a5122a3b4840ff00af2a3d0d7d269c495318e18ddfbfb432161f0765fdcccc15a111b6992f0f3fe81ee8acb6d15dd371697aaed75ddf9db50c67d23293bd2e85d59d750e829cdfeb5c3c1998d78d93053477e1c0f15f77684e995c94d07eebdc2fd4bbff105d2b29174f74d3d635ae44a0c3fa17a2b74de6c813b79545b6eaa"], 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 15:50:48 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x3d2) 15:50:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61e501ad94c17c"], 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008d80402f040000000000109023400010000f9ff08040000010301f884c33e2c98c9d26919ebd987bf00000921010000012201000905810380"], 0x0) syz_usb_ep_read(r1, 0x0, 0x0, 0x0) syz_usb_ep_write(r1, 0x0, 0x1, &(0x7f0000000000)="97") 15:50:48 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159cda903634e369a9e152ddca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218cef40068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf900003323aa9fdfb52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899fc0159e800ea2474b540500a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e0c410ade7a36b2635d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab5a9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230ad1e1f4933545fc3c741374211663f6b5972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63016c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a9dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc6af1b6b2b218e8213fec2b4fda19789fd163838d7d49c3fa9595a314e7c028e61c48de2316cdb01b2a4114fae0ca859d79fd7cc9c3e2c9ce644f724faa2dbdfcb7c66549a25de665fd3edf8a3aaee6b8de0cebdba4af865fc05043b67410356bdf9885b3a1b93fcb5265642f7fc4e07c5cb30b49100a3ff13873711f2910b5e9eae3dd58f12fd4d2ee922f620c1f50e81a1e6705cb63e04aa313acef6e3abb5f24e0ccaa26a4f8678084122ef8d84185b9d891117b771048bf3478fd2cb656d8438db62ee6fad5f2e7cd4718166db1917733f418b28a71ef4cc81bba2168a5512f066be647f35083710c22fc"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x1407, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040000) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="a4", 0x1}, {0x0}, {0x0}], 0x3}, 0x40800) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x4000, &(0x7f0000000a00)=[{&(0x7f0000000280)="04", 0x140000}], 0x1}, 0x20000) [ 783.383261][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.470970][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 783.503082][ T7379] usbhid 4-1:0.0: can't add hid device: -71 [ 783.509164][ T7379] usbhid: probe of 4-1:0.0 failed with error -71 [ 783.536650][ T7379] usb 4-1: USB disconnect, device number 126 [ 783.587644][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 783.618346][T21839] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:50:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 783.633909][T21839] device ip6gretap1 entered promiscuous mode [ 783.752827][T18992] usb 3-1: new high-speed USB device number 24 using dummy_hcd 15:50:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 783.932924][ T7379] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 784.012871][T18992] usb 3-1: Using ep0 maxpacket: 8 15:50:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 784.040835][T21852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:49 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x3f4) 15:50:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xde}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd(r0, &(0x7f00000000c0)={[0x3]}, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r3 = geteuid() r4 = geteuid() fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x1, r3}, {0x2, 0x4, r4}, {0x2, 0x7}]}, 0x3c, 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@audit='audit'}, {@audit='audit'}, {@dont_hash='dont_hash'}]}}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001800110028bd7000fedbdf2580818081fd03ff016f01fe3fe0b713d92d6a68a703e7080000000008000300", @ANYBLOB="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", @ANYBLOB="08001900", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x40001) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x98, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0x59, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x98}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x6, 0x10}, 0xc) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000001c0)=0x2, 0x4) [ 784.143322][T18992] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 784.192834][T18992] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 784.220563][T21879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 784.236308][T21879] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 784.246299][T21879] device ip6gretap1 entered promiscuous mode [ 784.258545][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 784.272408][T21880] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.4'. [ 784.284178][T21880] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 784.294209][T21880] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.4'. [ 784.310955][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 784.313097][T18992] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 784.347346][T18992] usb 3-1: New USB device strings: Mfr=0, Product=5, SerialNumber=0 [ 784.362612][T18992] usb 3-1: Product: syz [ 784.368345][ T7379] usb 4-1: config index 0 descriptor too short (expected 4132, got 36) [ 784.383647][ T7379] usb 4-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 784.398960][T21880] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.4'. [ 784.413132][T18992] usb 3-1: config 0 descriptor?? [ 784.427580][ T7379] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 784.447621][T21880] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 784.467767][T21880] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.4'. [ 784.482297][ T7379] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 784.501088][ T7379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.523542][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.534859][ T7379] usb 4-1: config 0 descriptor?? [ 784.671647][ T0] NOHZ: local_softirq_pending 08 [ 784.852890][ T7379] usb 4-1: string descriptor 0 read error: -71 [ 784.875744][ T7379] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 784.890486][ T7379] usb 4-1: USB disconnect, device number 127 [ 785.359337][T21910] udc-core: couldn't find an available UDC or it's busy [ 785.366644][T21910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 785.422836][ T7379] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 785.543080][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.783868][ T7379] usb 4-1: config index 0 descriptor too short (expected 4132, got 36) [ 785.792326][ T7379] usb 4-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 785.805474][ T7379] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.819240][ T7379] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 785.828949][ T7379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.841890][ T7379] usb 4-1: config 0 descriptor?? [ 786.272878][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.451368][T10286] usb 3-1: USB disconnect, device number 24 [ 786.583009][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.597558][ T7379] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 787.622851][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.874080][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000140)=0x4eef1111) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0xa2000, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a2f6465762f696e7075742f6d69636500203030303336303238373937303138393633393638203608616639353700f2223210b7c3f0402d0a8ab1a99f825962eb1f13e5930da32c12427f1350c1d6f71611861a7911570a2bc15dc694d7fe22a90cd7dfb5e773a80b13ac903c3c6f95ac154531911b816e2a89430a09452818044426d669dedf39334dfcfefba71679bf731a058cf22304168c8c8683f9c5868db480f529d4551425415b8a3a4e920c9315d10c45f760c6cedab3a759a06fb18cb3b38d27d3059e577f82c95f7d4b9c9bff916272df84ac05d4d2fdb5cbe4071b88505a49ab389ebfff03000000000000174984b26b9c4950784f80fcf1c9fe1b"], 0x41, r3) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:50:53 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/dlm-control\x00', 0x382, 0x0) r1 = socket(0x10, 0x803, 0x3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e40)={0x28, r2, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0xffffffffffffffc1}, @TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "f7c0b86622e2614c775e69b5949a1f5b99c3aeb5"}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000f2", @ANYRES16=r2, @ANYBLOB="000026bd7000fedbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44824) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000003e00)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="b0002b10", @ANYRES16=r2, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) read$FUSE(r5, &(0x7f0000001a80)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r9 = mq_open(&(0x7f0000003b00)='{,#-]\xbc:}+[/#-^+\x00', 0x0, 0x8, &(0x7f0000003b40)={0x1, 0x80000000, 0x6, 0xfffffffffffffffa}) ioctl$CAPI_INSTALLED(r7, 0x80024322) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000003bc0)={0x184, 0x1, 0x4, 0x70000, 0x40, {0x77359400}, {0x4, 0x8, 0x7f, 0xde, 0x3, 0x4, "74533bb2"}, 0x800, 0x4, @fd=r7, 0x8, 0x0, r7}) splice(r9, &(0x7f0000003b80)=0x7, r10, &(0x7f0000003c40)=0x3, 0xe271, 0xb) write$FUSE_DIRENTPLUS(r5, &(0x7f0000003ac0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0xb0) 15:50:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:53 executing program 1: getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x0, 0x39a9}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x9002, 0x0, 0x1, 0x0, 0x0, 0xb90}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x1, 0x0, 0x7, 0x1, 0x7}}) ftruncate(r2, 0x200005) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:50:53 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x3, 0x70, 0x0, 0x0, 0xfe, 0x36, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0xd87404ca482e4d6, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r4 = memfd_create(&(0x7f00000002c0)='K\xde\xeb\xc2}]b\x95m|^\xee0z\x85\xb5\xb5S\xf4P\x9bG\x8c$\xee#9\xda\xf7\xa2y\x16\xbe\x9e-\xb7[\x96h\xdb\xd0+\x9f\r\x1c\xfd\x958w\x1e\xcf\xf7\xf4\x1b\tQ\x9f\x82\xd7\xc7Rd\xab\xc7\v\xe6\xc7\x87^\xdf\xdd\xc7s\xaf\x9f\xc6\x9f\x06,f\x9f\xba\x1c\x90\xd2w\xb6 \xa5\x87=\xfa\x04\xf8!\xfe\xa6\x17N\xc2\xaand\x85N\xaf\xd0!\xcd\xce4R\xad\xd1\xaa>!\xea\x00\x00\xc3\x9e\xef\a\xff\x00\x00\x00\x00\x00\x00\xa1\xb3\xfa\x81\xb5\x00\x00\x00\x00#\\\x94\x91\x04\xaf7\x9b\xaf\xec\x9d\xa9\f\xa5\x16\x12&\b-\x93`\xfe\xde3\x94\x99\xc9\xcb\x99\xa6\xef\xaa_\xec\xe1+\xcd\x00\x1d\xd2:q\xd6\xdd\x82\xc9\xc1\x8b{\xf5\xa8qBNlde8\xec\x00\xcf\x06o\xa6\xd3kv\xa7\xaa\x8f\xab\xebW\xd3\xa4', 0x0) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56942c568f95d22467190ba406d59a5958d6f156c9c8a2aaeb53451af0ac47e0000000000200000f8bf54da33", 0x3f0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) pread64(r4, &(0x7f00000001c0)=""/59, 0x3b, 0x1) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x4ed8, 0x9e, 0x78e, 0x80000000, 0xfffff001, 0xc3, 0x7, 0xfffffff7, 0x0, 0x3f, 0xfff, 0x2, 0x3a10, 0x101, 0x10001, 0x9, 0x2, 0x7f, 0x8, 0x9eb3, 0x401, 0x4, 0x8000, 0xee19, 0xab7, 0x0, 0x3ff, 0x1, 0x9, 0xfffffffa, 0x80000000, 0xa0]}) r5 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) read$dsp(r5, &(0x7f0000000500)=""/170, 0xaa) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) pwritev(r2, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000100)}, {&(0x7f00000008c0)="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", 0xf1a}, {&(0x7f0000000080)="798ec4e83d5bf97f0075667c77d8", 0xe}, {0x0}, {&(0x7f0000000780)="221e34166a265d4ac8c0b43a213cb047a4e4a8fc730c7b7879da4a0944a6e1222ee792f27f2eae54debf38aff9f6f3ffde6d", 0x32}], 0x6, 0x80805, 0xfffffffc) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xfffffffe, 0x1, 0x16, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd2042040000000200", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab", [0x712dce36]}) 15:50:53 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x3fa) [ 788.149855][ T7379] usb 4-1: USB disconnect, device number 2 [ 788.244879][T21935] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.262208][ T28] audit: type=1800 audit(1598802653.527:46): pid=21936 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15796 res=0 errno=0 15:50:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0xb33b, 0x9, 0x4, 0x10040, 0x101, {0x77359400}, {0x5, 0x2, 0x80, 0x1b, 0x52, 0x4f, "e696b697"}, 0x5, 0x3, @userptr=0x7ff, 0x80, 0x0, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506008020000000000000000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000801100250137b100000000000010000000", @ANYRES32=r11], 0x20}}, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0xc55f) 15:50:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 788.313473][T21935] device ip6gretap1 entered promiscuous mode [ 788.339986][ T28] audit: type=1800 audit(1598802653.557:47): pid=21936 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15798 res=0 errno=0 [ 788.715882][ T7379] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 788.746192][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.756387][T21937] __nla_validate_parse: 1 callbacks suppressed [ 788.756398][T21937] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 788.776846][T21960] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 15:50:54 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=""/39, 0x27}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x45d00, 0x80000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000e1", @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf25030000000c00080008000000000000000c000200df3b00000000000008000100000000000c10080009000000000000000c00050000800000000000000000000001000000000000002400078008000100", @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="4c00ab3b"], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) getpgid(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) sched_rr_get_interval(r4, &(0x7f0000000100)) unshare(0x600) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) [ 788.884513][T21961] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 788.894432][T21952] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:50:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) r0 = gettid() ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10d000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x50a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x4, 0x1}, 0x0, 0xfffffffffffffffc, r2, 0x0) close(r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x12b4}, 0x1, 0x0, 0x0, 0x20008055}, 0x4000040) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0xf2) ioprio_set$pid(0x1, 0x0, 0x2007) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x37cb1133) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000a80)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y'], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\x91\xe4\x84\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0C <\x00\x00\x00\x00\x00\x00\xb8\x7f+\x94L\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecy', &(0x7f00000003c0)='[\xa3\xb25\xf8\xb6md5su\x00']) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0x10001, 0x2, 0x4, 0x0, 0x80000000, {}, {0x3, 0x0, 0x0, 0x8, 0x7, 0x7, "d20de694"}, 0x5, 0x2, @fd, 0x10000}) ptrace$setopts(0x4206, r0, 0x0, 0x0) 15:50:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 788.943035][T21960] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 15:50:54 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x3fc) [ 789.005505][T21961] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 789.103451][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.147073][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.187606][ T7379] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 789.229122][T22024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 789.240649][ T7379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.257227][T22024] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 789.266283][T22024] device ip6gretap1 entered promiscuous mode [ 789.288295][ T7379] usb 4-1: config 0 descriptor?? [ 789.302987][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.642578][ T7379] usbhid 4-1:0.0: can't add hid device: -71 [ 789.666863][ T7379] usbhid: probe of 4-1:0.0 failed with error -71 [ 789.705686][ T7379] usb 4-1: USB disconnect, device number 3 [ 789.782931][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.102584][ T7379] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 790.462597][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.473563][ T7379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.485366][ T7379] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 790.495403][ T7379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.505154][ T7379] usb 4-1: config 0 descriptor?? [ 790.822642][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.282471][ T7379] usbhid 4-1:0.0: can't add hid device: -71 [ 791.288721][ T7379] usbhid: probe of 4-1:0.0 failed with error -71 [ 791.297390][ T7379] usb 4-1: USB disconnect, device number 4 [ 791.862893][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.042358][ T12] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 792.343441][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.452470][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.463543][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.475160][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 792.485232][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.498371][ T12] usb 4-1: config 0 descriptor?? 15:50:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$CHAR_RAW_IOMIN(r3, 0x1278, &(0x7f00000001c0)) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000140)={0xffffffffffff0001, 0x100000000, 0x2, 0x0, 0x0, [{{}, 0x7}, {{}, 0x35be}]}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:50:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ff, 0x0) socket$inet(0xa, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f000027d000/0x3000)=nil, 0x3000) getrandom(&(0x7f0000000040)=""/77, 0x4d, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 15:50:57 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x1, 0x2) fcntl$notify(r4, 0x402, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 15:50:57 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @timestamp={0x11, 0x11, 0x0, 0x0, 0x0, 0x2}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000040)={@dev={[], 0x2c}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@arp={0x806, @generic={0x320, 0x1b, 0x6, 0x6, 0x0, @local, "8b82d9c55c4b", @broadcast, "54d6f3ac5921666ac8e09046"}}}}, 0x0) 15:50:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:57 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x500) [ 792.661583][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 792.692803][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 792.700191][ T12] usbhid: probe of 4-1:0.0 failed with error -71 15:50:58 executing program 4: io_getevents(0x0, 0x7, 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) read$fb(r2, &(0x7f0000000080)=""/113, 0x71) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x800) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) [ 792.744533][T22072] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 792.754550][ T12] usb 4-1: USB disconnect, device number 5 15:50:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff02000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 792.805620][T22072] device ip6gretap1 entered promiscuous mode [ 792.902607][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:50:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff04000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 793.172443][ T12] usb 4-1: new high-speed USB device number 6 using dummy_hcd 15:50:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff08000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 793.484096][ T12] usb 4-1: device descriptor read/64, error 18 15:50:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0e000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:50:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ff, 0x0) socket$inet(0xa, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f000027d000/0x3000)=nil, 0x3000) getrandom(&(0x7f0000000040)=""/77, 0x4d, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 793.912692][ T12] usb 4-1: device descriptor read/64, error 18 [ 793.942842][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.194659][ T12] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 794.502549][ T12] usb 4-1: device descriptor read/64, error 18 [ 794.922233][ T12] usb 4-1: device descriptor read/64, error 18 [ 794.984737][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.042299][ T12] usb usb4-port1: attempt power cycle [ 795.384277][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x200, 0x0) move_mount(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x20) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:51:00 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x600) 15:51:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0f000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:00 executing program 1: socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="74000000010000000000000024c3e17068713e32bed1438f35c11acae41a448924777430132bcc22220417b243133ee489b65ddd8b5ed0765088498200ba185c0d16758c31dedd5dcd5b1dd1a084b2f935bb5402d8470aca71f220130f45df4bcc390ea9d54fc56cb75d0700978f3471077486adec3b8a358cf1f2723e43df9335b61b838e151ab7b0118b2974034ed47c15829c3ccc77", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf2520000000080001000400020000000c00990008000000ffffffff08000100030000000c009900040000000200000008000100010000000c00990006000000040000000c009900050000000300000008000300000000000000", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40040040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=@newlink={0x88, 0x10, 0xc3b, 0x0, 0xfffffffe, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10000}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 15:51:00 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x6, 0x10202) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x401) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4020744f, &(0x7f0000000000)) [ 795.727953][T22143] IPVS: ftp: loaded support on port[0] = 21 [ 795.772997][T22149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff60000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400d050132400000000001090224000100000000090400000103010000092100000001222fc24be181030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5, 0xe7, 0x67, 0x0, 0x8086, 0x110, 0x4a6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfe, 0x75, 0x3e}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x7, {0x7, 0x0, "5ca18b17cf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 795.829156][T22149] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 795.868272][T22149] device ip6gretap1 entered promiscuous mode 15:51:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1ffffffff0000000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 796.033477][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff26030000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 796.192157][ T12] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 796.226947][ T8181] usb 5-1: new high-speed USB device number 23 using dummy_hcd 15:51:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000e0000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 796.412946][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.446524][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:51:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffffc00e0000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 796.478752][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 796.504372][T22151] IPVS: ftp: loaded support on port[0] = 21 [ 796.534096][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.578067][ T12] usb 4-1: config 0 descriptor?? [ 796.602364][ T8181] usb 5-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 796.625482][ T8181] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.648469][ T8181] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 796.660267][ T8181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.671681][ T8181] usb 5-1: config 0 descriptor?? [ 796.734349][ T8181] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 796.935858][ T8181] usb 5-1: USB disconnect, device number 23 [ 796.953201][ T12] usbhid 4-1:0.0: can't add hid device: -71 [ 796.959266][ T12] usbhid: probe of 4-1:0.0 failed with error -71 [ 796.998162][ T21] tipc: TX() has been purged, node left! [ 797.013083][ T12] usb 4-1: USB disconnect, device number 8 [ 797.030172][ T21] tipc: TX() has been purged, node left! [ 797.066418][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.432071][ T12] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 797.462252][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.492123][ T8181] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 797.792793][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.812170][ T12] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.824021][ T12] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 797.834359][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.844838][ T12] usb 4-1: config 0 descriptor?? [ 797.858525][ T8181] usb 5-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 797.884006][ T8181] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 797.912025][ T8181] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 797.921113][ T8181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.934239][ T8181] usb 5-1: config 0 descriptor?? [ 797.993143][ T8181] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 798.103545][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.422130][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.966214][T22150] udc-core: couldn't find an available UDC or it's busy [ 798.973339][T22150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 799.153943][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.222026][ T12] uclogic 0003:5543:006E.0040: failed retrieving string descriptor #100: -71 [ 799.230951][ T12] uclogic 0003:5543:006E.0040: failed retrieving pen parameters: -71 [ 799.252123][ T12] uclogic 0003:5543:006E.0040: failed probing pen v1 parameters: -71 [ 799.260412][ T12] uclogic 0003:5543:006E.0040: failed probing parameters: -71 [ 799.268128][ T12] uclogic: probe of 0003:5543:006E.0040 failed with error -71 [ 799.280406][ T12] usb 4-1: USB disconnect, device number 9 [ 799.566072][T18992] usb 5-1: USB disconnect, device number 24 [ 799.981901][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 800.183871][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.373744][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.384994][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.395162][ T23] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 800.404468][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.420042][ T23] usb 4-1: config 0 descriptor?? 