e65b610c02b9fcebd40e99f99afba1c5ca3dbb7d9ccc1b5a4422537f2969d12ea66040a4955319fab399aa95f25c331551469a5b0969bf0b7899131c63af2af04213eb36c9ab7eca9a46f0a86f199dca151ec21f3d7e62517574e5737e3a13a3a46a8c166301a0c2ed0e9c1f2dab47fd3097d753de5983d75c1815c1f4342560ae65bb595cd", 0xfa, 0x40, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:06:35 executing program 3: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() tkill(r0, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) [ 656.743219][ T2885] usb 5-1: Using ep0 maxpacket: 8 [ 656.753380][T12550] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 656.774909][ T30] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 656.863423][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 656.871667][ T2885] usb 5-1: config 0 has no interface number 0 [ 656.878181][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 656.888103][ T2885] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 656.899240][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 657.003688][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 657.013496][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 657.021670][ T2885] usb 5-1: Product: syz [ 657.028390][T12550] usb 2-1: Using ep0 maxpacket: 16 [ 657.041706][ T2885] usb 5-1: config 0 descriptor?? [ 657.054614][ T30] usb 1-1: Invalid ep0 maxpacket: 512 00:06:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200000, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) shmctl$SHM_LOCK(0x0, 0xb) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0xffffffffffffffe5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)=']y', 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 657.155406][T12550] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 657.163809][T12550] usb 2-1: config 0 has no interface number 0 [ 657.170812][T12550] usb 2-1: New USB device found, idVendor=8087, idProduct=07d6, bcdDevice=52.52 [ 657.180903][T12550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:06:36 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) dup2(r6, 0xffffffffffffffff) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000080)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 657.213275][ T30] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 657.303702][T12550] usb 2-1: config 0 descriptor?? [ 657.374473][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.383128][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.391496][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.399951][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.408472][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.416886][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.425539][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.433896][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.442437][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.450905][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.451031][T12550] i2400m_usb 2-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 657.451140][T12550] i2400m_usb 2-1:0.166: warm reset failed (-8); trying USB reset [ 657.470201][T12550] i2400m_usb 2-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 657.486300][T12550] i2400m_usb 2-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 657.496693][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.505161][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.513564][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.521874][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.530428][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.538922][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.547609][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.556004][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.564498][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.564620][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.581126][T12550] i2400m_usb 2-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 657.592021][T12550] i2400m_usb 2-1:0.166: warm reset failed (-8); trying USB reset [ 657.599989][T12550] i2400m_usb 2-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 657.608408][T12550] i2400m_usb 2-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 657.618911][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.627427][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.631405][ T2885] usb 5-1: USB disconnect, device number 62 [ 657.635807][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.635924][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.659312][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.668704][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.677140][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.688059][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.696501][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.705240][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 657.713689][T12550] i2400m_usb 2-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 657.724590][T12550] i2400m_usb 2-1:0.166: warm reset failed (-8); trying USB reset [ 657.732460][T12550] i2400m_usb 2-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 657.740951][T12550] i2400m_usb 2-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 657.751177][T12550] i2400m_usb 2-1:0.166: Timed out waiting for reboot ack [ 657.758414][T12550] i2400m_usb 2-1:0.166: read mac addr: bootrom init failed: -110 [ 657.766401][T12550] i2400m_usb 2-1:0.166: cannot setup device: -110 [ 657.773405][T12550] i2400m_usb: probe of 2-1:0.166 failed with error -110 [ 657.791765][T12550] usb 2-1: USB disconnect, device number 61 [ 657.833108][ T30] usb 1-1: Invalid ep0 maxpacket: 512 [ 657.841731][ T30] usb usb1-port1: attempt