15:51:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000010003f08000000000000000000180000", @ANYRES32=0x0, @ANYBLOB="000000000000000044001a80080002800400018038000280340001800800190000000000080016000000000008001a0000fcbe1c51fd000000000000beda9384eb43b8ee17fe2d810800000000000000080000000008001b000000"], 0x6c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 15:51:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000f0000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:05 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x612) 15:51:05 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x395c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db982000", @ANYBLOB="d7c82270c144968f8bea16789002fd676780fbf3e7f0ffcfb9fcb6984c51e7a013ae36eb787ecac8c5f32cc2b1fc3a39b6fa4ebf2aa3adaa11b7f4b3fa9edfd4b3ec13d091662d36e288f70f28ff6498cd1b12cb702859dc531a42b17a868c10092145518ee5f59ac970629ee6a74527fd4f47c3d6f7f53bd723d0417cb24acb2b4b6c882a58463b7fac1c6215781d3d025b2beb80677d0e70d6d5b0e11d3cde0bcdc0fa8830723629e6f664aeb3b781b2628f3dbb8607074410df1385d1fde7dcbdedaaed"], 0x1c2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/btrfs-control\x00', 0x28000, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x9, 0x3f, 0x9c, 0x1, 0x0, 0x80000001, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xc}, 0x40800, 0x7, 0x2, 0x9, 0x80000000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x410000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008801}, 0xc0c0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000200)={0x1, 0x7}) 15:51:05 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xed, @string={0xed, 0x3, "f2966c38da82f7376d7ec0ccb2b3003370e955c34b1f5134708700a54fbcfa30dab7fdaf01bf2f1d6e68283734b816a12bb7974b53fb735a80898c647fc42d575d0f3c556de8d38cf3196a6852ed2190f7ca8903e6ce5967b8e0d4e08a5343064da25d90a7f0220da1eeeb18f1c96d95d67250468a7bdaeab1b7416f87da84725f58b6a869583f2607059998cc8978ed7a434fdd090dcb8bb458badc355cee76e2987a7197a3da4fdca213b75c9bdf839463973efbcd8431eb3399fddfd85b814f387fad6ef2940d08de0962c844db989412433210734b7e1cd3794333c04127d1972997691d4095bdce7b"}}, 0x0, 0x0, 0x0}, 0x0) 15:51:05 executing program 4: pipe(0x0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CHAR_RAW_RRPART(0xffffffffffffffff, 0x125f, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x8000, 0x9ea, 0x101, 0x8, 0x200, 0x7ff, 0x9, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4000000, 0x2b, 0x1ff, 0x7, 0x7}}, &(0x7f0000000000)=0xb0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x68, r2, 0x409, 0x0, 0x800000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}]}, 0x68}}, 0x0) [ 800.586740][T22298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 800.622402][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 800.628505][ T23] usbhid: probe of 4-1:0.0 failed with error -71 15:51:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff03260000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 800.670039][T22298] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 800.687953][ T23] usb 4-1: USB disconnect, device number 10 [ 800.701162][T22298] device ip6gretap1 entered promiscuous mode [ 801.020321][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 801.031270][T22300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:06 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000e0000000000000000000000852400002c0000009500000000000000", @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x5, 0xff4, &(0x7f0000000700)=""/4084, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x208040, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x9, 0x4}, 0x0, 0x0, &(0x7f0000000240)={0x81, 0x10, 0x7, 0xff65}, &(0x7f0000000280)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x1}}, 0x10) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0xe303, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x80}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) [ 801.067692][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 801.235396][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.248018][T22308] team0: Port device veth7 added 15:51:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00600000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xb1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r2, r1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x10400) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) [ 801.334537][T22336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 801.361938][ T23] usb 4-1: device descriptor read/64, error 18 15:51:06 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x700) 15:51:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001040)={0x0, 0x8000, 0x7fffffff, 0x401, 0x100, 0x4, 0x4, 0x7, {0x0, @in={{0x2, 0x4e20, @remote}}, 0xfffffc00, 0xa000000, 0x2, 0xfffffffe, 0x9}}, &(0x7f0000000040)=0xb0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4}, 0x3c) [ 801.462063][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:06 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x395c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r2 = signalfd4(r0, &(0x7f0000000200)={[0x1010000]}, 0x8, 0x0) write$binfmt_misc(r1, 0x0, 0x1c2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8090) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000000000000000000c005264efb9fc78a52d2eb522642e17a6adb2c29361b69c24eb73ebb658e673efc", @ANYRES32=r6, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000003c0)={{0x2, 0x20}, 'port0\x00', 0x27, 0x140020, 0x7, 0xfff, 0x8000, 0x0, 0xaa0b, 0x0, 0x6, 0x7}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) bind(r8, &(0x7f00000002c0)=@sco={0x1f, @none}, 0x80) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x410, 0x300}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x801) write$binfmt_misc(r2, 0xffffffffffffffff, 0x0) 15:51:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0ec00000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000017c0)=ANY=[@ANYBLOB="84110000100013070000000000000000fe880000000000000000000000000001ac1e000100000000000000001fe4686b000f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffff000000000000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffff00000000000000000000000000000000000000000000000000000000000200000000000000000000004c0014006469676573745f6e756c6c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000481002"], 0x1184}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth1\x00', {'veth0_to_team\x00'}, 0x4}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@local, 0x1, 0x0, 0x1, 0xd, 0x2}, &(0x7f00000000c0)=0x20) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 801.561119][T22357] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 801.625190][T22357] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:51:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x11be, 0x10000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000003c0)) r2 = socket$netlink(0x10, 0x3, 0x0) fsync(r1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010001fff81140500eaffffff30470600", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800800030009000000080007000000000008000400ff010000"], 0x4c}}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000200)={0x1c, 0x4, 0x300, 0x7f, "a3914776bf160fa01d787f6a89bddc07b88659f9a1e59cd6297cb714c25a4fc7"}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x168, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'ip6gre0\x00', {}, 'veth0_vlan\x00', {}, 0x0, 0x2f}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, "94a5"}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000100)={0x0, r5}) [ 801.686159][T22357] device ip6gretap1 entered promiscuous mode [ 801.781876][ T23] usb 4-1: device descriptor read/64, error 18 [ 801.888001][T22374] Unknown ioctl 1076380932 [ 802.051883][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 802.159907][T22373] (unnamed net_device) (uninitialized): up delay (511) is not a multiple of miimon (9), value rounded to 504 ms [ 802.230239][T22417] (unnamed net_device) (uninitialized): up delay (511) is not a multiple of miimon (9), value rounded to 504 ms [ 802.262439][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.276315][T22374] Unknown ioctl 1076380932 [ 802.361740][ T23] usb 4-1: device descriptor read/64, error 18 [ 802.781731][ T23] usb 4-1: device descriptor read/64, error 18 [ 802.902978][ T23] usb usb4-port1: attempt power cycle [ 803.312798][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00f00000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:08 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000005c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x4000, 0x3c, 0x6}, 0x18) fcntl$setstatus(r0, 0x4, 0x40000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)="f6", 0xffffffe7, 0xc000, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f00000004c0)=""/190, 0xbe}], 0x4, 0xb3, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/oss_mixer\x00', 0x26000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000240)={0x6, 0x18, [], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0]}) r3 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) write$FUSE_POLL(r4, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x3}}, 0x18) mmap(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x1000003, 0x28011, r3, 0xe7fab000) 15:51:08 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x41, r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x148802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, r2, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) 15:51:08 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x900) 15:51:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000070000000000000000004500001400000000002f907800000000ac"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000058000000000000af0f00000000000007ff04000000ffffffff"]}) [ 803.636114][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 803.695025][T22435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "4ce457", "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"}}, 0x110) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x2000008, 0x100010, 0xffffffffffffffff, 0x82000000) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000100)={0x0, r4}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000040)={r4, 0xc9}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r3, 0x1, 0x6, 0x9}) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4) syz_usb_control_io(r2, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:51:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00400300000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 803.789440][T22435] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 803.789491][T22432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.802289][T22435] device ip6gretap1 entered promiscuous mode [ 803.841365][T22432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.893950][T22432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.941859][ T7379] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 803.965652][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.982292][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00034000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 804.008148][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.033592][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.047925][T22440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:09 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000005c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x4000, 0x3c, 0x6}, 0x18) fcntl$setstatus(r0, 0x4, 0x40000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)="f6", 0xffffffe7, 0xc000, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f00000004c0)=""/190, 0xbe}], 0x4, 0xb3, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/oss_mixer\x00', 0x26000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000240)={0x6, 0x18, [], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0]}) r3 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) write$FUSE_POLL(r4, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x3}}, 0x18) mmap(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x1000003, 0x28011, r3, 0xe7fab000) [ 804.131778][ T23] usb 4-1: device not accepting address 13, error -71 15:51:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1ffffffffffff000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 804.211749][ T7379] usb 5-1: device descriptor read/64, error 18 15:51:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000001000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 804.502698][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd 15:51:09 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xa00) 15:51:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000002000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 804.601583][ T7379] usb 5-1: device descriptor read/64, error 18 15:51:09 executing program 1: set_robust_list(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x40, 0x7537) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3f5, 0x0, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0xc044885) openat(r0, 0xffffffffffffffff, 0x200, 0x41) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000002000000d4f9bd000ba5b3476e355fbe8835ba8e2695c7aeceda164d8c0499e92cd446d1c6ec3a709642424fd3baf79fab9572469bbea4a2fc266f3e687ba4eb90b5a6f3c91800000000ac8adacf7f06b8926131a4b48c75f6f5278cf1f8db345658460f2c935f6b25d0b76c65cbbf65b16c29b8f0b50bd69c4f4f1daec972c1cf44ff436d0f5d5109ae3f36e06c2284"], 0xc9) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000180)='.ocgroup.net\x1esyz1\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 804.682512][ T23] usb 4-1: device descriptor read/8, error -61 [ 804.716988][T22478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 804.746978][T22478] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 804.777031][T22478] device ip6gretap1 entered promiscuous mode [ 804.834845][ T28] audit: type=1800 audit(1598802670.108:48): pid=22483 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15796 res=0 errno=0 [ 804.882956][ T7379] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 804.928067][ T28] audit: type=1800 audit(1598802670.198:49): pid=22485 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15798 res=0 errno=0 [ 804.972627][ T23] usb 4-1: device descriptor read/8, error -61 [ 805.098872][ T23] usb usb4-port1: unable to enumerate USB device [ 805.171618][ T7379] usb 5-1: device descriptor read/64, error 18 [ 805.591560][ T7379] usb 5-1: device descriptor read/64, error 18 [ 805.711811][ T7379] usb usb5-port1: attempt power cycle [ 806.421528][ T7379] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 806.591575][ T7379] usb 5-1: device descriptor read/8, error -61 15:51:11 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xa00) 15:51:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/igmp\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "0000010000000000000300"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x2) sendfile(r5, r3, 0x0, 0x6f0a77bd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:51:11 executing program 1: set_robust_list(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x40, 0x7537) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3f5, 0x0, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0xc044885) openat(r0, 0xffffffffffffffff, 0x200, 0x41) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000002000000d4f9bd000ba5b3476e355fbe8835ba8e2695c7aeceda164d8c0499e92cd446d1c6ec3a709642424fd3baf79fab9572469bbea4a2fc266f3e687ba4eb90b5a6f3c91800000000ac8adacf7f06b8926131a4b48c75f6f5278cf1f8db345658460f2c935f6b25d0b76c65cbbf65b16c29b8f0b50bd69c4f4f1daec972c1cf44ff436d0f5d5109ae3f36e06c2284"], 0xc9) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000180)='.ocgroup.net\x1esyz1\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 806.694824][ T28] audit: type=1800 audit(1598802671.968:50): pid=22502 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15796 res=0 errno=0 15:51:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="0d2e51dcfa6991f7311c120100fddc00004043556e0040000000000109de022400030008000409040000a403810000096c15c7e641e7722100000001c41f9ab97ba8af329d0dd378342af1507d"], 0x0) syz_usb_disconnect(r0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280)=0x6, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c0000000002010800000000000000000ed6f6f1fda9180aacffffff08000b007369700006000740000300000600074000030000480002800c00028005000100880000002c00018214000300fe8000000000000000000000000000bb14000400fc0000000000000000000000000000010c0002800500010088000000ef08bd3605f7b6b9df59e91ae9239183b9585fcd1ad3ca8310ee7a0a4c90716b2e61209873d58f0012b8a40bee44"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 15:51:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000004000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xb00) 15:51:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x14c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x895e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "c8e8475c55b362c19086242424739d3cae91731c3c"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "b68f7ae88c7d930706e26f1f07e17244ac6afeed43b0c03d7b71d92439b515a35782862f"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x3e}, 0x2a8}}, 0x0, 0x0, 0x1d, 0x0, "8cac74438dc17429270f1d513ebeb53dee6a46824b91f06057bba1a17072e5d54035ecd056ca1ee32856ee37a1fa9d8df3dd86853d8d1980682330956d5866698e4df7d55d086de8f69a80e049256250"}, 0xd8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 806.788478][T22506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 806.818909][ T7379] usb 5-1: device descriptor read/8, error -71 [ 806.881123][T22506] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 806.928948][T22506] device ip6gretap1 entered promiscuous mode 15:51:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000008000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:12 executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r0 = socket$inet(0x2, 0x5, 0xb4) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x334, 0x9, 0x80000000}, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r2 = signalfd(r1, &(0x7f00000000c0)={[0x2]}, 0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) read$eventfd(r2, &(0x7f00000001c0), 0x8) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x40000) ioctl$SNDCTL_TMR_METRONOME(r3, 0x40045407) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x2c000, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x80, 0x7, 0x1}}) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0xfffff1d6, 0x9}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000300)={0xfffff47b, [0x1000, 0x4, 0x7], [{0x0, 0x1}, {0x7, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x73a8, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0xef4, 0xfffffff9, 0x0, 0x1, 0x1}, {0x45, 0x1f, 0x1, 0x1, 0x1, 0x1}, {0x80000000, 0xffff3c1a, 0x1, 0x0, 0x1, 0x1}, {0x5, 0xc43f, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x101, 0xe88, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x1, 0x1}], 0x20000}) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000400)) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000440)=""/184, &(0x7f0000000500)=0xb8) r6 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$sock_ifreq(r6, 0x8926, &(0x7f0000000580)={'vlan0\x00', @ifru_settings={0x999, 0x5, @sync=&(0x7f0000000540)={0x5, 0x3, 0x5}}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x4, 0x0, 0x17}, 0x10) [ 807.221964][ T17] usb 4-1: new high-speed USB device number 15 using dummy_hcd 15:51:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000e000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:12 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0xff, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x3b, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x34000}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 15:51:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000f000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 807.480908][T22550] net_ratelimit: 88 callbacks suppressed [ 807.480917][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.503759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.516300][ T17] usb 4-1: device descriptor read/64, error 18 [ 807.623188][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.680581][ T2883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.719974][T22524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 807.739531][T22524] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 807.749479][T22524] device ip6gretap1 entered promiscuous mode [ 807.756427][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.796757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.824508][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.836038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.886974][T22550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.921519][ T17] usb 4-1: device descriptor read/64, error 18 [ 807.929519][T22549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.191725][ T17] usb 4-1: new high-speed USB device number 16 using dummy_hcd 15:51:13 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xa00) 15:51:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000326000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:13 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 808.452210][T22581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 808.465558][T22581] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 808.465599][T22581] device ip6gretap1 entered promiscuous mode [ 808.472664][ T17] usb 4-1: device descriptor read/64, error 18 [ 808.861480][ T17] usb 4-1: device descriptor read/64, error 18 [ 808.981576][ T17] usb usb4-port1: attempt power cycle [ 809.711295][ T17] usb 4-1: new high-speed USB device number 17 using dummy_hcd 15:51:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28000000) r2 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r2, &(0x7f0000000240), 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$apparmor_current(r4, &(0x7f0000000380)=@hat={'permhat ', 0x1, 0x5e, ['\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', '\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', '\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%']}, 0x20a) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}]}}}]}, 0x3c}}, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_access\x00') 15:51:15 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 15:51:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xc00) 15:51:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000060000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:15 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x50000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) [ 809.907582][ T17] usb 4-1: device descriptor read/8, error -71 [ 809.972914][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 810.020705][T22608] IPVS: ftp: loaded support on port[0] = 21 [ 810.022015][T22610] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:51:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffffffffff9e000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 810.074397][T22610] device ip6gretap1 entered promiscuous mode [ 810.151401][ T17] usb 4-1: device descriptor read/8, error -71 15:51:15 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000ec0000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1ffffffffffffff0000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 810.641252][ T17] usb 4-1: new high-speed USB device number 18 using dummy_hcd 15:51:15 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00f0ffff000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 810.762553][T22633] IPVS: ftp: loaded support on port[0] = 21 [ 810.872454][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.932788][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.980399][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 811.013840][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.058647][ T17] usb 4-1: config 0 descriptor?? [ 811.111628][ T345] tipc: TX() has been purged, node left! [ 811.401439][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 811.407951][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 811.430212][ T17] usb 4-1: USB disconnect, device number 18 [ 811.931187][ T17] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 812.350307][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.364791][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.381449][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 812.390613][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.419291][ T17] usb 4-1: config 0 descriptor?? [ 813.151688][T18992] net_ratelimit: 9 callbacks suppressed [ 813.151697][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.197510][ T17] usb 4-1: string descriptor 0 read error: -71 [ 813.231288][ T17] uclogic 0003:5543:006E.0041: failed retrieving string descriptor #200: -71 [ 813.243036][ T17] uclogic 0003:5543:006E.0041: failed retrieving pen parameters: -71 [ 813.268346][ T17] uclogic 0003:5543:006E.0041: failed probing pen v2 parameters: -71 [ 813.276884][ T17] uclogic 0003:5543:006E.0041: failed probing parameters: -71 [ 813.291372][ T17] uclogic: probe of 0003:5543:006E.0041 failed with error -71 [ 813.302432][ T17] usb 4-1: USB disconnect, device number 19 [ 813.862607][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.931141][ T17] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 814.103434][ T0] NOHZ: local_softirq_pending 08 [ 814.181605][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.311126][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.322276][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.332152][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 814.341625][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.358334][ T17] usb 4-1: config 0 descriptor?? 15:51:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:51:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff7fffffff000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xc01) 15:51:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00f0ffff000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:19 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) 15:51:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xfd83a345bc717a63, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b5564e6ac851909cf99421f46b04fff0c935433e6691f8b25bee7df03b08db40ba7", 0x8d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x29) ptrace$setsig(0x4203, 0x0, 0x4, &(0x7f0000000100)={0x3f, 0x6, 0x8}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000002c0)=""/4096) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000001300)=0xfffffff8) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x1000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x4, 0x100000001}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000012c0)={r2, 0x0, 0xfff}, 0x10) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ptrace$cont(0x9, r0, 0x0, 0x2) [ 814.651491][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 814.658031][ T17] usbhid: probe of 4-1:0.0 failed with error -71 15:51:20 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000002d000b05000000ef1b1ea6c9d6ff63a5", @ANYRES32, @ANYBLOB="00000014f1fbffffffffffff08000100736ecc5f2da0de6e09ef092bd4ac3f36bb392d9738e82e29a795f491108cc6fffeedfcd2f9"], 0x74}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1a8, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x803d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff1398}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @loopback}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffc00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x70000}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x2008055}, 0x800) socket$caif_seqpacket(0x25, 0x5, 0x4) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x240000, 0x62, 0x10}, 0x18) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000440)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}, 0xc) 15:51:20 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) [ 814.722643][ T17] usb 4-1: USB disconnect, device number 20 15:51:20 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xe00) 15:51:20 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) sysinfo(&(0x7f0000000080)=""/131) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x404400, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0xc0045002, &(0x7f0000000000)=0xffffffff) 15:51:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff9effffff000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 814.852864][T22778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 814.890457][T22778] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:51:20 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) [ 814.910152][T22780] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 814.937963][T22778] device ip6gretap1 entered promiscuous mode [ 815.150974][ T17] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 815.348298][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.521263][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.538107][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.557969][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 815.567603][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.582298][ T17] usb 4-1: config 0 descriptor?? [ 815.921045][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 815.927226][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 815.936815][ T17] usb 4-1: USB disconnect, device number 21 [ 816.401050][ T17] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 816.421953][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.661127][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.791090][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.802160][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.812222][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 816.821462][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.836803][ T17] usb 4-1: config 0 descriptor?? [ 816.901390][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.461020][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.190867][ T17] uclogic 0003:5543:006E.0042: failed retrieving string descriptor #100: -71 [ 818.199703][ T17] uclogic 0003:5543:006E.0042: failed retrieving pen parameters: -71 [ 818.220792][ T17] uclogic 0003:5543:006E.0042: failed probing pen v1 parameters: -71 [ 818.228917][ T17] uclogic 0003:5543:006E.0042: failed probing parameters: -71 [ 818.236590][ T17] uclogic: probe of 0003:5543:006E.0042 failed with error -71 [ 818.246760][ T17] usb 4-1: USB disconnect, device number 22 [ 818.501200][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.960802][T18992] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 819.320827][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.332474][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.342496][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 819.351648][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.360572][T18992] usb 4-1: config 0 descriptor?? 15:51:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="050005c444daa9844617ddc64e9735944ffc4ea35bcceca32524f0e34380e62ad838fd0c85c887e8673e155b"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:51:24 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) 15:51:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1ffffffff0ffffff000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:24 executing program 1: syz_usb_connect(0x3, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfc, 0x7e, 0x1b, 0x40, 0x1b80, 0xe309, 0x4b96, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x1, 0x1}}]}}, 0x0) 15:51:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xec0) 15:51:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="850000000700000035000000020000009500000000000000180000000400000000000000ffffffff850000000b00000095000000000000005684e12de273ae9297919517b7e667f0a149ec562bc3378dd4048305549b17ea1876c0b093839d22e8e2641d14d54351d3722ddcec03440ccd1690e9c78c4e3137853e424dc6982b526dc93755499c27f3af3063395fce40ab424f4da2bc0c789fcb57a0d4779368ed6dfeb01e17d52eb6c3b6ed0b8a0a8cf24328d79d2ee666b5"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc6, &(0x7f0000000380)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10}, 0x78) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4000c0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000040)) [ 819.541093][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.570489][T22860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 819.580860][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 819.589628][T18992] usbhid: probe of 4-1:0.0 failed with error -71 15:51:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d40402f04000000000010910240001090000200904000100090581030800"/50], 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x81, 0x2, 0x35}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x20, 0x8, 0x58, 0x40, 0x1}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "c405"}}, {0xb6, &(0x7f0000000640)=ANY=[@ANYBLOB="b60381b0bcb162feca1889498a8a234d623b46daec0e6c4fde3b983a687a3bfba716ab5c18b7d2dbac8bdb5fa666353075b925c80fe1530d57a1bb878e9384203f722f66b6f408c8009e3afdebbedf742f2605d6b72c6d9ee317d81ca7e211380e69de50fe41bdde27b717b14b29cae274cd016d16532aca4985300efef8e7140a8be8509be542ec10353632857fce352224b68ad204bbde0f05f8bb33316175d5f33eb1bdf912544f36df6041c0346f29e6e51608019e7d275aed5c96fd26992bdd051fda83ddf33871b6db2443cda9196b56322cc187258a297c181f4050debd3ece231b75f9dcee2a4980cc03368b2cce7b4392c174b0dd7ea27a6a13b94602e6"]}, {0x47, &(0x7f0000000440)=@string={0x47, 0x3, "1f22de03abb1111fc7132eab74c3cb4b2efc05ecd5e9569fd29a83e433479ba84b24967151830ca75b3c2edf194c553f3bf43d075668c5bd3644aab56b387d3fedf5291839"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf8dc}}, {0x8b, &(0x7f00000004c0)=@string={0x8b, 0x3, "210f7ce9240982a94870589617f8a0e915332fc2e7b8bce31bad227ae67c2fe72b79340132a278551ead9ec0f5fa47478704e8705d818908ad5cd596bd8eff36952ff6129f9d20a70ac5775dc43ab5465b7236cc4994ee3f51e1e688e23ee43a5de599475cdaae398b98e88b8673a113f09f836c52c879a5101e56b8f536edf24fa37688bae6b32829"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000080)={@remote, @empty}, &(0x7f0000000100)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="97") [ 819.616886][T18992] usb 4-1: USB disconnect, device number 23 [ 819.642155][T22860] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:51:24 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) 15:51:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000000"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 819.674633][T22860] device ip6gretap1 entered promiscuous mode 15:51:25 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) 15:51:25 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 819.901250][ T17] usb 2-1: new high-speed USB device number 10 using dummy_hcd 15:51:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00020000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 819.942760][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.010685][T18992] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 820.021614][ T8223] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 820.260864][ T17] usb 2-1: config 1 has no interfaces? [ 820.266494][ T17] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4b.96 [ 820.280758][ T8223] usb 5-1: Using ep0 maxpacket: 8 [ 820.290686][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.390916][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.410641][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.420500][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 820.467714][ T8223] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 820.470663][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.478134][ T8223] usb 5-1: can't read configurations, error -61 [ 820.557142][T18992] usb 4-1: config 0 descriptor?? [ 820.580940][ T17] usb 2-1: string descriptor 0 read error: -71 [ 820.590828][ T17] usb 2-1: USB disconnect, device number 10 [ 820.607245][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.660794][ T8223] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 820.930698][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 820.936870][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 820.951194][T18992] usb 4-1: USB disconnect, device number 24 [ 820.960696][ T8223] usb 5-1: Using ep0 maxpacket: 8 [ 821.151802][ T8223] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 821.159539][ T8223] usb 5-1: can't read configurations, error -61 [ 821.166405][ T8223] usb usb5-port1: attempt power cycle [ 821.410669][T18992] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 821.440654][ T5] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 821.620866][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.790891][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.800846][ T5] usb 2-1: config 1 has no interfaces? [ 821.801824][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.807305][ T5] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=4b.96 [ 821.819750][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 821.833193][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.836744][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.858232][T18992] usb 4-1: config 0 descriptor?? [ 821.900795][ T8223] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 821.990695][ T8223] usb 5-1: Using ep0 maxpacket: 8 [ 822.130716][ T5] usb 2-1: string descriptor 0 read error: -71 [ 822.144260][ T5] usb 2-1: USB disconnect, device number 11 [ 822.151013][ T8223] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 822.158771][ T8223] usb 5-1: can't read configurations, error -61 [ 822.330593][ T8223] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 822.420888][ T8223] usb 5-1: Using ep0 maxpacket: 8 [ 822.580703][ T8223] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 822.588521][ T8223] usb 5-1: can't read configurations, error -61 [ 822.597077][ T8223] usb usb5-port1: unable to enumerate USB device [ 822.660788][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.669079][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 822.680148][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 822.689401][T18992] usb 4-1: USB disconnect, device number 25 [ 822.980966][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.420582][ T5] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 823.708124][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.810578][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.822260][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.833349][ T5] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 823.843265][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.853693][ T5] usb 4-1: config 0 descriptor?? 15:51:29 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 15:51:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00040000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:29 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xf00) 15:51:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32, @ANYBLOB="caba49c4a24886d02e63be28e55bce79c9b17027eca8141a595c3bbbb27700882b9401862cd86add235e4e52fa58969a058bf9b7fa2309463e65655d1e07231b486b7147908bd701db2669c086e78908ea44abde443e55793d2a29b6ebedf8ff4a76b66efb03c1a555d473b9ba5024213fbccf74ec6293ff3ecad64c2928b20b44fcce8817bce946c6f8bbaff175b4b02a8eeeaf0e4ebe2a00b6dede1fc238bf1570344157988e67049c57dc3154138ed61c488f65200321b1ffb2a2fc19086f694d"], 0x3c}}, 0x0) 15:51:29 executing program 4: sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x15, 0x400, 0x70bd25, 0x25dfdbfc, {0x1e, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "7c2c9137acf4ea1122fe9afa7dce750d6b817a7ae3b28bce7f9130c838c19ad35c4ca291f7e660ba0bf13a7d701b047fef7c5c40442df199c0e1ccf2b78bee9e24407a1ab0884cbd12b49e6025f57a9a6a314ff512277c0fa7b31442565577c91ac818e00d0a14976a6614f8255ba3f558cacb0046d1458d4e0054eabe12686bccf4e2beaa2894f18a124b29c703afc1c7701e5bec0418c198e8"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x4000, 0x0, 0xfffffffe}}, 0x2e) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x400000000000085, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:51:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x25, 0x7, 0x15, @private1={0xfc, 0x1, [], 0x1}, @loopback, 0x1, 0x40, 0x4, 0x2}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x18, r3}) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_read(r4, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d80402f04000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_read(r5, 0x0, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xfffffffffffffedd, @lang_id={0xfffffffc, 0x3, 0x83e}}, 0x0, 0x0, 0x0}, 0x0) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/raw/rawctl\x00', 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) [ 824.052141][T22972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 824.070594][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 824.082426][ T5] usbhid: probe of 4-1:0.0 failed with error -71 15:51:29 executing program 4: sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x15, 0x400, 0x70bd25, 0x25dfdbfc, {0x1e, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "7c2c9137acf4ea1122fe9afa7dce750d6b817a7ae3b28bce7f9130c838c19ad35c4ca291f7e660ba0bf13a7d701b047fef7c5c40442df199c0e1ccf2b78bee9e24407a1ab0884cbd12b49e6025f57a9a6a314ff512277c0fa7b31442565577c91ac818e00d0a14976a6614f8255ba3f558cacb0046d1458d4e0054eabe12686bccf4e2beaa2894f18a124b29c703afc1c7701e5bec0418c198e8"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x4000, 0x0, 0xfffffffe}}, 0x2e) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x400000000000085, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 824.137125][T22972] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:51:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00080000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32, @ANYBLOB="caba49c4a24886d02e63be28e55bce79c9b17027eca8141a595c3bbbb27700882b9401862cd86add235e4e52fa58969a058bf9b7fa2309463e65655d1e07231b486b7147908bd701db2669c086e78908ea44abde443e55793d2a29b6ebedf8ff4a76b66efb03c1a555d473b9ba5024213fbccf74ec6293ff3ecad64c2928b20b44fcce8817bce946c6f8bbaff175b4b02a8eeeaf0e4ebe2a00b6dede1fc238bf1570344157988e67049c57dc3154138ed61c488f65200321b1ffb2a2fc19086f694d"], 0x3c}}, 0x0) [ 824.137166][T22972] device ip6gretap1 entered promiscuous mode [ 824.157421][ T5] usb 4-1: USB disconnect, device number 26 15:51:29 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) sendfile(r2, r1, 0x0, 0xedc0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c002fd600000f06030000000000000006000b0004000000060023b5edffffffffffe1000016860061c217bfa002c55bea32c62b3ccfa1db91c8dd3eecb65608d936a67039702dbb5787e94694db2d9735e21bc200817b170c7a2276e0f8966d6047c411db0444f99036e942978d29184dbd00"/127], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xedc0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000004", @ANYRES16=0x0, @ANYBLOB="010bffff400008000100", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r4, 0x29, 0x3, 0x42, 0x0, 0x0, @mcast1, @empty, 0x20, 0x40, 0x1, 0x4}}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)={0x1}, 0x8) sendfile(r5, 0xffffffffffffffff, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) 15:51:29 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 15:51:29 executing program 1: r0 = socket$inet6(0xa, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x8, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)={0xd0, 0xe, [], [@generic={0x17, 0x6f, "ec1a365a1abc55e44e4688a54ec6973144088798678356390b5de8bee8241eaac5bfd00995d93825eed8dc55fcbb56d25a3ad9b8c3a19e39e4cf822d04e5a352fd047d5b3853dfd2540d19e458fa0800ef5913cbe1e416b7d22d88c63c06b1e6bcd673f8613c80bcb4928bcbead4fe"}, @pad1]}, 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x140a, 0x8, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) 15:51:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000e0000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000f0000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 824.567721][ T5] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 824.950568][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.960644][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.968454][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:51:30 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1100) 15:51:30 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x100000000, 0x8000) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f00000002c0)={0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = dup2(0xffffffffffffffff, r1) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000100)=0x4) r6 = fsmount(r5, 0x1, 0x8) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000180)={0x2, 0x1}, 0x2) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:51:30 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 825.000410][ T5] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 825.009745][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.029111][ T5] usb 4-1: config 0 descriptor?? [ 825.103734][T23027] fuse: Bad value for 'fd' [ 825.112230][T23022] kvm: pic: non byte read [ 825.118901][T23022] kvm: pic: level sensitive irq not supported [ 825.119022][T23022] kvm: pic: non byte read [ 825.139799][T23022] kvm: pic: level sensitive irq not supported [ 825.139841][T23022] kvm: pic: non byte read [ 825.140207][T23022] kvm: pic: level sensitive irq not supported [ 825.140248][T23022] kvm: pic: non byte read [ 825.143663][T23022] kvm: pic: level sensitive irq not supported [ 825.143700][T23022] kvm: pic: non byte read [ 825.180462][T23030] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 825.184742][T23030] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 825.203657][T23030] device ip6gretap1 entered promiscuous mode [ 825.213606][T23022] kvm: pic: level sensitive irq not supported [ 825.213712][T23022] kvm: pic: non byte read [ 825.244264][T23022] kvm: pic: level sensitive irq not supported [ 825.244304][T23022] kvm: pic: non byte read [ 825.360523][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 825.360666][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 825.365950][ T5] usb 4-1: USB disconnect, device number 27 [ 825.880435][ T5] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 826.020554][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.028840][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.270541][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.290473][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.301596][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.311834][ T5] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 826.321288][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.332994][ T5] usb 4-1: config 0 descriptor?? [ 827.008668][T22979] udc-core: couldn't find an available UDC or it's busy [ 827.015800][T22979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 827.030929][T22979] udc-core: couldn't find an available UDC or it's busy [ 827.038049][T22979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 827.060437][ T5] usb 4-1: language id specifier not provided by device, defaulting to English [ 827.060443][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.490313][ T5] uclogic 0003:5543:006E.0043: failed retrieving string descriptor #200: -71 [ 827.499150][ T5] uclogic 0003:5543:006E.0043: failed retrieving pen parameters: -71 [ 827.529967][ T5] uclogic 0003:5543:006E.0043: failed probing pen v2 parameters: -71 [ 827.538506][ T5] uclogic 0003:5543:006E.0043: failed probing parameters: -71 [ 827.546522][ T5] uclogic: probe of 0003:5543:006E.0043 failed with error -71 [ 827.556859][ T5] usb 4-1: USB disconnect, device number 28 [ 828.110402][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.240203][T18992] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 828.630864][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.642086][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.653100][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 828.663111][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.673242][T18992] usb 4-1: config 0 descriptor?? 15:51:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x2}, 0xf) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:51:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0x8000, 0xfffe, 0x400, 0x56}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x101281) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x430c2, 0x0) ftruncate(r3, 0x200004) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x2, 0x81, 0x5, 0x800}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x4100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x340400, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r3}, 0x8) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x40800, 0x0) sendfile(r4, r5, 0x0, 0x10000) 15:51:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00600000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:34 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 15:51:34 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1200) 15:51:34 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) sendfile(r2, r1, 0x0, 0xedc0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c002fd600000f06030000000000000006000b0004000000060023b5edffffffffffe1000016860061c217bfa002c55bea32c62b3ccfa1db91c8dd3eecb65608d936a67039702dbb5787e94694db2d9735e21bc200817b170c7a2276e0f8966d6047c411db0444f99036e942978d29184dbd00"/127], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xedc0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000004", @ANYRES16=0x0, @ANYBLOB="010bffff400008000100", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r4, 0x29, 0x3, 0x42, 0x0, 0x0, @mcast1, @empty, 0x20, 0x40, 0x1, 0x4}}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)={0x1}, 0x8) sendfile(r5, 0xffffffffffffffff, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) [ 828.870310][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 828.878138][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 828.884157][T23092] fuse: Bad value for 'fd' [ 828.898728][T23091] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00f00000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 828.951110][T18992] usb 4-1: USB disconnect, device number 29 [ 828.990685][T23091] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:51:34 executing program 1: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x20000000, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) rename(0x0, &(0x7f0000000240)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0xff}, 'port0\x00', 0x28, 0x0, 0x0, 0x3, 0x1, 0x6, 0x0, 0x0, 0x2, 0x8}) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x800) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040), 0x10) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES16, @ANYRES32=r1, @ANYRES64=r5, @ANYRESOCT=r8], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00a\x00\x00\x00\"\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="455526e8445499d5823847d2b97af4031a321590e00a0a8beb0be70a3c3cf5ac59a1c850c88b2995c4cec821a3cb26effa103440fdc992e583983f0f0b483bb5a3748b809dcb7c9638815b35"], 0x28}}, 0x0) [ 828.990729][T23091] device ip6gretap1 entered promiscuous mode [ 829.060393][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.140410][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00260300000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:34 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 829.320170][T18992] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 829.449270][T23117] fuse: Bad value for 'fd' 15:51:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000e00000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:34 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 829.693948][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.719307][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.757973][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 829.757994][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.778820][T18992] usb 4-1: config 0 descriptor?? [ 830.110316][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 830.124850][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 830.157486][T18992] usb 4-1: USB disconnect, device number 30 [ 830.186035][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.580257][T18992] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 830.973814][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.985965][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.997755][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 831.007539][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.017209][T18992] usb 4-1: config 0 descriptor?? [ 831.220312][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.102017][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.260239][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.386676][T18992] uclogic 0003:5543:006E.0044: failed retrieving string descriptor #100: -71 [ 832.395851][T18992] uclogic 0003:5543:006E.0044: failed retrieving pen parameters: -71 [ 832.411295][T18992] uclogic 0003:5543:006E.0044: failed probing pen v1 parameters: -71 [ 832.419564][T18992] uclogic 0003:5543:006E.0044: failed probing parameters: -71 [ 832.435522][T18992] uclogic: probe of 0003:5543:006E.0044 failed with error -71 [ 832.447324][T18992] usb 4-1: USB disconnect, device number 31 [ 833.160020][T18992] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 833.300231][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.530485][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.547119][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.558235][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 833.571958][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.586017][T18992] usb 4-1: config 0 descriptor?? 15:51:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00'}) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:51:38 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1206) 15:51:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00c00e00000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x0, 0x400, {0x0, 0x0, 0x0, 0x0, 0x800, 0x41004}}, 0x20}}, 0x0) 15:51:38 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:38 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0xd47, @local, 0xfffffffe}, {0xa, 0x4e24, 0x4fc, @private0={0xfc, 0x0, [], 0x1}}, 0x489f, [0x4, 0x10000, 0x7, 0xffffffff, 0xffff5d00, 0x95, 0x7, 0x6]}, 0x5c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x900) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 833.758045][T23178] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000f50000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x68, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r5 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmmsg$alg(r5, &(0x7f0000000000), 0xb, 0x0) [ 833.800698][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 833.808022][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 833.832227][T23178] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 833.832267][T23178] device ip6gretap1 entered promiscuous mode 15:51:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000f00000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 833.841883][T18992] usb 4-1: USB disconnect, device number 32 15:51:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00c00e00000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:39 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00032600000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ff, 0x0) r0 = socket$inet(0xa, 0x0, 0x0) mlock(&(0x7f000027d000/0x3000)=nil, 0x3000) r1 = socket$l2tp(0x2, 0x2, 0x73) fstat(r1, &(0x7f0000000040)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00802, 0x0, 0x0, 0x0, 0x2000000000002) ioctl(r0, 0x3ff, &(0x7f0000000000)="788f030c087dbfcfcd9a6d7685fbc5f0a9a09d83b1e16e1467c4c0632c543e16178fb21d651b8eb0edfcacc62c") [ 834.269890][T18992] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 834.340319][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.489484][T23197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 834.660622][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.699835][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.743588][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 834.770375][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.784392][T18992] usb 4-1: config 0 descriptor?? [ 835.139898][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 835.146711][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.148148][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 835.164153][T18992] usb 4-1: USB disconnect, device number 33 [ 835.380190][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.630075][T18992] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 835.861746][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.989987][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.001195][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.013003][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 836.022945][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.037513][T18992] usb 4-1: config 0 descriptor?? [ 836.429922][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.390007][T18992] uclogic 0003:5543:006E.0045: failed retrieving string descriptor #100: -71 [ 837.398995][T18992] uclogic 0003:5543:006E.0045: failed retrieving pen parameters: -71 [ 837.418674][T18992] uclogic 0003:5543:006E.0045: failed probing pen v1 parameters: -71 [ 837.432460][T18992] uclogic 0003:5543:006E.0045: failed probing parameters: -71 [ 837.448649][T18992] uclogic: probe of 0003:5543:006E.0045 failed with error -71 [ 837.458684][T18992] usb 4-1: USB disconnect, device number 34 [ 837.477823][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.139693][T20233] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 838.180584][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.501564][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.503045][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.514104][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.530647][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 838.540811][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.550180][T20233] usb 4-1: config 0 descriptor?? 15:51:43 executing program 3: r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, &(0x7f0000000500)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000766603ac98"], 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x12, @string={0x12, 0x3, "f3ddd053dcfdab2ecb4187eacaf2e3f0"}}, 0x0, 0x0, 0x0}, 0x0) 15:51:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00006000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:43 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:43 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1300) 15:51:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/36, 0x24}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/65, 0x41}], 0x8, &(0x7f0000001840)=""/194, 0xc2}, 0xbf0c170e04ccc7a1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001980)='/dev/loop-control\x00', 0x101000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x150, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'macsec0\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'macvtap0\x00', {0x0, 0x0, 0x200, 0x0, 0x0, 0xec, 0x7}}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0xa}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x32b) 15:51:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ff, 0x0) r0 = socket$inet(0xa, 0x0, 0x0) mlock(&(0x7f000027d000/0x3000)=nil, 0x3000) r1 = socket$l2tp(0x2, 0x2, 0x73) fstat(r1, &(0x7f0000000040)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00802, 0x0, 0x0, 0x0, 0x2000000000002) ioctl(r0, 0x3ff, &(0x7f0000000000)="788f030c087dbfcfcd9a6d7685fbc5f0a9a09d83b1e16e1467c4c0632c543e16178fb21d651b8eb0edfcacc62c") [ 838.740724][T23276] xt_socket: unknown flags 0x8 [ 838.762584][T23280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 838.770170][T20233] usbhid 4-1:0.0: can't add hid device: -71 [ 838.779405][T20233] usbhid: probe of 4-1:0.0 failed with error -71 [ 838.822732][T20233] usb 4-1: USB disconnect, device number 35 [ 838.843924][T23280] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:51:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000ec000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x8000040000000088) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10, 0x29}], 0x10}}], 0x2, 0x8000) r1 = dup(r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@initdev}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@private2}}, &(0x7f0000000000)=0xe8) [ 838.843965][T23280] device ip6gretap1 entered promiscuous mode 15:51:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x201}, 0x20) ftruncate(r2, 0x200004) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x81, 0x0) sendfile(r0, r2, 0x0, 0x80001d00000a) 15:51:44 executing program 2: mknod$loop(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000f000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 839.399675][T20233] usb 4-1: new high-speed USB device number 36 using dummy_hcd 15:51:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00004003000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 839.669631][T20233] usb 4-1: device descriptor read/64, error 18 [ 839.797759][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.059521][T20233] usb 4-1: device descriptor read/64, error 18 [ 840.340993][T20233] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 840.649684][T20233] usb 4-1: device descriptor read/64, error 18 [ 840.819664][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.039554][T20233] usb 4-1: device descriptor read/64, error 18 [ 841.159685][T20233] usb usb4-port1: attempt power cycle [ 841.219837][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:47 executing program 3: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) 15:51:47 executing program 1: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000003e80)=[{{&(0x7f0000000100)=@can={0x1d, r0}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000180)="c13e2634b2fc7cb58c9b7b2bc878a46ab79dd2d5ddf2b9afa6c97da096d406cec426d27c28c53767d0e9a73d3cb00ca06184ed3e9cd0e534c1ee77afeba6931343470c47d488a2c5622fb1265f2d1cdad313ddc7f0cf48b1fdc72c86939e2793086d0597294b921fbece9223385b66b9113b39b07abdcf6552d8eefa7614b66b688830088ab02545a0829ed9a6e1ad27bcd7d0f0738df31e7fab1bd0373e07ae981ff442af7a407615a6ab1f0333e6c7b0c27b3e7ccfecdbef16bb1988d9f81e0f805a1cc9cd2cd7937c870556b78361537dc74be32e89b69d3cccd9f218d5aff691d47d2c17f5d189604a79c266cf1bb2a427367c3c9d4c525cbfb799d1dfff10294bf9a1e655bd209117b38c63ff166d40c99d9e806ccfab1511d39aecf73dca4890335a9d48399bd4f70be5ab87976ea98e4e3ceedcb40640db37e135904c5075cc89f1d9df8d0eda1cbadbe2ff656c99ded8d6e096c4eb57ced479cbfa3b457cdfd22598b456a49679f4bbcd0edc22534056e9c23cece073717960a818e915b9d92c8bf9d32c6f01966127fb5bc7f40fad7b65243844e98bbf9839a318502abdbed43fb998ed19b7baead421f2e02f8e2e3dee6e504c2770cf7e357dad6c62d4457fcc4dd42e8803297e0296d7d1bd2ec7246f2b9f5e60260cb6ad0edb00be2ebd1e5be6f549ebc8c512561a33e5a6f6b58035d7a048a1c685f1ab3ee3f907618cdb0279b7968931384dc46f7476996f01c7c904185abb984b931eacaf2f704f41ccb56d3c6214742951885d543812be7ccdb4e4a556a82620e2a7f0fe37a5e92cdaa94d68267be5444ccf6e3fbb9b937cb3d1ee9340f8944ad7b0d78bc1a393ce90d45295225f6683974d1e35b2d91752bcc5de475b1f223710c8c19bd202f5cf691b202a0cd587b1ae296c48796d02f776fd702e951ae6b18208ba0e9e0f0057820408ea9b749bb21ec5567eeb640784afa3886a96b5453e4e88fcb5fa4d34265789808d0e1ab99307d99b37bea79c85bf3c9bb2260677fe9f93b801405aee3752d494713fe1feffb3975b3698d88f1e30ab4f0474f50698fd505ec8cc049b3965fb754eb5ee4ce68824920593bb82a009abef54a7ad454ac026bd8d84f7f38cca95f6dbacd7429ea24aa10d02ac389b25fa3f23d99fe14d1c695e0c4acae73ca9e4a9b62fb6f29fe349760cb0dbcc1fa916469abb833b9cdd1dae6e50e5e68c1e9a27abb3d11048d63aafeef9016c316d1140224137713a1d83455bfffb694bac5a0d18e32f172d1cbb4f59097c91430c58f7d5304db1bf92e4b9b999ee3a8be950ddfe3d6f37a18c6408207b38eed82d629accd5f243702ce9c091c46844daa94758de0f2d2f3af91b97d8d74e8e8a0f1ac66d6d828c32f4aff1854c7880c810b910c721289cd8259bee80f64f08699c760dd95acba0963957b0ac605597635de9443d1d2caff16d1e433ef75a33d927d34bc17525bdcb1b06d1fe686801016c567f1eddabd6c34c57fe8f4bb3be18fbf634543cd2e3f94cb025a2cb306956f70bf0880fa165f4a4369d43b3417f67718185f157f63ce44b212c70131168a82223cddd24edbb88614d922507c0e7ae5622b382664c1da36683eadf5f494338e6da4da337b661c2c27bd87e6ebd7737ff91ff63c00a50f9d40db987fef3a96bed59c01e501592fe8e002475542c6bed5dd7e31df7d2ba0f5264f0c9c30e067ead80f8bd2b3c75dabd4a1e726adbba009f888fb4fe31643f02bab769dbcc1df8a53044d342f5333b5b60f76bf34f70f7c581e8a6e208d91ee0e0aa8c90f7a68a6ea560a94df67dbf5c8fd59c1068da4607e554daf3636afd7a69d33d8c2c808a62a8615adc2fb9c4a4b63e90a504edc13e0808a62454a9765605583eea39ea10ed906774353ad29791a7e6be7a5a4e9a02460f657e163a624503fe69484e7ae562e6d03ae0a4dcc508dd26bf2b96b271531278748b69377cae1fda171cfb4cb2434cfe5f59a9eac0ed0890ec8b97e4683326fe264219047d2c2188224855f9211ba9472f1ab3a933434b1a6963cb13528134f47ca18bb2701b3d6f745a3bb88988858397ee071b91490152e9ca303f738feea33af59c76935e03a61e6dd427675aada072e3155f81fa5213c1e66c102a509d057520f4b4c520151990592ddb5947a28025161aa96583e80026c47ed0d4ed0971369b9166a9a91c2099045443848d5fc46407229e63191142ab8c1ab68fa42915cfdc6961ad74963b8a0925cdfe7a4fd02acec12cce1144864f8ef2a38787fa6ac23fd6d10cee4153471311beac8446842d922d07a7808842f6c47c27a1b9ada846609e6ff7cbdadb8f272d971ec7d330551f612d84d3adae26cadb1448a878a13a323da2377013aa5c1df5eddb7323af0dc8a70da8b4ca653b63c8bc6aa2a19b9f255697f4556fbb2d7bcb7335754f1218695d1314bdae62773441e90eac3b07eae40cab821533e0b1320e68264edd91dbf0575f390f368114dce50b26f85a10617c340f348eb4d912b48fd7fd8411bb558bb3f243c6448a6ebdc51b39312bc077f7d029fbc974b2c434cafd7d55e5c79c72116b23f4c88e8b75bf55e30d1c13c2956c62a01ed17b1d77a9125cbfe9fc57c40fa5bc0e6b012fda791d938062f5b233a7e00daebcd11646357d112ce8a3b8b8bc962d9bc3dd64b0ee58c592d8207791fc2b811154c6ce2244068a491b0784751a6313ae096b809315eed627d07a55a9c8d8838a2ceb995fb5ec01d910ecd77504d433de57d125b76c8fef2283892d23020952acb233ad8adeae1e5173dc7b43021ba0d27c2fe7c32d3cc748edc39d81a1d9c23498c57f7281f32d5bab9b6093cfcc998aa6206c4817769c4d4c03d4f4f4d58b5a9758c969d50627d040892b142667527fa81e3cddc8e25931788d5ce13e230e8035b9e4a9754fa3beb5c3af7f136272fd1c5e7cf4743e8d6bf820bc39e9a5c9269be6fc5f9c26af90ad8ff7d7f5ed5df23292618988d462f9c55f1d4c79d5c5d128fc5b5cb5d2653600880cccdd0d64f5aee29595160a6a1a9e1e3f491e663f49bc5de2b8f373e525563c289a2f60459253ff52e8d9d4abb35feae4edd6c7d7aaea9474a661146926f7fb4817d696e9c8107b7a8b023d73fb43d22cae4610c274329ee53775191335a6b11b5a2baa8adbeea8f829b17f67ccf9b93d1ab3fae77aad0b57155b4c039a7842e3ffae25ad6fe3be905b86c99ca5fce5ce9d35063dad35023e6136f2eac0fc5acc7b029d8955bfd3bc922540a9c86bdfaf81ab1bbcc23bd69a0851fd57a84490f7baf452e1bce3acee269284fbdfc59fa7bb2b9577a6dece908a5d9b8c6afdd310149922b400a8afc2e16ac31f0aa10e0c2be6297c11cc4547f161855873b51aead03ebc9b0a5c96b92077ee0490f67780dcf6d8d7d8a773176092935f50e23b9151b4425b08d848d2a10dd680023919d295fcd07f160d7177fcfb359495afb7aef39393d642ab196eedc3f494cc1caa2ef0f7e345a69927c1af09136a5b9ffb8ae84474ac8652964fd48f3aacec561e431886adbbdfa1bdca3c303cc982d37d2e577dc7a8f1e62d9f6d033273d415ceecacd732b0da5b7c1d464788a3ac92d45bd27169e4947e5bbaabf126156e49297ecf8555493c896d5d9a4044911da4e623b19d4bed38f1239ac8441846456ce1129893b7877982631f6f1ac0dfa67b26337688c4201ec74b16a701f9e8d96ed1c805e9247c4c59711998e891936094cc22329338a9253009230fd4bbb7d00112fb28f44c3dd1c341402f6f1badb954a5f7933f68d6f33624678b9f1fff58709e757af77e69f7efd4a76fc8bd672d9130f0c8835ac2b2a96ffbffd05d2f59f4cc0327c85865fe3f077624c0282b945428760bfe5cd9f4882fbcd7ba732e087adf44a84f84be69e3344e4347756003297fb97378cb3f0fdff3a5a411dcef286db86b051f547193865bd300816c586bcf5ee5c242c1fbc055d6081f83bb83e67ebe82a2e334dd163364932fc4045cbc1f6484a979103038e581970f1aa7108ad6e101d6ac84c69a444938f61548b3be8850e0c1be41276a3713bea639b765dc8c49c3697cc571562005ac4d9aebb9e4333a4dcaa3737a3b2015033fd99259fe3f434ece4e50fbe5fcca11740d2c63fb61f8ccf07bd509217eb267d3b36bfa7359fb612229b70fb5c1c7afc5272c8afc2c81b30e9cac7f11a7b2b51232e8c8083c9d5cd6f2ff6b8ff7f0615c8528d1e574de9d41e46462c195f927ed13c5b9210cd5056ce4d53581679f904f6b19c310440c31f9ebab8c96b1b6d55c19c777991cfc14b543f7e24d8056efa0d9a5719fdf1babfe99f5971dadf54897f515397415fd4edda5886795e717861133ee1723e209a7c6168fba2fad8238236a70f1b2da637c0a5635efd1f5b0bec74be42ae40805387e9d5576acc8e3b63b29891cc88d74fcb7f36e1b82e65559052edc63f7b0e81c35d2615af0b1dbb19e73b05a030eb109d21fedaf04a87eb043836aaffee562f5eb193c89ec089693558d5371d0dd739060a8024e8c849e218293921276998c72e9e749d5d700d86fb0be1005f8cdf4869d3319f8d883c04a9ea3c5485cd45fd0f00f9b249c981a0035173df9d2f76f07918d21362602d5289708c07e0dc7046944d5bbc96ca5ce2b2f6e6a7233afb986287854a27b6a58259e1a81f509ca0cc4970f06a98bbd7b56c0fe09fe666ce2437457fef3d724231909bf20aa8d9c8c094d397e7cf0c4a4ef408462f6910327b2f64bd5f99e64fbc58098ca731a3293d6f5d69645cec59b54cfa43b0d979c730b57d30fe8fc079be337a882f4ec2672373f79ef2e7159ef75ddc0b2c3e2b5328aff69b0788d55450a75a3d06c7968925b83e250259586408dcbeb94f585e0e639a170dfd6cd36418da89e4112fa20bd344fa2cf6d869f42445b39f86f9fbf5df5efaf59a0f6ddad260a9c78f439321abf2a10ae5518ee86ff2430fdc487a0222d1f410a802067a98e0d617b385acbc36083679742b4d86aa8db030334d709292792fce5708a345594535bf9679eb463c723d4f765492e206a5786e28932a726e3b6977b95a17c1ed8dce8d0ee72450a2428d9b9c088d04b112dce7942b663a1f9ed226e00e39055f35a5948733a9d34209da2d76baa543958df4710648f17464919edb8e4c525b53c2d7415dbecb34872a44d6b2c96f15033d84de1f609e9754fdcc7e0841688df00a9cbd7d6a5eb5cf9a18f24e025108e6875e6948347dde49db2b9d2221b454507d9af1678fd8b1965d7f6e78c9fb0ed7db631bb099f6e1c7528bdbd5253dbf94773379df01f87db92c8500a4a52d18e4b99baf67c03ea3cedde17c0b2fe979fca838edffca9ea960e475bcaf789b7faff1c61d34c15cd5c240885b523c753faed3b6e1579cd647b130edcd2bc7063a306536361f134923b00fa3dcdcfe80a78be0e1dce3e5d917717f352bc182dbb7c53f019e1a3e5e24c9bb14a10e0c25df9e319ee4d8709bacce6cfa8ecdaa5b2bb8562c5cb7b23f4245c99f14553d60379d772603d192e9cdbde591f9744a1417c753b37737b47cff7bdc9a2404250ba0b5af3f9f76f9396f3c3895b43d149bb781f850bc269d9cc9d53447689c24421d60e01405aafb5dbb3da7348fea1e7b69914ab15bdae1571967038e6dfe3933a9424253825a73012a55bee17ec2fab4350d70826fb7fa65211dbfc78c9979f97dc03ee6a2770e49546c0d02e3c55393e246ab6178465dc9023387f2732982eca44a29d", 0x1000}, {&(0x7f0000001180)="6cd301abc6d7f33cc20998552634deb4382a596bc2677cc8991e89aea2cb589a244f516510a892e6be6f0a9dee0ce156df80bf9659fdd3dc7fd74a8ab56b523b6ea943cf02498dc5b92d05d5e61c22249032e15ee3b419760efb460ee05b2c6a3086bb483190578e81f66dd15d54e96fc0557f9275d5b538c0bf19585d0b25e6c151f41f978363c8139ccb38286c3baed2358fe0e6f85b27619eaed378cd7ffd070ded3bf61ce133167e79b55511a4e9c6fc24ccc72c2cc4c79df3c789c1f0aa615de33bbda31275d4e46e6d72", 0xcd}, {&(0x7f0000001280)="91a6618223cf9b03b88a43f9a2e0fca06b034cb26b2059efa82dff52ea82ed6e4dc932f879a351589b7e46fe1acd90", 0x2f}, {&(0x7f00000012c0)="f5fa2e66b3d1491b47fbd35967143c89482a6983294717bc510b8dc424fd3b14bd21bcccb2ce9a2769236999485b85603d307cd15b907d5d3a8d2cce088b40758e06f123f55c9479d666ec88b86709cbcd4b55b86c5418b31a4143fb96ef880c45f03ab5718adab2019972424d61fd6b87b685fe603f99fab57cee2c934700386c72e531ede2f43d1309723faf0ac90deda669a76426260c7fe52675f344689e1c5e89d2d301da1c2311984448a2f12b69862c3b70b7369055ec16922bd386a2da7eec5e71cd0544122efefc3d3879591baddefee6632fdf3e61666977c3c58469ebde67a0e5be30a9c9056449d56d09579028f4e2", 0xf5}], 0x4, &(0x7f0000001400)=[{0xb8, 0x102, 0x8, "417844380e3492f113d77ba5f387662ee10e49470cdd406d34f9019826e1e5374155b3d58a689359318843cb504df0b99a85645165772b578d900a2cf1cb210e5fb92794cea2c7f1a5b033e51c64ad0d2e23bc2327d91b74c46056253b0b76932348f42f5db009417521b0cf1ae2770858b77e0ba86361a465cadc71b14ed1985e18e41fafa397a389d08273c7c0cfc570b80e6db93ec8c975c47b1db40cddf0eff66c1d532c"}], 0xb8}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000014c0)="774afdff13a249e2fc212b046dc5af7929ac749b1784caf1aea461b3410001ec2805355053a197318d1e9d703a23e3fe896e78b23141c7f9fffb1866cda1174af9556550e3398e01846d032296846150e25b444dad0a28f91c8a349112382ef89f6dcd6ad36e3d0cd602fc1cb30481dd03d7c224d1f3841e2b7a4ab2756328933f876408", 0x84}, {&(0x7f0000001580)="6b5fcd6236392d29afce9cff5cdaf3750c7e65c915da7afe58f524c49bb1b012c21214a0e2be363224da115fdc73e1f5053f6ed5efcd2b7492ae8435df174d8f0cebaebc96059a1fece3d70433d50a8518321187ca3dad26", 0x58}, {&(0x7f0000001600)="7f4e69baa8627cea31c371915bc3e956c7c1e96615a3e690a5b4522d2c84e9815833a85b4b84d16e6d256298382391bd3b37b4842d2394feba9e46ba26ace5b063fa9978c463ec63214fe0d547022595781a8241848b6fa1280fb0e92eac0c7614e25a9567ed057fe03edcc1e680e815b3ef22b63b691ea87e9c67df27537c4ce171891dc25e8971764a233e0bb49b7aecbac9443c4250e830fa19f13cfb361f84a022b857b4fe69dbb01cec27ee17a973426fa7c2179c0896679a830397b8252d2851bd91868bba665d590c1d475998ca0514f6e921f7a506b4b939dc25ab404040ebbd2801e27fdc09e8cfc49a7494bb7735ca221a747f08ed1f49656f39d4919fb93a5ceb905e69145a48da172df3fddf08904e770443dbd774a57678289663f5e4a68a3d7c02046a14a852678f5f157c7c9d8aa835daafe3471267520608c693ef338fd587f6a22068232bd8fbb648c1127e9773068407aa2063480fc3f45be9d390ae3eca376a9dd32b07e2b9ea6703d9c6b3ba1ae6e5e28677455dcbe515c7926b98388a4aacec6116585100f1e7f9f5530f7003eb25b74a252b33bad0ca405c6076c961ee596b1efcefc569aed1b6e1e9b156af16d0a851343620437df9567cfea847849f2b2decfcd3e5f2fc73da3379b7ad10bf4b79958805bcb527039e735102bf23f3c1bab93a16e0fc6e6511346fdb537b2d32516d11620322d89cc2548e3682e8d7b5411b49f8340c39316c932e47db515a74448f59a0cf3bf18eae8f1a53618ca526990da6c9518a8773d7d6daabc9ac51f1d295893b01ebc53f2dc90ca97657f171b47e66ff4b2a0a3c9b9e744cc2e70ec0e0ce8e84fdc77a04b27bbbe0135d3848783c7c2631658ab54550e83495ce70ebbccaffaff064111e0f5e244b8428880b477abf9bd71b061dca4cbf8e2d3645e8f3a687c23d0163eb8171b9b7fbd3243a068d922850c833ea4d81e0ece56a89fd09544da9fc3c7d912c4b49d7b6d68f54ad6a38b51f36f76c1b0db768c6ef033b920c14505032d36efcf7f5d8401f87096fb8a03ca036a1e1cce2af9453a854eedbabf5364cff810e87c98b23d9bd56dd4e3d94007aac951b0c6917a5d28a7f3f50c41fe0b0593962822924b4d295b8b7ce50aca0fa6806f7a3a5793b4a079359dfd2eacb7492cac75e94ffdb8e49885bdaa15924af95a73c74f8ec261ef55fdf91fde4d63820bca9f6d6fa60dc2150221b28a8a5b2f1c45a0d42ca33e457380fbc1db3f44ec8c97f9aebda25b097d2da00641d663f507a8d9aace9cd815fd86c525ae211a1e0e19a0cfddb941524d8655116d260bdf44a24fdff092dbe80dacf5b69d5a2eb44231cbddd301eb61dd526d0355b3062e6a4816af2fe03f29dbb72db24b09680054bbefe86a5eff2119bef9da8646550411acd63500765dc2b453f5495e3d3f77001e23d2d5879f54102bf0dd79bbb9ffbd137f0717be2d3f08dff2f8274b543f7a5ec970b125e2a72b6ac2b4c9804d2adcd1395fce0d2c591e1324c56566956216ba46af4a8395e3dc94d121ae8cac8e2f7dbfcce705256bb7bd9c8ec045c4688326a90032e6e0ef5aba0fbdaf618e27251283d251dd5b1369594b174c978e1a38073ea27962bbf897dd11d63e6047ed63ca0567496a3d10289a5708aa01e52048fa757a756602472d18ceab9592d3cac1c7d3981499e7c23e5b833e09bd02738f9fca0b9e01c8af6c8530bd790070776fa686ca611c5ec260991f1d0e44c957304b3e08e3e832c7aa903ec9ac087b18722150abd15d32537fa8f96256aa267b32d9b3e1d07033900664bcce7bd339c2a5b4e631e193ee47f3f0b145a8097f81d8cfd83394932b862443a69673793eb3a64c0f94f73d94d2eae48b8409de937a61bc90b8ad521f24c9b50eaec93f69ff80238861a88fbe1b22ba4f9085035ca4af17ea587f24910ad98c9175cec7e09dca43fd3a8a901f98d34fb651abaa6721bd5d45161d9ef6b6aed63e55e15c3e0e79a23186362e03353e35da4072f5b96489e9b35554f24ec5a5d6347c9ae4fb4fa40049f43ce75558351628ace90914df856135333e125bfcc4600e1dc864dc1eb92063f6becc474c3058571becbdfcfd1f5955447ccc25cbf010af60e37249c0f009f60c95bbfe304e6fc5dceac616793222f13e6522bf7fd9d4ba568852896b1d82b9b484ac58314cfc1b4a289a978c047182c933cd05cb9a50f406f8be27e9c9ef6f0823d3bcf74d5205f1afeb89836f962479f3f66eae91e4bf11da5ed2b51737f1912f0b14d388cf0e5cec08a66a1da4065df937e3de372397b94c3f0309b82e1f02169c5399dacc84c8c112f75aec93b4be606d473af3a6048fe1e8c543f2f6ad031349f814c9c39b93bc76ce44c8b0517c09cc11dfca1f6778dd1f73e8d249a69a5a8a6df6833264f4b26f5d8e764d107ceb2dd6a01244c3d80e673049f2093387109935b5561f775aa5567f1425f7c2dd596ac4ef29522e858c249b50c714c09eaeb9dc5e5647194962d89282bb65747b7298032b491d1b5b6fce80d84115bb15c85ce4edcb6d12b4138ac608fae79e47b65d5bb4c67db9945a9911f7329b4bf3e5829f7654a97e025bc205582507f852e056ab67877c1bb1fa1af40bb4c03205c73649ee478b5705cc00ca058ecb29c211529b2b48358d8a3025db5c1f03e5e7f1e77fd7cef8693fc2cbc0ebc99051b3a5322287ed816308420fd6ad96fc28bbfbf540221f8f3a0e5e7563370093af5a55327eb1d9c86264c326764e784121fa0bc7e7449a09afec8c29c422f0cca215cefb85378314b823cc92fd17c263879b1cfac6a9ffc8966f727588ed97371f5126074fd49b847558b6e364e8c6577df90b5c9ff324f3a2a17b4599153a7a7a2590fd8f72349ab3b42e6e2846930569b152c7f0383171b9f464749e06497658f9382459b94dd97aeb18ffa98f295eee4d13fd998c1d1d9996424796215087dfb8b01b5e8f86f41a6174958305622b048e1eee86f9d74d4906781094362eb5fea73876b623b301e1df58456be798487fae6e6993d827638fa614d7b1dfcda1cd29b4f7a30a28c30f61fdeaa58adb3898759762296fd9f37312e3cb833633cb662ca25aa3d216de91146d213a7a7f0224de557a05f780d8254e6d698083f28eaf1b31efa61e6821c2fc2b9f337c411fdeb8b21295600417dd8946b3fde9ab8721e8085425ba500458885847c98be4444a329b1e2c0998271831df75382da917d377c52d3c6a128c7c7fb0ff2e7b6ed114c4b00ef402b4999f76137bec9e83a38244df2978127d0549c86b94ce801f7d0d69826de9afd8c53420319803cf76fc3c37a7d8ecb2ee4ba325baed985d3621268e628c69a4d6903d8d3a17284e6ae69687261209d006f2a8a8c508e8e54be9cbb6f42d647190d5b5f56a1e5e66cf268025fbca2e5a55d0f7ea3f26cee47b1995a2bc446df7b3a6d55b240342da82c39b88dc42c9b0dbf5a57d2de7c7480675d13d52fc38eb6d6dd45d153736c93598c44630e0954e3d0e62657448c5af87d87690f2a1b76516d16185b7ec8b0d1c92d373eae4aa82e177102f891d6184d5d4331ded488645498a02a70dbb7eca1f939e9f7519dff5d20a9beb5845c3a07ecb01ef4fac71c663c27908a975121f4800f6d3b0453677177ccd5c091093af021b3e9f3f95d367db1374bc3df48265c73ece2370d24275244e2deb039680ca26e4e5479447dc01b680ed1e6b5402d2d7b046c77be20eae4f9a546beb625dbb53c497e94f264a4b41c0e70d2d631f225ba4d2f3eb4de6b25b0bb0dee5039d77c5ad63942395464b77ff673a21d5482f7c4ac245ce0ad3f4fbde0849f0b708b4f59751aa77533ca10e14fc1d8dc21df5fdf51d09a4092ffbed4f4d2c92811ecf01b54732bfc4c8bca1ccb4773d2618835154f22b8895bbe03816335f705d775645b5186ad614547476648a03eb1c5395503c00e578812aad13da9e7fd83835eddc4461f4197b0150de07590954e8d9c63f1dd633cee5cad9f826cea4a7ecf1532f16b9b8f655a54a8ef4f6041ff70a4f36340336f36550236c339bdd03f77066aa016169319cebeaac4c8ffd603bc429e20a6cba74c0a1ee9e22f0ae1d89cf61b3ec74f6c66ff4c337df0077e7c800e15ed6197712b738c7409b8952a1ebf32eaf590e6561c4fdbf778f3be266f8d3146401e51b7d005824871b152217ca328e4092c934d227bfba85395b326118f5739b9c1e77bc71334393b6cdb11676a769dfc9bc1127188ab0c1a344a74ae0e7ede591eb430cde2f1e9da9a6f39e0c0a939cf707ae7ff69d7f870d715762b327fa19d13de4bdafd5207a1be1b7ebb2545a1b216963d1b17c880af827a3a71ef17b86a08a92d4aec93e6f307ccd421a8851aea5bed8e5865ae1ab59ac769122ea0df5f29aa4ad90d896b1af148f21718bd0136941e08f79aa99ad7eea999882c18ffa38a0d6731182cdf53837d83333ec32e4f3e9bc56e69715b1173baa232f990762bac0354c0ce70c4ff52b09887b77030c9d75491ce61f13dac547c7472441ba5d6d8c7f47a43a120da57a3f78e7c30a095949895349120eb5643970761a9d0a3e876a4526e0d5ff44e99536a4bed4494833856dae06cc75148ab3eb2425a9031eb2bd975f1dcae5cc727239bae868bd9b49360ed84329a71df4d3c8c8e63b76de6f3cc5b953eb894d8f57621e6b782d916b7bb547ea50d34566396f7a09b8525f283b1d7cf1ad59c75824ca34b5de0320ddd33a67ad6b7b0b13a7a9e36aade9b6a0c1377ea16682f7eeb91cd408792fc30e6d70c8f2154f0b4ba30f9b7516dc1c245eba71aa26ce744beeb2d1ce709dc45c3cba51846260c54e319cb10d0a1b50cb37b89221c08f3c7fbbd3871482c82e2c73b69af147760146093b0082baad470fc468ae6d098b4766925bceb79aebbbced6be1c239ed66e8d92da7b3d11a5146603ce4a0537a031a61246fa457c50f6b38e20a51ba40dde45517d0ea5a0232f51ba9814d6ce1d00addd65d71754485c1d182f5c4ccd4264f864e9229dfcdcbf8054a31f2077a0c22326fb82fb747c19a7941efd690e70c298c1b88b13ef03b9afe338367b3df48a13274fe62173882c1b39622607b27f0d0c0f7fbb1ca3c3951c10d01886cbf914a20745b5fdfe3ad0be5f413e0c10fd9079461bd00c0292f100f31b209e228f6aecf38ec1efdf220d7588206bee2221b6abef85c1d339f73e5eff11691ac2c191321b73a7496ea8c10fa41d3eed036be8e8f64cf6712278cab8c111576387f91525c52abc8c62de1688f053e25906b6fa22002ade904785245ca549cfaee1840ea655d61e67700698fe226aa4e12ae8b76d503576935cef0bc6f8ca2d9c27f402f95ed9f875b8bcb0949ac77e33faa8d25875148a18c1a1b5e89c6fd3966edae7df37ddd0e5a806360909b7ec213f2d14fba3ad162005a30383fccb0fc368435a67df66775f6d27473f1d814ef2f0427f4dfe4b758f24823ae9b2987ff0ed7ef17f45ba5823da4f0ccb1ae923322dd9fdf86ad03be174dcaa1d74089519955e7cf7eb54874829a3fe7cb64b05717167f5945c7d887a423e5a389305221937f989eb76144bafd66ac5118956bec495cde548ec0ede45232549924712bea5700b5aa205ca557f90f58738399a036cb29344b83550afc3687ef2654361fe09278af2d8e4d1f94f2e1be15106f6de320fb6d2403316e31882d0d1c0b6b49c657057687340d759f96b7b0b7f8d83bb7502393a0c346f6ca322ffbc8", 0x1000}, {&(0x7f0000002600)="487bf420f64b433dc15047d708c96b883626cdd688ab9b31ae28abc6c49c753cd23c160d33742ade29270fc5691b4a1e6a3c13698abd4de0c27828c88f1c722681d0ff0f04ca3c552d9d7809f53091ee54d4342775668685854f089cf616e3a19aae2effd14e3fdcba06d9e744e3c6171939a57f74eb06668665be343d1b4ecb643660b8b1ce4429efc026e49839ac90ce4883", 0x93}, {&(0x7f00000026c0)="b3130ff637b76e5f191ed7acdaa6fec9ea1fccc8003d398d3751edf93107490cdd5c6680291f68a435a2825fc1d80384707407ee565f48a95af40103aee26e26eb6a533466c6ae06270119103a0f8edb3ea5051b143d075ddf5a1afd169405eb047488c722633dc80d4e7437e175eff36f0ebdf813978bcd8ef924b3eb9641f9f82c423aa38da15d6665774e67b73ce60d82a8af92", 0x95}, {&(0x7f0000002780)="46c34e80c88de336cc9314f717cb34f5be23e0ea7d43fe785dd53c4d4431113b9456662b5d25965613dee147b8d693bb2dca554182b21bf34495df05b3682d9295a5b58d7f7eb90b1fa1dd143611271093c24d9d6e4bfc6a537c5c59d93225162f3efa695e549796859c1c38e4d47fc2c0ab9ea6389b43b43b3550b3e703691df24c40b54bb92daccda9361993a1147a1689eb42e10185fe5552df00c011eacc558db999de1a1dcb5df8182bd4f9e878fb7c88809b4c9ad06aa568b9e1b7de4372134b75ee8f9e4ec923f73770ad627889cab11ab2c0b462915b6e972095e7d66844199e6b2df944fd6b", 0xea}, {&(0x7f0000002880)="39ecc2ed6e8b9c6319258e198d1f23f8b99e11ca498673bb8bbb6d543e0ad5bcae4614340c1b54f74fc2f0ab6b2acca8cec40c317573037d1e07446f28076b490c81e6cedcd25a4c5470d994d42e291ec1a0fe4463f023180b5eb624f3bd8acc7704a2cf67e2cb9ab2f3e4ea49c9ecda9f2c712efeff6107f9094a4b15f48421694f983db00efa78631fd4ebb33a9541da0510b11480d3cdad02ca39c0855950dd1a4cbe8cfa6fb51c086c8887af1001d785db912fc290c255ec8c64dcb79e35fd2c3997b9c3195190e862f54db83f0f6d329408cac50cd0f3e14de4799b9f714f17f8614abf251c", 0xe8}], 0x7}}, {{&(0x7f0000002a00)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002a80)="fbcd92bff8dc98b6883a1c79eba4db766fb169b8055a9ba330e347b7ee71397fd13f", 0x22}, {&(0x7f0000002ac0)="c285e9a6c0c513e45ac1834a67f9125a5a1f13c40c266e4e0931e9fc3bc66534334d2fe697d15ba6ac54796c1176532c201b03d5da0fe0f390bdf18d4e6906d60fd2b7c01e0664bcb258db54f16b38cda24fc575624b661ee8aa597de9bf77fe40e0b80f95ea940fe87da405", 0x6c}, {&(0x7f0000002b40)="876338b633a4e3eea3dc6c200eb932b2cdfaf26bd59532db06560385e8a046", 0x1f}, {&(0x7f0000002b80)="38c17d70b0f273197aed6f28280e669ce62128e8189edfcd31dcbfc03f08c13591d05b145b779222226ee9266efe11859c148f2ff340a670fda814a81c82352d82a3db6c0945a2ff0bdf4a992632a5af7f9a89245124b5b9a5e4a8f922e49ef89ca9a1558fa9338482f5943a0e61d1302e958ca9dec33f6f0c861aa2aab66125a33dc8ea32d95e5a48502199301c0a91cacd763d96f02069bcf29d5ecc22d4cb53e317bd00167544188172b10fe198710854ef97c77d6c8ff4d7161c67f725fa078b55d1e950", 0xc6}, {&(0x7f0000002c80)="e396c146a943a35ffe0c8a96588173dff91b6e952ba2cae9af7d1cc7600713659bab4ae08f27f3ac45381973c0c0fd28c190e84e07e1f719b30cd4da96cb296e0ee39fc5391da392afc61f3f17d43fb42de0531271d75377854e9a17169e41d42ae6090c54fd4556fa1ff3510c86", 0x6e}, {&(0x7f0000002d00)="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", 0x1000}], 0x6, &(0x7f0000003d80)=[{0x30, 0x116, 0x4, "16c90c928016bfc8f84a97eba69af83596cff31025b2a0b73658cd31"}, {0x28, 0xff, 0x7fff, "c6e5493b4145343e35970a58c47b9c414ce5"}, {0x10, 0x3, 0x6}, {0x88, 0xc6f2f86566f6e4fb, 0x0, "e4101d197a13ae27dff673f013c491f07fbfca85e0329eb1b3c51842c4e3e98d17e6089f86019250d53d72eb916cca8879f29de72cd0a9cee71147999b73917fcbe6b935df9df4d0933efc21110a8b8d998f407d36bd967c7249a73ebc20b94a929ea3cbec19cdd7de590d91ee4cba9d9e48227009049870"}], 0xf0}}], 0x3, 0x40) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000003f40), &(0x7f0000003f80)=0x30) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x38, 0x2, 0x8, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4004800) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000004180)=@buf={0xa6, &(0x7f00000040c0)="6af7d6940dd444f6c05de4c2bec47ee70bd2cc0e8ff00fe9fe3703d1b57663be3117d2d3e6f72050f20362f994f8a1012f1ba802098d36b9c7965c2089f80aaf5912f9034a2e6cda44838f432ee7b27be2a8ca2f8c9b263de7c9d0f1c76499bda0d183318389d08cac148314776ffc875993db0d96f9c952c3877cf64b6beb945235cb6c3addece1491f06f169b1f567eb9c2c8f42917f6bd4f0cae4e3c8cb3e6245ce0961f9"}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000041c0)={'ipvlan1\x00', {0x2, 0x4e22, @private=0xa010101}}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000004200)=0x2, 0x4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000004240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000042c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000043c0)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004380)={&(0x7f0000004300)={0x50, r3, 0xa09, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x927c}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048014}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dlm-control\x00', 0xf1a4fe73cab86904, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000004680)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004640)={&(0x7f0000004480)={0x1b4, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x284}, @CTA_EXPECT_NAT={0x140, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000046c0), &(0x7f0000004700)=0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000004780)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000004840)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x30, r5, 0xb02, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000004880)={{r2}, 0x0, 0x16, @unused=[0x80, 0x6, 0x7, 0x401], @name="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"}) 15:51:47 executing program 2: mknod$loop(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000340000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:47 executing program 4: syz_usb_connect(0x0, 0x53, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xe0, 0x69, 0x88, 0x20, 0x22b8, 0x6425, 0xaba7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@uac_control={{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}]}}]}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, 0x0, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x515802, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000054}, 0x40080) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44824) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4004) 15:51:47 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1601) [ 841.862688][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:51:47 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000) 15:51:47 executing program 1: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x17}}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x40) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:51:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00fffff0000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:47 executing program 2: mknod$loop(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 842.027109][T23352] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 842.098459][T23352] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 842.136406][ T17] usb 5-1: new high-speed USB device number 33 using dummy_hcd 15:51:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000010001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 842.155303][T23352] device ip6gretap1 entered promiscuous mode 15:51:47 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 842.329572][T20233] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 842.369415][ T17] usb 5-1: Using ep0 maxpacket: 32 [ 842.380717][T23370] fuse: Bad value for 'fd' [ 842.519680][ T17] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 842.539531][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.556223][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.578950][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 842.605565][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.634327][T20233] usb 4-1: config 0 descriptor?? [ 842.668695][T23353] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.696502][T23364] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.719918][ T17] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=ab.a7 [ 842.728986][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.782995][ T17] usb 5-1: Product: syz [ 842.814441][ T17] usb 5-1: Manufacturer: syz [ 842.826912][ T17] usb 5-1: SerialNumber: syz [ 842.840214][ T17] usb 5-1: config 0 descriptor?? [ 842.881259][ T17] cdc_ether 5-1:0.0: skipping garbage [ 842.886690][ T17] usb 5-1: bad CDC descriptors [ 842.921283][ T17] usb 5-1: unsupported MDLM descriptors [ 842.941314][ T17] cdc_acm 5-1:0.0: skipping garbage [ 842.968934][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.989455][T20233] usbhid 4-1:0.0: can't add hid device: -71 [ 842.995513][T20233] usbhid: probe of 4-1:0.0 failed with error -71 [ 843.031892][T20233] usb 4-1: USB disconnect, device number 38 [ 843.087755][ T8181] usb 5-1: USB disconnect, device number 33 [ 843.499397][T20233] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 843.859487][ T5] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 843.899540][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.910833][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.921094][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 843.930407][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.940944][T20233] usb 4-1: config 0 descriptor?? [ 844.029698][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.109320][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 844.229457][ T5] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 844.259627][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.390352][ T5] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=ab.a7 [ 844.399590][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.407718][ T5] usb 5-1: Product: syz [ 844.413138][ T5] usb 5-1: Manufacturer: syz [ 844.417862][ T5] usb 5-1: SerialNumber: syz [ 844.434704][ T5] usb 5-1: config 0 descriptor?? [ 844.490710][ T5] cdc_ether 5-1:0.0: skipping garbage [ 844.496134][ T5] usb 5-1: bad CDC descriptors [ 844.513011][ T5] usb 5-1: unsupported MDLM descriptors [ 844.518841][ T5] cdc_acm 5-1:0.0: skipping garbage [ 844.696804][ T5] usb 5-1: USB disconnect, device number 34 [ 845.059457][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.299328][T20233] uclogic 0003:5543:006E.0046: failed retrieving string descriptor #100: -71 [ 845.308284][T20233] uclogic 0003:5543:006E.0046: failed retrieving pen parameters: -71 [ 845.316937][T20233] uclogic 0003:5543:006E.0046: failed probing pen v1 parameters: -71 [ 845.325464][T20233] uclogic 0003:5543:006E.0046: failed probing parameters: -71 [ 845.333623][T20233] uclogic: probe of 0003:5543:006E.0046 failed with error -71 [ 845.344828][T20233] usb 4-1: USB disconnect, device number 39 [ 845.459404][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.049238][T20233] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 846.099481][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.103558][ T0] NOHZ: local_softirq_pending 08 [ 846.409310][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.420476][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.430487][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 846.439734][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.448787][T20233] usb 4-1: config 0 descriptor?? 15:51:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0xcc2, 0x0, 0x10001}) 15:51:51 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000020001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:51 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2403) 15:51:51 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x14) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000280)=0x6, 0x4) r4 = gettid() tkill(r4, 0x31) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x98, r6, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0xa}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x98}}, 0x0) 15:51:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x7fffffff}, 0x10000, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1ac) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x2, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffffe1, &(0x7f0000000680)=[{0x0}, {&(0x7f00000013c0)=""/198, 0xc6}], 0x2}, 0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0xfffffffffffffffe, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/4098, 0x1002}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000100)=""/56, 0x38}], 0x3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x10000, @random="75baa61c2338"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) [ 846.687525][T23452] fuse: Bad value for 'fd' [ 846.699218][T20233] usbhid 4-1:0.0: can't add hid device: -71 [ 846.725854][T20233] usbhid: probe of 4-1:0.0 failed with error -71 15:51:52 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2e00) [ 846.753269][T20233] usb 4-1: USB disconnect, device number 40 15:51:52 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000040001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x14) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000280)=0x6, 0x4) r4 = gettid() tkill(r4, 0x31) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x98, r6, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0xa}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x98}}, 0x0) [ 846.885767][T23470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 846.908837][T23470] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 846.908880][T23470] device ip6gretap1 entered promiscuous mode [ 846.978086][T23454] IPVS: ftp: loaded support on port[0] = 21 15:51:52 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000080001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:52 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 847.119123][T20233] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 847.145637][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.243467][T23487] fuse: Bad value for 'fd' 15:51:52 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 847.499896][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.532960][T23493] IPVS: ftp: loaded support on port[0] = 21 [ 847.541088][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.569181][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 847.578238][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.627134][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.650120][T20233] usb 4-1: config 0 descriptor?? [ 847.989240][T20233] usbhid 4-1:0.0: can't add hid device: -71 [ 847.996290][T20233] usbhid: probe of 4-1:0.0 failed with error -71 [ 848.040791][T20233] usb 4-1: USB disconnect, device number 41 [ 848.192772][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.469102][T20233] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 848.829149][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.848985][T20233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.858750][T20233] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 848.889004][T20233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.908349][T20233] usb 4-1: config 0 descriptor?? [ 849.223619][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.259140][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.279035][T20233] uclogic 0003:5543:006E.0047: failed retrieving string descriptor #100: -71 [ 850.287994][T20233] uclogic 0003:5543:006E.0047: failed retrieving pen parameters: -71 [ 850.303574][T20233] uclogic 0003:5543:006E.0047: failed probing pen v1 parameters: -71 [ 850.315167][T20233] uclogic 0003:5543:006E.0047: failed probing parameters: -71 [ 850.326665][T20233] uclogic: probe of 0003:5543:006E.0047 failed with error -71 [ 850.338591][T20233] usb 4-1: USB disconnect, device number 42 [ 850.659095][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.048969][ T8181] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 851.299085][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.439006][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.450099][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.461941][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 851.471910][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.484901][ T8181] usb 4-1: config 0 descriptor?? 15:51:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xd0, 0x5, [{{0x9, 0x4, 0x0, 0xcc, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0xf, 0x80, 0x1, {0x22, 0x423}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x16, 0x2}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x8f, 0xd4, 0x1, 0x20, 0x7f}, 0x106, &(0x7f0000000180)={0x5, 0xf, 0x106, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7, 0xf000, 0x6, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfd, 0x3, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0xa, 0xbb0}, @generic={0x64, 0x10, 0x2, "ecc250c64991750f0e83cb26900e693eec96f93852beb34ed118084c93346b8963032ac650ef03c9a9ede9862a1cb3b4021c4f93ed4be4d56f0d41942fcc603715e13b5a2ffbefccf793269bcb032b1b38e3c76b747a13f7a5e8dd0dc8db0ed128"}, @generic={0x45, 0x10, 0x1, "1ee587fa0dd90c85221fc9363acfc9597578836993d675eaa9937247f78bc249c3f091022b7ea0360f93cd710a435e432a6071bc8d3e8e18afc65f2f3ec1d6b97a58"}, @generic={0x37, 0x10, 0xa, "191048f19d1a0f9ba724f0e9eaab704c6ad9fe4aa3f87f71772c5a908aea187edf063391d2f5a3b93ffa0f1ca9d8d1f1be5f885b"}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x813}}, {0xa6, &(0x7f0000000380)=@string={0xa6, 0x3, "557bc9a22f37d1c1f52f92fd415ae0083c24e070c00feab34b587534e13e184070e73156cc6044b9ada37b2ae8e1c7368599c58dddd5b2e6f773e68afeeee9e90248ffc4a767be9acff146d6cd42b4da7cc1663069f21e9f7fc5e9739db2f03b5284ab62241efab77e94b6954a4b82fe087385b57150c21feb0636a771f4f40c2c1d97798b6342b5bcc5e5d2e531160f4b5a74753bf3525fdbed831c1626bce060a70dd7"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:51:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x14) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000280)=0x6, 0x4) r4 = gettid() tkill(r4, 0x31) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x98, r6, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0xa}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x98}}, 0x0) 15:51:56 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000e0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:51:56 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x3801) 15:51:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x14) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000280)=0x6, 0x4) r4 = gettid() tkill(r4, 0x31) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x98, r6, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0xa}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x98}}, 0x0) 15:51:56 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15, 0x1, {0x0, r4}}, 0x1000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) [ 851.678949][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 851.685129][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 15:51:57 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x3c02) 15:51:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000f0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 851.767660][ T8181] usb 4-1: USB disconnect, device number 43 15:51:57 executing program 4: sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x64, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8b}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x400}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2007fff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000300)={0x4, "46d56410ca818d7e62905707ece1834df15671457637262d9fe772b684737890590e9c078d6a823592f99795a62db59e8374856601109184791525bc9a0f5fa0", {0x3e43a837, 0x3}}) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="0400"/16], &(0x7f00000000c0)=0xc) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000840)=@broute={'broute\x00', 0x20, 0x3, 0x40a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000003c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x10, 0x8c5d, 'nr0\x00', 'lo\x00', 'xfrm0\x00', 'veth0_to_bond\x00', @link_local, [0x0, 0xff, 0x0, 0x0, 0xff], @random="afe915c8f9ff", [0xff, 0x0, 0x0, 0xff], 0x6e, 0xe6, 0x136, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}, @common=@ERROR={'ERROR\x00', 0x20, {"ae039ba81a945d9fb0ee0375dd70fb32bc38b6ebd435ce44223a18bdd141"}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x1000, {0x1f}}}}}]}, {0x0, '\x00', 0x1, 0x1, 0x2, [{0x9, 0x5, 0x8864, 'rose0\x00', 'team0\x00', 'ip6erspan0\x00', '\x00', @multicast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0xff, 0x101, 0xff], 0xe6, 0x11e, 0x156, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0xe481}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@remote, @multicast1, 0xffffff00, 0xff, 0x73, 0x33, 0x14, 0x20, 0x4e22, 0x4e22, 0x4e22, 0x4e21}}}], [@common=@dnat={'dnat\x00', 0x10, {{@link_local, 0x10}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0x10}}}}, {0x11, 0x10, 0x8864, 'veth0_to_team\x00', 'veth1_macvtap\x00', 'gretap0\x00', 'bond_slave_0\x00', @multicast, [0x0, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@log={'log\x00', 0x28, {{0x1, "0cacc2b0760bfd1386e8d1c4799a1e039eb485a9c6001627b718ef35308a", 0x6}}}}]}]}, 0x482) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r2, r7, 0x0, 0x8482) 15:51:57 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:51:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000003260001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 852.142164][ T8181] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 852.339064][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.370731][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 852.374462][T23572] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 852.374501][T23572] device ip6gretap1 entered promiscuous mode [ 852.509628][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.538327][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.557396][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 852.567588][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.587873][ T8181] usb 4-1: config 0 descriptor?? [ 852.939004][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 852.952598][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 852.992427][ T8181] usb 4-1: USB disconnect, device number 44 [ 853.389222][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.438815][ T8181] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 853.709973][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.811770][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.822724][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.832995][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 853.842296][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.852776][ T8181] usb 4-1: config 0 descriptor?? [ 854.419243][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.731797][T23557] udc-core: couldn't find an available UDC or it's busy [ 854.747125][T23557] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 855.059997][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.208774][ T8181] uclogic 0003:5543:006E.0048: failed retrieving string descriptor #100: -71 [ 855.217946][ T8181] uclogic 0003:5543:006E.0048: failed retrieving pen parameters: -71 [ 855.226460][ T8181] uclogic 0003:5543:006E.0048: failed probing pen v1 parameters: -71 [ 855.235214][ T8181] uclogic 0003:5543:006E.0048: failed probing parameters: -71 [ 855.243154][ T8181] uclogic: probe of 0003:5543:006E.0048 failed with error -71 [ 855.254577][ T8181] usb 4-1: USB disconnect, device number 45 [ 855.458867][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.968673][T18992] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 856.359218][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.370315][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.381382][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 856.391116][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.404952][T18992] usb 4-1: config 0 descriptor?? 15:52:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000080c0)=[{{&(0x7f0000000000)={0x2, 0x1, @empty}, 0x10, 0x0}}], 0x1, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d03020174f4b176c61c000059e3108621a17a53b60203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:52:01 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000600001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:01 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:01 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15, 0x1, {0x0, r4}}, 0x1000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 15:52:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x3f00) [ 856.498964][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.584002][T23638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 856.593836][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 856.600228][T18992] usbhid: probe of 4-1:0.0 failed with error -71 15:52:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00ffffff9e0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 856.648898][T18992] usb 4-1: USB disconnect, device number 46 [ 856.675116][T23638] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 856.675662][T23638] device ip6gretap1 entered promiscuous mode [ 856.740139][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000ec00001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:02 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:02 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 857.058783][T18992] usb 4-1: new high-speed USB device number 47 using dummy_hcd 15:52:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00fffffff00001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:02 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 857.438809][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.466573][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.488777][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 857.517372][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.540390][T18992] usb 4-1: config 0 descriptor?? [ 857.544424][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.878616][T18992] usbhid 4-1:0.0: can't add hid device: -71 [ 857.884802][T18992] usbhid: probe of 4-1:0.0 failed with error -71 [ 857.897652][T18992] usb 4-1: USB disconnect, device number 47 [ 858.358489][T18992] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 858.578839][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.750067][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.761174][T18992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.772328][T18992] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 858.782192][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.795090][T18992] usb 4-1: config 0 descriptor?? [ 859.628575][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.778871][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.938515][T18992] uclogic 0003:5543:006E.0049: failed retrieving string descriptor #200: -71 [ 859.947362][T18992] uclogic 0003:5543:006E.0049: failed retrieving pen parameters: -71 [ 859.970602][T18992] uclogic 0003:5543:006E.0049: failed probing pen v2 parameters: -71 [ 859.984424][T18992] uclogic 0003:5543:006E.0049: failed probing parameters: -71 [ 859.997808][T18992] uclogic: probe of 0003:5543:006E.0049 failed with error -71 [ 860.008228][T18992] usb 4-1: USB disconnect, device number 48 [ 860.658508][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.728424][ T8181] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 861.118444][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.129677][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.139662][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 861.148859][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.162291][ T8181] usb 4-1: config 0 descriptor?? 15:52:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0xe7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext, 0x10, 0x0, 0xfffffffe, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {0x0, 0x2}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0) 15:52:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000f0ffff0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:06 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15, 0x1, {0x0, r4}}, 0x1000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 15:52:06 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x4000) 15:52:06 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 15:52:06 executing program 3: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = semget$private(0x0, 0x207, 0x0) semtimedop(r1, &(0x7f0000000240)=[{}], 0x1f4, 0x0) semctl$GETNCNT(r1, 0x4, 0xe, &(0x7f0000000040)=""/57) syz_usb_control_io(r0, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) [ 861.330459][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 861.348656][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 861.356118][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 15:52:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff007fffffff0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 861.404955][ T8181] usb 4-1: USB disconnect, device number 49 [ 861.405199][T23735] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:52:06 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000, 0x8}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffdfffffffffffc, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000100)=0xbd0, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x57, 0x0, 0x7a, {0x5, 0x7fff}, {0x1, 0x7}, @rumble={0x3f, 0xf2}}) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) [ 861.405246][T23735] device ip6gretap1 entered promiscuous mode 15:52:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff009effffff0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:06 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 15:52:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0xf003, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) dup3(r0, r1, 0x0) [ 861.711894][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00f0ffffff0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 861.968931][ T8181] usb 4-1: new high-speed USB device number 50 using dummy_hcd 15:52:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000200000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:07 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 15:52:07 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15, 0x1, {0x0, r4}}, 0x1000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) [ 862.245430][ T8181] usb 4-1: device descriptor read/64, error 18 15:52:07 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x4088) 15:52:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000400000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 862.658336][ T8181] usb 4-1: device descriptor read/64, error 18 [ 862.732303][T23799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 862.745877][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.761177][T23799] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 862.770270][T23799] device ip6gretap1 entered promiscuous mode [ 862.818825][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.828313][ T345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.859490][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.938247][ T8181] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 863.037997][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.208297][ T8181] usb 4-1: device descriptor read/64, error 18 [ 863.598332][ T8181] usb 4-1: device descriptor read/64, error 18 [ 863.730183][ T8181] usb usb4-port1: attempt power cycle [ 863.778412][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:09 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="7404000024030b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000800010074626600480402000c00050000000000000000000c000400d8ce1e4da01556800404030000000000050000000080ffff010000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000f800000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000010100000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000005000000d4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff05000000d8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000008a20f858ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000250100000fba000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000a00c00000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000900000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000050000005efd000000000000000000000000000000000000000000000000000003000000010000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200007d52c840020000000000000000000000000000000000000000000000000000000200000008000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000002800010000000000000000000000000047000000000000000100008000"/1116], 0x474}}, 0x20000000) r3 = socket(0x6, 0x6, 0x100) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x80, 0x740, 0x5, 0x0, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @empty, {[@timestamp_prespec={0x44, 0x14, 0x90, 0x3, 0x9, [{@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x77, 0x1, 0x3, [{@broadcast, 0xfc0}]}, @ssrr={0x89, 0x7, 0x36, [@local]}, @generic={0x94, 0x2}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r4, 0x2f, 0x6, 0x80, 0x8000, 0x20, @local, @loopback, 0x7, 0x80, 0x6, 0xc3}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r6 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000)=r6) 15:52:09 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 15:52:09 executing program 4: setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x9, 0x20000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x600000, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0xa500, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002380)=0x0) write$FUSE_LK(r3, &(0x7f00000023c0)={0x28, 0x0, r4, {{0x3, 0x7, 0x2, r5}}}, 0x28) setxattr$security_ima(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)='security.ima\x00', &(0x7f0000002480)=@sha1={0x1, "e0087107f2eca4433e0a72a743dfa98962970a1c"}, 0x15, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000002500)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000024c0)=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000002540)={{0x32, @multicast1, 0x4e21, 0x2, 'none\x00', 0x4, 0xffff12e6, 0x2b}, {@multicast1, 0x4e24, 0x2001, 0x2, 0x1, 0x2}}, 0x44) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000026c0)={&(0x7f00000025c0), 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x78, 0xe, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000002700)) r6 = open_tree(r3, &(0x7f0000002740)='./file0\x00', 0x800) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000002780)={0x4be, "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"}) r7 = fsmount(r3, 0x0, 0x2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0xe35) 15:52:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000800000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:09 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x4203) 15:52:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="98000000000000000000"], 0x0, 0x0, 0x0}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000680), 0xffffffffffffffff, 0x2}}, 0x18) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000240)='autogroup\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1f) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r5) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000180)={0x5, 0x1000000, "f16e11c4238f02740d2b7fdd93220695b0d4bff91bf783e0", {0x8, 0x2}, 0x9}) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000008c0362ecf43f011776dac518b704d91c19cdf9631fce052f5331548cd487db0ee61161f5167fc4c715e27403fdf9b9d713fc2b1ea19ba663fc8d7bf4de7ed023170985b70245f75e1774f336beccf9db4335d26a4c410b7088a1e1f8ad1baaaab5e73ea7e6c9261c12b58c00ad5808b1be1389499e2b6320d095c85a5b19"], 0x0, 0x0, 0x0}, 0x0) [ 864.429505][T23818] fuse: Bad value for 'fd' 15:52:09 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) llistxattr(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = socket(0x0, 0x803, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) fchmodat(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x34) 15:52:09 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x4800) 15:52:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000e00000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 864.660033][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.670497][ T345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.682349][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:10 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 864.712388][T23834] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 864.729607][T23834] device ip6gretap1 entered promiscuous mode 15:52:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000f00000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 864.821495][T23843] fuse: Bad value for 'fd' [ 864.888253][ T8181] usb 4-1: new high-speed USB device number 52 using dummy_hcd 15:52:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00006000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:10 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) [ 865.098847][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.124740][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.153885][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 865.192139][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:52:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000f000000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 865.226967][ T8181] usb 4-1: config 0 descriptor?? [ 865.230320][T23854] fuse: Bad value for 'fd' 15:52:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000f00000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:10 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x4803) 15:52:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00002603000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 865.587663][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 865.596537][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 865.641664][ T8181] usb 4-1: USB disconnect, device number 52 [ 865.861480][ T23] net_ratelimit: 3 callbacks suppressed [ 865.861489][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.078183][ T8181] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 866.101379][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.438159][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.449883][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.460449][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 866.470080][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.483073][ T8181] usb 4-1: config 0 descriptor?? [ 866.898199][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.208136][ T8181] usb 4-1: language id specifier not provided by device, defaulting to English 15:52:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe6a, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) 15:52:12 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x4a00) 15:52:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200, 0x0) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x1, 0x187000) 15:52:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000e000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) llistxattr(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = socket(0x0, 0x803, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) fchmodat(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x34) [ 867.468097][ T8181] uclogic 0003:5543:006E.004A: failed retrieving Huion firmware version: -71 [ 867.477113][ T8181] uclogic 0003:5543:006E.004A: failed probing parameters: -71 [ 867.501947][T23900] fuse: Invalid rootmode [ 867.523038][T23902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 867.531683][ T8181] uclogic: probe of 0003:5543:006E.004A failed with error -71 15:52:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000c00e000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 867.611906][ T8181] usb 4-1: USB disconnect, device number 53 15:52:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) llistxattr(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = socket(0x0, 0x803, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) fchmodat(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x34) [ 867.637267][T23902] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 867.637305][T23902] device ip6gretap1 entered promiscuous mode 15:52:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000f000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:13 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 867.939331][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.978207][ T8181] usb 4-1: new high-speed USB device number 54 using dummy_hcd 15:52:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000326000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 868.078702][T23936] fuse: Invalid rootmode 15:52:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000060000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 868.358044][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.376331][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.415455][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 868.447552][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.502651][ T8181] usb 4-1: config 0 descriptor?? [ 868.848083][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 868.854384][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 868.863722][ T8181] usb 4-1: USB disconnect, device number 54 [ 868.988166][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.139093][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.317985][ T8181] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 869.698055][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.709549][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.721976][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 869.732840][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.746986][ T8181] usb 4-1: config 0 descriptor?? [ 870.028108][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.419447][ T345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.430645][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.440533][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.068047][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.087857][ T8181] uclogic 0003:5543:006E.004B: failed retrieving string descriptor #100: -71 [ 871.100204][ T8181] uclogic 0003:5543:006E.004B: failed retrieving pen parameters: -71 [ 871.117904][ T8181] uclogic 0003:5543:006E.004B: failed probing pen v1 parameters: -71 [ 871.126427][ T8181] uclogic 0003:5543:006E.004B: failed probing parameters: -71 [ 871.134825][ T8181] uclogic: probe of 0003:5543:006E.004B failed with error -71 [ 871.145748][ T8181] usb 4-1: USB disconnect, device number 55 [ 871.849491][ T8181] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 872.097897][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.179231][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.217837][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.233062][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.243004][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 872.252449][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.266327][ T8181] usb 4-1: config 0 descriptor?? 15:52:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x4c00) 15:52:17 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000ec0000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:17 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) llistxattr(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = socket(0x0, 0x803, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) fchmodat(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x34) 15:52:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={0x1}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x0, 0x22, 0xf9, {0xf9, 0x10, "78826442e141c6fa5e315c440c36814f6ef5a2962480185c222e118cf9c9d689eaff0452d02f0d873dcaa3aa8ad5289451a40936d634de5f1f7fb4828260c0662f30a2765d870234ca71ab837c26293a318411110f784e4207b162eba8fabda6e80cd7edcd7d780483734fe01c68cf52d4a031b058fb7928a27ec1b18b7864d84c0f0782afb9d815868fb789269c9d55549cc67ed4d58d37896ca0677fd1034c91fb64e95208ace69735f55ddceb15600bd0f8f04ce0de6b545e09c96ba86d11a3977bdf114e78f1b149ec0579bf8a0842730b3aae045ed7aefc5820f91893c577eebeddf97199aa352dcc328f4931de7e7f959aab6726"}}, &(0x7f0000000400)={0x0, 0x3, 0x74, @string={0x74, 0x3, "98c1d73e89aac60522b6dc6e9c74cdd03c0ae8605925de088580f72bc884b714ff3c6798d141e7698e9fe8890116fcf4aa2d7791e45e34801b427acd44938e018634961e4710b3e4136f696e4edb714a7dc3e73e8ceb36b190d7225499fba56e6a4e1b621c08871d0ad9376934d0e98f3d58"}}, &(0x7f0000000480)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x2, 0x80, "07faa165", "001f4e7a"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x2, 0xe5, 0x1, 0x7, 0x846, 0x2}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000680)={0x20, 0x16, 0x65, "5bf357e8496ee6ba3b2b394f9e6073af077c669f784f6d9ed86f704034b2ed6a7ced0ad184600bcdc17029672b2c2f919c878b9173e9af94a0685c9ae6ec3d25b801fc6d043178e1e09d24150aca3767cf5684676c426bbdfed51ed96ebb5343cf552cd356"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x1, 0x20, [0x0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1f}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0xb, 0x2, "be9e"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0xffff}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @local}, &(0x7f0000000940)={0x40, 0x19, 0x2, "8dc7"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x200}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x4}}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000280), 0x4) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x102, @string={0x102, 0x3, "e29b9457764424a733410b5252a9a6fe66d216c8531ca53f0b334c46b6e2f7ff3854d2593dd671ff700ee0ea5bf4a5273cef4b452e080000001be3c9fde96c7fa1f6f861fe071f8d8f5c6a58ba8906d8f4aa8a5d6ff2518e8cf1a1b6309888220a4fb23376afe3e0e31828b47d12b0f23a469431894571e64074b844e5bf3f21cb4303d37845ef27afaa7e661f068767ecedf77c738062d370e023dab08bbeb1a6063fc2e70229957ec6a31b07c3a989ba725704c64c35d90e1e8077211ff0a8339e610622d94a8b36851db4a5638c5812ace980315c43141dd5263eb65b66ed1dee9f58c38c879a0f0c272a83f5381cf7e2134f0d7a412765ee3a58f4e1a24f"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) [ 872.456026][T23998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 872.487709][T24000] fuse: Invalid rootmode [ 872.487787][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 872.504423][T24002] fuse: Invalid rootmode [ 872.532289][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 872.555591][T23998] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:52:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000f0000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 872.555632][T23998] device ip6gretap1 entered promiscuous mode [ 872.569581][ T8181] usb 4-1: USB disconnect, device number 56 15:52:18 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000040030001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 872.937696][ T8181] usb 4-1: new high-speed USB device number 57 using dummy_hcd 15:52:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') ustat(0x0, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) 15:52:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000003400001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:18 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 873.317731][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.343996][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.366650][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 873.372324][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.403342][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.448015][ T8181] usb 4-1: config 0 descriptor?? 15:52:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x5003) 15:52:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000fffff00001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tkill(0xffffffffffffffff, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0x60, 0x0, r0, {{0x1, 0x1, 0x80000000, 0x9, 0x200, 0x101, 0x7, 0x3}}}, 0x60) keyctl$setperm(0x5, 0x0, 0x20001) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) unshare(0x40000200) [ 873.604737][T24053] IPVS: ftp: loaded support on port[0] = 21 15:52:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000101"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0xa1, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000007200000240012800b00010067656e657665000014000280060005004e210000"], 0x54}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200, 0x0) ioctl$CAPI_INSTALLED(r2, 0x80024322) [ 873.808892][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 873.814988][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 873.858264][ T8181] usb 4-1: USB disconnect, device number 57 [ 873.979820][T24091] IPVS: ftp: loaded support on port[0] = 21 [ 874.021358][ T7] tipc: TX() has been purged, node left! [ 874.026702][T24093] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 874.046624][T24093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 874.095729][T24093] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 874.115282][T24093] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 874.139055][T24093] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 874.159527][T24093] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 874.287723][ T8181] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 874.417904][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.657945][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.677568][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.687332][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 874.699713][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.715998][ T8181] usb 4-1: config 0 descriptor?? [ 875.219752][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.457774][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.638594][ T7] tipc: TX() has been purged, node left! [ 875.879565][ T8181] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.004C/input/input8 [ 875.899323][ T8181] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:006E.004C/input/input9 [ 875.926139][ T8181] uclogic 0003:5543:006E.004C: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.3-1/input0 [ 876.497912][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x4, 0x6aee4d96, 0x40, 0x481a, 0x3, 0x7a2e, 0xb07, 0x3f71be25}, &(0x7f0000000140)={0x100000000, 0x6, 0x8b, 0x7, 0x200, 0x2, 0x169, 0x80}, &(0x7f0000000180)={0xdc, 0x1000, 0x6, 0x3, 0x8001, 0x24f6275d, 0x3, 0x6ef7}, &(0x7f00000001c0)={0x77359400}) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:52:22 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:22 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x5865) 15:52:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0xa1, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000007200000240012800b00010067656e657665000014000280060005004e210000"], 0x54}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200, 0x0) ioctl$CAPI_INSTALLED(r2, 0x80024322) 15:52:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000201"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:22 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x24) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x24) r2 = syz_open_procfs(r1, &(0x7f0000000080)='setgroups\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0xc0, 0x0, 0xc0, 0x288, 0xc0, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x3}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @empty, 0xffffffff, 0xffffff00, 'xfrm0\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x0, 0x2, 0x8}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'veth1_to_bridge\x00', '\x00', {0xff}, {}, 0x1, 0x0, 0x10}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x6, 0x3, 'bm\x00', "efe5133284cdd6146475a821e4732ce2b4742285e54694d70399c1807fac3fd02f147005a0689f1f6f2cb13a5951356886859ecd9cfa7fa23783335db93fee2c5fdd66e1476c03af4d8bb3f00217e3f1d209f839dcc5839985ace0b62318016d6a2f1397e1a2b6b0b46b8cbd70b71f54dd1cb6219b87680d1f9f322c78316135", 0x28, 0x2, {0x9}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x1, @remote, 0x4e24}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) syz_usb_connect(0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007c6e2240f00367050a980000000109022e0001000000000904000000b0386d0005240600000524bdd34c6e0912bd6dc3ab833cf393700000000d240f85bedc232f432772667d4dbf035eccb059e924d5be1a7bf4735b492add695d70d76df2147d0e3c531fdb1bcbf3"], 0x0) [ 877.093446][ T8181] usb 4-1: USB disconnect, device number 58 15:52:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={0x1}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x0, 0x22, 0xf9, {0xf9, 0x10, "78826442e141c6fa5e315c440c36814f6ef5a2962480185c222e118cf9c9d689eaff0452d02f0d873dcaa3aa8ad5289451a40936d634de5f1f7fb4828260c0662f30a2765d870234ca71ab837c26293a318411110f784e4207b162eba8fabda6e80cd7edcd7d780483734fe01c68cf52d4a031b058fb7928a27ec1b18b7864d84c0f0782afb9d815868fb789269c9d55549cc67ed4d58d37896ca0677fd1034c91fb64e95208ace69735f55ddceb15600bd0f8f04ce0de6b545e09c96ba86d11a3977bdf114e78f1b149ec0579bf8a0842730b3aae045ed7aefc5820f91893c577eebeddf97199aa352dcc328f4931de7e7f959aab6726"}}, &(0x7f0000000400)={0x0, 0x3, 0x74, @string={0x74, 0x3, "98c1d73e89aac60522b6dc6e9c74cdd03c0ae8605925de088580f72bc884b714ff3c6798d141e7698e9fe8890116fcf4aa2d7791e45e34801b427acd44938e018634961e4710b3e4136f696e4edb714a7dc3e73e8ceb36b190d7225499fba56e6a4e1b621c08871d0ad9376934d0e98f3d58"}}, &(0x7f0000000480)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x2, 0x80, "07faa165", "001f4e7a"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x2, 0xe5, 0x1, 0x7, 0x846, 0x2}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000680)={0x20, 0x16, 0x65, "5bf357e8496ee6ba3b2b394f9e6073af077c669f784f6d9ed86f704034b2ed6a7ced0ad184600bcdc17029672b2c2f919c878b9173e9af94a0685c9ae6ec3d25b801fc6d043178e1e09d24150aca3767cf5684676c426bbdfed51ed96ebb5343cf552cd356"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x1, 0x20, [0x0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1f}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0xb, 0x2, "be9e"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0xffff}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @local}, &(0x7f0000000940)={0x40, 0x19, 0x2, "8dc7"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x200}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x4}}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000280), 0x4) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:52:22 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x5a03) [ 877.259248][T24168] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 877.261881][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:52:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000401"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:22 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b1f2e00f00b86aac0000ba000000000f30", 0x3d}], 0x1, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x70, 0xfa, 0xf7, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x7, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) copy_file_range(r1, &(0x7f0000000080)=0x8, r2, &(0x7f00000000c0), 0x2, 0x0) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) fcntl$notify(r6, 0x402, 0x11) 15:52:22 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:22 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x5c00) [ 877.555523][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.577524][ T8181] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 877.634501][T24191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 877.655142][T24191] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 877.671838][T24191] device ip6gretap1 entered promiscuous mode [ 877.767370][ T17] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 877.948161][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.969734][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.984989][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 878.002831][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.027117][ T8181] usb 4-1: config 0 descriptor?? [ 878.164566][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.188175][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.227479][ T17] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 878.236543][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.268663][ T17] usb 2-1: config 0 descriptor?? [ 878.277276][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.387462][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 878.394784][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 878.433371][ T8181] usb 4-1: USB disconnect, device number 59 [ 878.577858][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.607535][ T17] usbhid 2-1:0.0: can't add hid device: -71 [ 878.613772][ T17] usbhid: probe of 2-1:0.0 failed with error -71 [ 878.630900][ T17] usb 2-1: USB disconnect, device number 12 [ 878.857440][ T8181] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 879.137420][ T17] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 879.217452][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.228565][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.240077][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 879.249834][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.261631][ T8181] usb 4-1: config 0 descriptor?? [ 879.527381][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.539316][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.549673][ T17] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 879.558946][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.568492][ T17] usb 2-1: config 0 descriptor?? [ 879.617589][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.027532][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.607388][ T8181] uclogic 0003:5543:006E.004D: failed retrieving string descriptor #100: -71 [ 880.616256][ T8181] uclogic 0003:5543:006E.004D: failed retrieving pen parameters: -71 [ 880.625536][ T8181] uclogic 0003:5543:006E.004D: failed probing pen v1 parameters: -71 [ 880.633946][ T8181] uclogic 0003:5543:006E.004D: failed probing parameters: -71 [ 880.643019][ T8181] uclogic: probe of 0003:5543:006E.004D failed with error -71 [ 880.654344][ T8181] usb 4-1: USB disconnect, device number 60 [ 880.674091][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.692688][ T17] input: HID 5543:006e Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:006E.004E/input/input10 [ 880.720816][ T17] input: HID 5543:006e Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:006E.004E/input/input11 [ 880.764726][ T17] uclogic 0003:5543:006E.004E: input,hidraw0: USB HID v0.00 Keypad [HID 5543:006e] on usb-dummy_hcd.1-1/input0 [ 881.297549][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.367248][ T8223] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 881.709258][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.727883][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.738869][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.750323][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 881.760288][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.773321][ T8223] usb 4-1: config 0 descriptor?? 15:52:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000540)={0x9, 0x0, 0x8, 0xcd, 0x8, "71d9d869f75400df66fbd8e79cc02eb07a4a17", 0x5}) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000140)={0x0, 0x401, 0xffffffffffffffff, &(0x7f0000000080)=0x400}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x6, @mcast1, 0x7}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="fa408295e803c99538b5862b", 0xc}, {&(0x7f0000000200)="8227f8f8a1ab06cb5d1b86a2816c912ca2893a88092ddb", 0x17}, {&(0x7f0000000240)="3358364cb540f45672aaeb2426a2f0bf52e4241a45bebedef9cca857a3253fd215ecdb4853c8cd5c", 0x28}, {&(0x7f0000000340)="b8fa1e83ba9dd7a1f362b6c0cc2aa0b24bfe7386eb666b7fa1c203c7bc00ce73dba6cc713513d3cc8f0ad48e4de0c1825c388967f476b7abe0a883632a7d254bb4d9ebb2ee03cf9f7ef29221edce75bf4b7358771048e045c9df8c16b8cd1ff83159e165517a9d00a20f0d3b0957a3dadc32250007e9c106ece8c31df665bd3ac575c4507bcfcc2d814685541023419890cb75d44dc90ab7b26f085c09c1914e0f433957c5b36c7256f384544e21f6a2962650219d275a66c8b4310e576ff37339d5f756dcb6a80bfb43d153e2ac6300af33668b4e499e94d83e13b398c9ec2ef5ca666fd9c6dff75a82", 0xea}], 0x4, &(0x7f0000000440)=[@authinfo={0x18, 0x84, 0x6, {0x8657}}, @init={0x18, 0x84, 0x0, {0x80, 0xa, 0x8, 0x80}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0x4, 0x9, 0x56, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0xa8, 0x880}], 0x1, 0x4000000) 15:52:27 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000801"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x6000) 15:52:27 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b1f2e00f00b86aac0000ba000000000f30", 0x3d}], 0x1, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x70, 0xfa, 0xf7, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x7, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) copy_file_range(r1, &(0x7f0000000080)=0x8, r2, &(0x7f00000000c0), 0x2, 0x0) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) fcntl$notify(r6, 0x402, 0x11) 15:52:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x4, 0x6aee4d96, 0x40, 0x481a, 0x3, 0x7a2e, 0xb07, 0x3f71be25}, &(0x7f0000000140)={0x100000000, 0x6, 0x8b, 0x7, 0x200, 0x2, 0x169, 0x80}, &(0x7f0000000180)={0xdc, 0x1000, 0x6, 0x3, 0x8001, 0x24f6275d, 0x3, 0x6ef7}, &(0x7f00000001c0)={0x77359400}) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) [ 881.998178][T24282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 882.008118][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 882.019057][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 15:52:27 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000e01"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 882.056402][ T8223] usb 4-1: USB disconnect, device number 61 [ 882.082596][T24282] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 882.109233][ T8181] usb 2-1: USB disconnect, device number 13 [ 882.159604][T24282] device ip6gretap1 entered promiscuous mode 15:52:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000f01"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:27 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x800000080004105) 15:52:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000032601"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:27 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) [ 882.477150][ T8223] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 882.548214][ T8181] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 882.751789][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.847286][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.877051][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.907287][ T8181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.948718][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 882.959805][ T8181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.989808][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.006795][ T8181] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 883.024748][ T8223] usb 4-1: config 0 descriptor?? [ 883.047068][ T8181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.062416][ T8181] usb 2-1: config 0 descriptor?? [ 883.407187][ T8181] usbhid 2-1:0.0: can't add hid device: -71 [ 883.413607][ T8181] usbhid: probe of 2-1:0.0 failed with error -71 [ 883.426827][ T8223] usbhid 4-1:0.0: can't add hid device: -71 [ 883.433035][ T8223] usbhid: probe of 4-1:0.0 failed with error -71 [ 883.449574][ T8181] usb 2-1: USB disconnect, device number 14 [ 883.456779][ T8223] usb 4-1: USB disconnect, device number 62 [ 883.787245][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.877087][ T8223] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 883.927059][ T8181] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 884.237109][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.248650][ T8223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.259025][ T8223] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 884.269304][ T8223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.282491][ T8223] usb 4-1: config 0 descriptor?? [ 884.293243][ T8181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.305017][ T8181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.315437][ T8181] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 884.324659][ T8181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.333973][ T8181] usb 2-1: config 0 descriptor?? [ 884.355187][ T5] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.828765][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.657070][ T8223] uclogic 0003:5543:006E.004F: failed retrieving string descriptor #100: -71 [ 885.666032][ T8223] uclogic 0003:5543:006E.004F: failed retrieving pen parameters: -71 [ 885.687188][ T8223] uclogic 0003:5543:006E.004F: failed probing pen v1 parameters: -71 [ 885.697834][ T8223] uclogic 0003:5543:006E.004F: failed probing parameters: -71 [ 885.705416][ T8223] uclogic: probe of 0003:5543:006E.004F failed with error -71 [ 885.713291][ T8181] uclogic 0003:5543:006E.0050: failed retrieving string descriptor #100: -71 [ 885.727551][ T8181] uclogic 0003:5543:006E.0050: failed retrieving pen parameters: -71 [ 885.735648][ T8181] uclogic 0003:5543:006E.0050: failed probing pen v1 parameters: -71 [ 885.757541][ T8223] usb 4-1: USB disconnect, device number 63 [ 885.773894][ T8181] uclogic 0003:5543:006E.0050: failed probing parameters: -71 [ 885.786358][ T8181] uclogic: probe of 0003:5543:006E.0050 failed with error -71 [ 885.804922][ T8181] usb 2-1: USB disconnect, device number 15 [ 885.869134][ T8180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.426886][ T8181] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 886.797007][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.811737][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.823063][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 886.836513][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.848989][ T8181] usb 4-1: config 0 descriptor?? [ 886.897013][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x6, 0x404000) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000140)=0x3) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "d9f01c00ed2a48fd377e5ad918f1a309da3b793932ae05002a"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:52:32 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) 15:52:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000006001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:32 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x6558) 15:52:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000032601"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:32 executing program 1: prctl$PR_SET_FP_MODE(0x2d, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x5, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/35, 0x23) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000019c0), 0x45d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0xd, 0x0, 0x0) [ 887.046569][T24427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 887.096988][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 887.104652][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 887.155842][ T8181] usb 4-1: USB disconnect, device number 64 [ 887.157311][T24427] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:52:32 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) 15:52:32 executing program 4: r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1c01) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000c40)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000480)=""/232, 0xe8, 0x7ff, 0x2, 0x3, 0x4, 0xfff}}, 0x120) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000240)={0x0, @reserved}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xbc00}], 0x1, 0x0) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x782f, 0x0, 0x7ff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 15:52:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000ffffff9e01"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 887.230671][T24427] device ip6gretap1 entered promiscuous mode 15:52:32 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) [ 887.377383][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000ec001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 887.566982][ T8181] usb 4-1: new high-speed USB device number 65 using dummy_hcd 15:52:32 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000400)={0x3, 0x80, 0x63, 0xae16, 0xc3a, 0x81, 0x45b144b, 0xfffffffffffffffe}, &(0x7f0000000040)={0x8, 0x5, 0x400, 0x3, 0x1f, 0x8000, 0xa7be, 0x100000001}, &(0x7f0000000080)={0x1cfc, 0x7, 0x8, 0x2, 0x20, 0x1, 0xffffffffffffff7e, 0x80000001}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x207]}, 0x8}) mlockall(0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000011000/0x2000)=nil) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000001c0)) shmat(0x0, &(0x7f0000012000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x183, &(0x7f0000009000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmat(0x0, &(0x7f000000a000/0x10000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x1a1001, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0x807, 0x81, 0x5, 0x5, 0x5}, 0x14) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(r0, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_io_uring_setup(0x87, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x9, &(0x7f0000000280)=[{0x2, 0x4, 0x2, 0x8}, {0x1800, 0x43, 0xf7, 0x3}, {0x2, 0x46, 0x7e, 0xac}, {0x5, 0x2, 0x80, 0x3}, {0xfffe, 0x6c, 0xc2, 0x40}, {0x6771, 0x81, 0x1, 0x2}, {0xc0eb, 0x6, 0x1, 0xffffffff}, {0x2, 0x81, 0x7f}, {0x9, 0xff, 0x6, 0x80005}]}) [ 887.937214][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.973478][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.985421][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.005216][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 888.026942][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.048214][ T8181] usb 4-1: config 0 descriptor?? [ 888.396912][ T8181] usbhid 4-1:0.0: can't add hid device: -71 [ 888.403113][ T8181] usbhid: probe of 4-1:0.0 failed with error -71 [ 888.416639][ T8181] usb 4-1: USB disconnect, device number 65 [ 888.896846][ T8181] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 888.976894][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.257305][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.268351][ T8181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.279469][ T8181] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 889.289558][ T8181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.300518][ T8181] usb 4-1: config 0 descriptor?? [ 889.616953][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.017094][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.417186][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.656886][ T8181] uclogic 0003:5543:006E.0051: failed retrieving string descriptor #100: -71 [ 890.665691][ T8181] uclogic 0003:5543:006E.0051: failed retrieving pen parameters: -71 [ 890.686997][ T8181] uclogic 0003:5543:006E.0051: failed probing pen v1 parameters: -71 [ 890.695125][ T8181] uclogic 0003:5543:006E.0051: failed probing parameters: -71 [ 890.702927][ T8181] uclogic: probe of 0003:5543:006E.0051 failed with error -71 [ 890.714096][ T8181] usb 4-1: USB disconnect, device number 66 [ 891.056868][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.426646][ T17] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 891.866718][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.878521][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.889828][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 891.902147][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.911836][ T17] usb 4-1: config 0 descriptor?? 15:52:37 executing program 3: r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000680)=""/4092, 0xffc, 0x10000, &(0x7f0000000140)={0x23, 0x5, 0x69, 0xbe}, 0x10) 15:52:37 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe000000905820249"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x7, 0x1, 0x1, 0x1, 0x10000, 0x81, 0x101, 0x96, 0x5, 0x7ff, 0x401, 0x4, 0x73e2, 0x2, 0xa, 0xc, {0x7fff, 0xfffffff8}, 0x6, 0x4f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x8c, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x112}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4850}, 0x1) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r3, 0x29, 0x50, &(0x7f0000000140)=0x2, 0x4) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={0xffffffffffffffff, 0x13, 0x0, 0x0, 0x0}, 0x20) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYRES16, @ANYRES16], 0x0) 15:52:37 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) 15:52:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1842}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0x1, 0xffffffffffffff8f) sendto$inet(r0, &(0x7f0000fa3fff), 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00006a3000/0x4000)=nil, 0x4000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0xfffff000) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xc, 0xffffffffffffffff) 15:52:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000fffffff001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:37 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x6800) [ 891.991574][ T17] usb 4-1: can't set config #0, error -71 [ 891.998938][ T17] usb 4-1: USB disconnect, device number 67 [ 892.056002][T24526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 892.097039][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.114113][T24526] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:52:37 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004105) 15:52:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000f0ffff01"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 892.143520][T24526] device ip6gretap1 entered promiscuous mode 15:52:37 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) 15:52:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00007fffffff01"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 892.337073][ T8223] usb 5-1: new high-speed USB device number 35 using dummy_hcd 15:52:37 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) 15:52:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00009effffff01"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 892.596552][ T8223] usb 5-1: Using ep0 maxpacket: 8 [ 892.596748][ T17] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 892.717147][ T8223] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 892.759026][ T8223] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 892.810609][ T8223] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 73 [ 892.835816][ T8223] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 892.865428][ T8223] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 892.890352][ T8223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.916971][T24530] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.926409][T24530] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.936631][ T17] usb 4-1: device descriptor read/64, error 18 [ 892.958326][ T8223] hub 5-1:1.0: bad descriptor, ignoring hub [ 892.964613][ T8223] hub: probe of 5-1:1.0 failed with error -5 [ 893.137291][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.162446][T24530] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 893.191935][T24530] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 893.376707][ T17] usb 4-1: device descriptor read/64, error 18 [ 893.437924][ T8223] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 893.469034][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.666607][ T17] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 893.936635][ T17] usb 4-1: device descriptor read/64, error 18 [ 894.066595][T24530] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 894.177545][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.306464][T24530] usb 5-1: Using ep0 maxpacket: 8 [ 894.326556][ T17] usb 4-1: device descriptor read/64, error 18 [ 894.407203][T24597] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 894.414130][T24597] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 894.450667][ T17] usb usb4-port1: attempt power cycle [ 894.476519][ C0] usblp0: nonzero read bulk status received: -71 [ 894.632358][ T8181] usb 5-1: USB disconnect, device number 35 [ 894.640917][ T8181] usblp0: removed 15:52:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xf0, @string={0xeb, 0x3, "db85336d0dfa6f8dbebb4fd8654c5a14bdf60b41b9f84117fffbfb5cd1fbe6f2727db840075c090090851a7583c2cce0b4aae2e074b52739825960a0acf2ae90a755070962ce86fa361a6466db066d723ed46206c238f5155fc39168bb0f4da542dbff6dc6647756d797f18f5b4d9eacfea466f162b63400b0a787b7e3d982f2181e74d1fee51b734a1e025c07a26316508c24c56a004b2428b8b61b4518a436bc6b347316ba8473119c2fefe172ac75d2bb5fce368f93ab05ddea5a384271916801a1ee3e0c3212a8a7af6d9151538f54f82e5ab236954eaeeae2d170524ac96f79fc9724e6a26066"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) [ 895.216668][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:40 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f00000002c0)='sched\x00') open(0x0, 0x2800, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r1) 15:52:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000f0ffffff01"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:40 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x0) 15:52:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00007fffffff01"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x6c00) [ 895.406477][ T8181] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 895.485536][T24630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 895.596536][ T17] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 895.599741][T24630] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue 15:52:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000000001f"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:40 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0x1f}], 0x1}, 0x4004884) r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r3 = epoll_create(0x5) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r3, 0xea32b000) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:52:41 executing program 2 (fault-call:5 fault-nth:0): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 895.703955][T24630] device ip6gretap1 entered promiscuous mode [ 895.807184][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.849051][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.871199][T24644] FAULT_INJECTION: forcing a failure. [ 895.871199][T24644] name failslab, interval 1, probability 0, space 0, times 0 [ 895.911807][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 895.959953][T24644] CPU: 0 PID: 24644 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 895.968667][T24644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.978727][T24644] Call Trace: [ 895.982035][T24644] dump_stack+0x18f/0x20d [ 895.986387][T24644] should_fail.cold+0x5/0x14 [ 895.991032][T24644] should_failslab+0x5/0xf [ 895.991252][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.995448][T24644] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 895.995468][T24644] kmem_cache_alloc_trace+0x49/0x2c0 [ 895.995494][T24644] alloc_pipe_info+0x10a/0x590 [ 895.995512][T24644] splice_direct_to_actor+0x779/0x980 [ 895.995533][T24644] ? generic_splice_sendpage+0x140/0x140 [ 896.030610][T24644] ? apparmor_file_permission+0x26e/0x4e0 [ 896.036351][T24644] ? do_splice_to+0x170/0x170 [ 896.041043][T24644] ? security_file_permission+0x248/0x560 [ 896.046780][T24644] do_splice_direct+0x1b3/0x280 [ 896.051650][T24644] ? splice_direct_to_actor+0x980/0x980 [ 896.058006][T24644] ? security_file_permission+0x248/0x560 [ 896.063751][T24644] do_sendfile+0x55f/0xd40 [ 896.068186][T24644] ? do_compat_pwritev64+0x1b0/0x1b0 [ 896.073482][T24644] ? wait_for_completion+0x260/0x260 [ 896.078867][T24644] ? vfs_write+0x1b0/0x730 [ 896.083300][T24644] __x64_sys_sendfile64+0x1cc/0x210 [ 896.088516][T24644] ? __ia32_sys_sendfile+0x220/0x220 [ 896.093820][T24644] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 896.099806][T24644] ? trace_hardirqs_on+0x5f/0x220 [ 896.104841][T24644] ? lockdep_hardirqs_on+0x76/0xf0 [ 896.109964][T24644] do_syscall_64+0x2d/0x70 [ 896.114387][T24644] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 896.120283][T24644] RIP: 0033:0x45d5b9 [ 896.124188][T24644] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 896.143886][T24644] RSP: 002b:00007f39a8a66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 896.152307][T24644] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 15:52:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000400"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 896.160291][T24644] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 896.167451][ T17] usb 4-1: config 0 descriptor?? [ 896.168292][T24644] RBP: 00007f39a8a66ca0 R08: 0000000000000000 R09: 0000000000000000 [ 896.168302][T24644] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000000 [ 896.168312][T24644] R13: 000000000169fb6f R14: 00007f39a8a679c0 R15: 000000000118cf4c 15:52:41 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f00000002c0)='sched\x00') open(0x0, 0x2800, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r1) 15:52:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000002000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 896.339313][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.666505][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 896.672739][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 896.744648][ T17] usb 4-1: USB disconnect, device number 70 [ 896.926833][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.166458][ T17] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 897.376478][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.536557][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.547605][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.557631][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 897.567071][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.584316][ T17] usb 4-1: config 0 descriptor?? [ 898.426451][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.936318][ T17] uclogic 0003:5543:006E.0052: failed retrieving string descriptor #100: -71 [ 898.945450][ T17] uclogic 0003:5543:006E.0052: failed retrieving pen parameters: -71 [ 898.966199][ T17] uclogic 0003:5543:006E.0052: failed probing pen v1 parameters: -71 [ 898.974332][ T17] uclogic 0003:5543:006E.0052: failed probing parameters: -71 [ 898.982532][ T17] uclogic: probe of 0003:5543:006E.0052 failed with error -71 [ 898.994020][ T17] usb 4-1: USB disconnect, device number 71 [ 899.216523][ T8181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.467384][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.696198][ T17] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 899.937831][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.056272][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.071256][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.082367][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 900.092265][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.102187][ T17] usb 4-1: config 0 descriptor?? 15:52:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000140)=0x7) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000080)={0x0, 0xf0}) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:52:45 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x4, 0x4) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x8000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0xfe37) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x2000000}, 0x10) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x1, 0x2) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000140)={0x100000000}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 15:52:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000004000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f00000001c0)={0x0, 0x2, 0x7e, 0xa82, 0x8, 0x5, 0x9, 0x6a0, 0x6, 0x800, 0x400, 0x3}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x7ff, &(0x7f00000000c0)=0x2) 15:52:45 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x7400) 15:52:45 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 900.166264][ T17] usb 4-1: can't set config #0, error -71 [ 900.173635][ T17] usb 4-1: USB disconnect, device number 72 [ 900.237999][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000008000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 900.330231][T24718] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 900.350260][T24718] device ip6gretap1 entered promiscuous mode 15:52:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000e000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 900.496542][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:45 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004104) 15:52:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000f000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) [ 900.716297][ T17] usb 4-1: new high-speed USB device number 73 using dummy_hcd 15:52:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000060000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:46 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004106) [ 901.076872][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.110142][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.157505][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 901.199798][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.231508][ T17] usb 4-1: config 0 descriptor?? [ 901.536662][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.586188][ T17] usbhid 4-1:0.0: can't add hid device: -71 [ 901.592274][ T17] usbhid: probe of 4-1:0.0 failed with error -71 [ 901.618785][ T17] usb 4-1: USB disconnect, device number 73 [ 902.046108][ T17] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 902.406098][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.417382][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.427846][ T17] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 902.437639][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.448179][ T17] usb 4-1: config 0 descriptor?? [ 902.576368][T18992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.986453][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.616201][ T7379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.805990][ T17] uclogic 0003:5543:006E.0053: failed retrieving string descriptor #100: -71 [ 903.815098][ T17] uclogic 0003:5543:006E.0053: failed retrieving pen parameters: -71 [ 903.823759][ T17] uclogic 0003:5543:006E.0053: failed probing pen v1 parameters: -71 [ 903.832298][ T17] uclogic 0003:5543:006E.0053: failed probing parameters: -71 [ 903.840234][ T17] uclogic: probe of 0003:5543:006E.0053 failed with error -71 [ 903.850145][ T17] usb 4-1: USB disconnect, device number 74 [ 904.497178][T24814] udc-core: couldn't find an available UDC or it's busy [ 904.504205][T24814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 904.576285][T20233] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 904.656995][ T17] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:52:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000f0000001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 15:52:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="050005"], 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ac98"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xf0, @string={0xeb, 0x3, "db85336d0dfa6f8dbebb4fd8654c5a14bdf60b41b9f84117fffbfb5cd1fbe6f2727db840075c090090851a7583c2cce0b4aae2e074b52739825960a0acf2ae90a755070962ce86fa361a6466db066d723ed46206c238f5155fc39168bb0f4da542dbff6dc6647756d797f18f5b4d9eacfea466f162b63400b0a787b7e3d982f2181e74d1fee51b734a1e025c07a26316508c24c56a004b2428b8b61b4518a436bc6b347316ba8473119c2fefe172ac75d2bb5fce368f93ab05ddea5a384271916801a1ee3e0c3212a8a7af6d9151538f54f82e5ab236954eaeeae2d170524ac96f79fc9724e6a26066"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0xfffffffffffffe3a, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xfffffffffffffe8c}}, 0x0, 0x0, 0x0}, 0x0) 15:52:50 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc)) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x15) timerfd_create(0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 15:52:50 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000010001fff000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000340012800e0001006970366772657461700000002000028014000700fe880000000000000000000000000001060002000200000008000a00", @ANYRES32, @ANYBLOB="0e002400b16ad2a7c4b3143ff80b030008000d"], 0x80}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x7800) 15:52:50 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x80000008000410a) [ 905.127772][T20233] usb 4-1: unable to read config index 0 descriptor/all [ 905.134786][T20233] usb 4-1: can't read configurations, error -71 [ 905.190444][T24824] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 905.190454][T24824] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 905.190468][T24824] CPU: 1 PID: 24824 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 905.190476][T24824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.190496][T24824] RIP: 0010:__switch_to_asm+0x0/0x40 [ 905.190510][T24824] Code: e8 35 e2 b3 00 48 8b 44 24 28 48 c7 84 c4 48 01 00 00 00 00 00 00 8b 44 24 3c 00 77 00 00 70 77 77 00 70 77 07 00 77 77 77 07 <00> 00 00 00 00 00 00 00 70 77 77 00 70 77 70 07 70 77 77 00 00 00 [ 905.190518][T24824] RSP: 0018:ffffc900088cf2f0 EFLAGS: 00010046 [ 905.190530][T24824] RAX: dffffc0000000000 RBX: ffff8880ae735e18 RCX: 0000000000000000 [ 905.190539][T24824] RDX: 1ffff11015ce6bc2 RSI: ffff8880978a2500 RDI: ffff888027ee2000 [ 905.190548][T24824] RBP: ffffc900088cf3c8 R08: 0000000000000001 R09: ffff888027ee28e0 [ 905.190557][T24824] R10: fffffbfff1564691 R11: 0000000000000000 R12: ffff888027ee2000 [ 905.190566][T24824] R13: ffff8880ae735e00 R14: ffff8880978a2500 R15: ffff888027ee2430 [ 905.190578][T24824] FS: 00007f39a8a67700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 905.190587][T24824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.190596][T24824] CR2: 0000000001590004 CR3: 000000008efa2000 CR4: 00000000001526e0 [ 905.190607][T24824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 905.190615][T24824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 905.190619][T24824] Call Trace: [ 905.190635][T24824] __schedule+0x8e5/0x21e0 [ 905.190655][T24824] ? io_schedule_timeout+0x140/0x140 [ 905.190668][T24824] ? sched_clock_cpu+0x18/0x1b0 [ 905.190683][T24824] ? preempt_schedule_irq+0x88/0x150 [ 905.190699][T24824] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 905.190715][T24824] preempt_schedule_irq+0xb0/0x150 [ 905.190732][T24824] irqentry_exit+0x65/0x90 [ 905.190746][T24824] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 905.190761][T24824] RIP: 0010:__sanitizer_cov_trace_pc+0x52/0x60 [ 905.190774][T24824] Code: 74 2b 8b 82 00 14 00 00 83 f8 02 75 20 48 8b 8a 08 14 00 00 8b 92 04 14 00 00 48 8b 01 48 83 c0 01 48 39 c2 76 07 48 89 34 c1 <48> 89 01 c3 66 2e 0f 1f 84 00 00 00 00 00 41 55 41 54 49 89 fc 55 [ 905.190781][T24824] RSP: 0018:ffffc900088cf4b8 EFLAGS: 00000216 [ 905.190792][T24824] RAX: 000000000001850a RBX: 00000000ffffffff RCX: ffffc9000d245000 [ 905.190801][T24824] RDX: 0000000000040000 RSI: ffffffff814e5559 RDI: ffffffff8a1a1840 [ 905.190807][T24824] RBP: ffffffff8a1a1840 R08: 0000000000000000 R09: ffffffff8c5f39e7 [ 905.190813][T24824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 905.190819][T24824] R13: ffffc900088cf670 R14: 0000000000000000 R15: 0000000000000000 [ 905.190835][T24824] ? notifier_call_chain+0x1a9/0x200 [ 905.190847][T24824] notifier_call_chain+0x1a9/0x200 [ 905.190862][T24824] __atomic_notifier_call_chain+0x95/0x180 [ 905.190874][T24824] do_con_write+0xd1f/0x1d70 [ 905.190888][T24824] ? do_con_trol+0x51e0/0x51e0 [ 905.190901][T24824] ? wait_for_completion+0x260/0x260 [ 905.190911][T24824] con_write+0x22/0xb0 [ 905.190922][T24824] n_tty_write+0x3ce/0xf80 [ 905.190937][T24824] ? n_tty_receive_char_lnext+0x700/0x700 [ 905.190953][T24824] ? lock_is_held_type+0xbb/0xf0 [ 905.190964][T24824] ? __init_waitqueue_head+0x110/0x110 [ 905.190975][T24824] ? __virt_addr_valid+0x1fe/0x2b0 [ 905.190985][T24824] ? __phys_addr+0x9a/0x110 [ 905.190996][T24824] ? __might_fault+0x50/0x1d0 [ 905.191009][T24824] tty_write+0x4d9/0x870 [ 905.191019][T24824] ? n_tty_receive_char_lnext+0x700/0x700 [ 905.191030][T24824] ? tty_read+0x290/0x290 [ 905.191042][T24824] __kernel_write+0x199/0x570 [ 905.191055][T24824] write_pipe_buf+0x153/0x1f0 [ 905.191066][T24824] ? user_page_pipe_buf_try_steal+0x90/0x90 [ 905.191076][T24824] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 905.191088][T24824] __splice_from_pipe+0x3dc/0x830 [ 905.191100][T24824] ? user_page_pipe_buf_try_steal+0x90/0x90 [ 905.191120][T24824] direct_splice_actor+0x228/0x2f0 [ 905.191130][T24824] ? generic_splice_sendpage+0x140/0x140 [ 905.191146][T24824] splice_direct_to_actor+0x38c/0x980 [ 905.191158][T24824] ? generic_splice_sendpage+0x140/0x140 [ 905.191169][T24824] ? do_splice_to+0x170/0x170 [ 905.191180][T24824] ? security_file_permission+0x248/0x560 [ 905.191193][T24824] do_splice_direct+0x1b3/0x280 [ 905.191204][T24824] ? splice_direct_to_actor+0x980/0x980 [ 905.191216][T24824] ? security_file_permission+0x248/0x560 [ 905.191229][T24824] do_sendfile+0x55f/0xd40 [ 905.191242][T24824] ? do_compat_pwritev64+0x1b0/0x1b0 [ 905.191252][T24824] ? put_timespec64+0xcb/0x120 [ 905.191260][T24824] ? ns_to_timespec64+0xc0/0xc0 [ 905.191275][T24824] __x64_sys_sendfile64+0x1cc/0x210 [ 905.191286][T24824] ? __ia32_sys_sendfile+0x220/0x220 [ 905.191297][T24824] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 905.191307][T24824] ? trace_hardirqs_on+0x5f/0x220 [ 905.191317][T24824] ? lockdep_hardirqs_on+0x76/0xf0 [ 905.191328][T24824] do_syscall_64+0x2d/0x70 [ 905.191338][T24824] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 905.191345][T24824] RIP: 0033:0x45d5b9 [ 905.191349][T24824] Code: Bad RIP value. [ 905.191354][T24824] RSP: 002b:00007f39a8a66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 905.191363][T24824] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 905.191369][T24824] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 905.191375][T24824] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 905.191381][T24824] R10: 080000008000410a R11: 0000000000000246 R12: 000000000118cf4c [ 905.191387][T24824] R13: 000000000169fb6f R14: 00007f39a8a679c0 R15: 000000000118cf4c [ 905.191394][T24824] Modules linked in: [ 905.191407][T24824] ---[ end trace c2197d5deb621545 ]--- [ 905.191416][T24828] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] PREEMPT SMP KASAN [ 905.191427][T24824] RIP: 0010:__switch_to_asm+0x0/0x40 [ 905.191433][T24828] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 905.191442][T24824] Code: e8 35 e2 b3 00 48 8b 44 24 28 48 c7 84 c4 48 01 00 00 00 00 00 00 8b 44 24 3c 00 77 00 00 70 77 77 00 70 77 07 00 77 77 77 07 <00> 00 00 00 00 00 00 00 70 77 77 00 70 77 70 07 70 77 77 00 00 00 [ 905.191456][T24828] CPU: 0 PID: 24828 Comm: syz-executor.0 Tainted: G D 5.9.0-rc2-syzkaller #0 [ 905.191461][T24824] RSP: 0018:ffffc900088cf2f0 EFLAGS: 00010046 [ 905.191466][T24828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.191473][T24824] RAX: dffffc0000000000 RBX: ffff8880ae735e18 RCX: 0000000000000000 [ 905.191484][T24828] RIP: 0010:__switch_to_asm+0x0/0x40 [ 905.191490][T24824] RDX: 1ffff11015ce6bc2 RSI: ffff8880978a2500 RDI: ffff888027ee2000 [ 905.191499][T24828] Code: e8 35 e2 b3 00 48 8b 44 24 28 48 c7 84 c4 48 01 00 00 00 00 00 00 8b 44 24 3c 00 77 00 00 70 77 77 00 70 77 07 00 77 77 77 07 <00> 00 00 00 00 00 00 00 70 77 77 00 70 77 70 07 70 77 77 00 00 00 [ 905.191505][T24824] RBP: ffffc900088cf3c8 R08: 0000000000000001 R09: ffff888027ee28e0 [ 905.191510][T24828] RSP: 0018:ffffc900089eeee0 EFLAGS: 00010046 [ 905.191516][T24824] R10: fffffbfff1564691 R11: 0000000000000000 R12: ffff888027ee2000 [ 905.191532][T24824] R13: ffff8880ae735e00 R14: ffff8880978a2500 R15: ffff888027ee2430 [ 905.191538][T24828] RAX: dffffc0000000000 RBX: ffff8880ae635e18 RCX: 1ffffffff1564cdf [ 905.191546][T24824] FS: 00007f39a8a67700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 905.191552][T24828] RDX: 1ffff11015cc6bc2 RSI: ffff88809734c3c0 RDI: ffff888049244200 [ 905.191558][T24824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.191564][T24828] RBP: ffffc900089eefb8 R08: 0000000000000000 R09: ffffffff8ab2348f [ 905.191570][T24824] CR2: 0000000001590004 CR3: 000000008efa2000 CR4: 00000000001526e0 [ 905.191576][T24828] R10: fffffbfff1564691 R11: 0000000000000001 R12: ffff888049244200 [ 905.191582][T24824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 905.191588][T24828] R13: ffff8880ae635e00 R14: ffff88809734c3c0 R15: ffff888049244630 [ 905.191593][T24824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 905.191601][T24828] FS: 00007fb55f15a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 905.191605][T24824] Kernel panic - not syncing: Fatal exception [ 905.191612][T24828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.191619][T24828] CR2: 00000000004ea070 CR3: 00000000a2268000 CR4: 00000000001526f0 [ 905.191628][T24828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 905.191635][T24828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 905.191638][T24828] Call Trace: [ 905.191650][T24828] __schedule+0x8e5/0x21e0 [ 905.191665][T24828] ? io_schedule_timeout+0x140/0x140 [ 905.191676][T24828] ? trace_hardirqs_on+0x5f/0x220 [ 905.191690][T24828] ? preempt_schedule_thunk+0x16/0x18 [ 905.191702][T24828] preempt_schedule_common+0x45/0xc0 [ 905.191715][T24828] preempt_schedule_thunk+0x16/0x18 [ 905.191728][T24828] unwind_next_frame+0xe54/0x1f90 [ 905.191741][T24828] ? netlink_sendmsg+0x856/0xd90 [ 905.191752][T24828] ? deref_stack_reg+0x150/0x150 [ 905.191762][T24828] ? __unwind_start+0x517/0x800 [ 905.191776][T24828] ? profile_setup.cold+0xc1/0xc1 [ 905.191788][T24828] arch_stack_walk+0x81/0xf0 [ 905.191803][T24828] ? sock_sendmsg+0xcf/0x120 [ 905.191817][T24828] stack_trace_save+0x8c/0xc0 [ 905.191831][T24828] ? stack_trace_consume_entry+0x160/0x160 [ 905.191846][T24828] ? stack_trace_consume_entry+0x160/0x160 [ 905.191857][T24828] ? pskb_expand_head+0xb0c/0x1040 [ 905.191868][T24828] kasan_save_stack+0x1b/0x40 [ 905.191878][T24828] ? kasan_save_stack+0x1b/0x40 [ 905.191889][T24828] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 905.191899][T24828] ? kmem_cache_alloc+0x138/0x3a0 [ 905.191908][T24828] ? skb_clone+0x14f/0x3c0 [ 905.191919][T24828] ? netlink_deliver_tap+0x990/0xb70 [ 905.191929][T24828] ? netlink_unicast+0x697/0x7d0 [ 905.191940][T24828] ? ctrl_getfamily+0x430/0x591 [ 905.191952][T24828] ? genl_rcv_msg+0x61d/0x980 [ 905.191962][T24828] ? netlink_rcv_skb+0x15a/0x430 [ 905.191972][T24828] ? genl_rcv+0x24/0x40 [ 905.191982][T24828] ? netlink_unicast+0x533/0x7d0 [ 905.191993][T24828] ? netlink_sendmsg+0x856/0xd90 [ 905.192003][T24828] ? netlink_rcv_skb+0x15a/0x430 [ 905.192013][T24828] ? genl_rcv+0x24/0x40 [ 905.192032][T24828] ? kvm_sched_clock_read+0x14/0x40 [ 905.192043][T24828] ? sched_clock+0x2a/0x40 [ 905.192053][T24828] ? sched_clock_cpu+0x18/0x1b0 [ 905.192063][T24828] ? sched_clock_cpu+0x18/0x1b0 [ 905.192077][T24828] ? check_preemption_disabled+0x50/0x130 [ 905.192089][T24828] ? trace_hardirqs_on+0x5f/0x220 [ 905.192102][T24828] ? kasan_unpoison_shadow+0x33/0x40 [ 905.192113][T24828] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 905.192124][T24828] kmem_cache_alloc+0x138/0x3a0 [ 905.192136][T24828] skb_clone+0x14f/0x3c0 [ 905.192149][T24828] netlink_deliver_tap+0x990/0xb70 [ 905.192163][T24828] netlink_unicast+0x697/0x7d0 [ 905.192176][T24828] ? netlink_attachskb+0x810/0x810 [ 905.192186][T24828] ? memset+0x20/0x40 [ 905.192195][T24828] ? __alloc_skb+0x34a/0x550 [ 905.192208][T24828] ctrl_getfamily+0x430/0x591 [ 905.192221][T24828] ? genl_register_family+0x10d0/0x10d0 [ 905.192235][T24828] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 905.192247][T24828] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 905.192260][T24828] genl_rcv_msg+0x61d/0x980 [ 905.192276][T24828] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 905.192292][T24828] ? lock_release+0x8e0/0x8e0 [ 905.192303][T24828] ? __lockdep_free_key_range+0x110/0x110 [ 905.192343][T24828] netlink_rcv_skb+0x15a/0x430 [ 905.192357][T24828] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 905.192369][T24828] ? netlink_ack+0xa10/0xa10 [ 905.192386][T24828] genl_rcv+0x24/0x40 [ 905.192397][T24828] netlink_unicast+0x533/0x7d0 [ 905.192410][T24828] ? netlink_attachskb+0x810/0x810 [ 905.192423][T24828] ? _copy_from_iter_full+0x247/0x890 [ 905.192433][T24828] ? __phys_addr+0x9a/0x110 [ 905.192445][T24828] ? __phys_addr_symbol+0x2c/0x70 [ 905.192459][T24828] ? __check_object_size+0x171/0x3e4 [ 905.192472][T24828] netlink_sendmsg+0x856/0xd90 [ 905.192486][T24828] ? netlink_unicast+0x7d0/0x7d0 [ 905.192501][T24828] ? bpf_lsm_socket_accept+0x10/0x10 [ 905.192513][T24828] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 905.192525][T24828] ? netlink_unicast+0x7d0/0x7d0 [ 905.192537][T24828] sock_sendmsg+0xcf/0x120 [ 905.192550][T24828] ____sys_sendmsg+0x6e8/0x810 [ 905.192563][T24828] ? kernel_sendmsg+0x50/0x50 [ 905.192572][T24828] ? do_recvmmsg+0x6d0/0x6d0 [ 905.192584][T24828] ? trace_hardirqs_on+0x5f/0x220 [ 905.192597][T24828] ? __lockdep_free_key_range+0x110/0x110 [ 905.192608][T24828] ? __fget_files+0x272/0x400 [ 905.192619][T24828] ___sys_sendmsg+0xf3/0x170 [ 905.192630][T24828] ? sendmsg_copy_msghdr+0x160/0x160 [ 905.192641][T24828] ? __fget_files+0x272/0x400 [ 905.192654][T24828] ? lock_downgrade+0x830/0x830 [ 905.192670][T24828] ? __fget_files+0x294/0x400 [ 905.192684][T24828] ? __fget_light+0xea/0x280 [ 905.192696][T24828] __sys_sendmsg+0xe5/0x1b0 [ 905.192707][T24828] ? __sys_sendmsg_sock+0xb0/0xb0 [ 905.192723][T24828] ? trace_hardirqs_on+0x5f/0x220 [ 905.192735][T24828] ? lockdep_hardirqs_on+0x76/0xf0 [ 905.192747][T24828] do_syscall_64+0x2d/0x70 [ 905.192758][T24828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 905.192766][T24828] RIP: 0033:0x417021 [ 905.192769][T24828] Code: Bad RIP value. [ 905.192775][T24828] RSP: 002b:00007fb55f1599c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 905.192786][T24828] RAX: ffffffffffffffda RBX: 00007fb55f159a40 RCX: 0000000000417021 [ 905.192793][T24828] RDX: 0000000000000000 RSI: 00007fb55f159a00 RDI: 0000000000000005 [ 905.192799][T24828] RBP: 0000000000000000 R08: 0000000000000008 R09: 0000000000000000 [ 905.192806][T24828] R10: ffffffffffffffff R11: 0000000000000293 R12: 0000000000000005 [ 905.192813][T24828] R13: 000000000169fb6f R14: 00007fb55f15a9c0 R15: 000000000118cf4c [ 905.192822][T24828] Modules linked in: [ 905.192830][T24828] ---[ end trace c2197d5deb621546 ]--- [ 905.192843][T24828] RIP: 0010:__switch_to_asm+0x0/0x40 [ 905.192853][T24828] Code: e8 35 e2 b3 00 48 8b 44 24 28 48 c7 84 c4 48 01 00 00 00 00 00 00 8b 44 24 3c 00 77 00 00 70 77 77 00 70 77 07 00 77 77 77 07 <00> 00 00 00 00 00 00 00 70 77 77 00 70 77 70 07 70 77 77 00 00 00 [ 905.192859][T24828] RSP: 0018:ffffc900088cf2f0 EFLAGS: 00010046 [ 905.192868][T24828] RAX: dffffc0000000000 RBX: ffff8880ae735e18 RCX: 0000000000000000 [ 905.192875][T24828] RDX: 1ffff11015ce6bc2 RSI: ffff8880978a2500 RDI: ffff888027ee2000 [ 905.192882][T24828] RBP: ffffc900088cf3c8 R08: 0000000000000001 R09: ffff888027ee28e0 [ 905.192889][T24828] R10: fffffbfff1564691 R11: 0000000000000000 R12: ffff888027ee2000 [ 905.192897][T24828] R13: ffff8880ae735e00 R14: ffff8880978a2500 R15: ffff888027ee2430 [ 905.192906][T24828] FS: 00007fb55f15a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 905.192913][T24828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.192920][T24828] CR2: 00000000004ea070 CR3: 00000000a2268000 CR4: 00000000001526f0 [ 905.192929][T24828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 905.192936][T24828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 906.269661][T24824] Shutting down cpus with NMI [ 906.271364][T24824] Kernel Offset: disabled [ 907.737056][T24824] Rebooting in 86400 seconds..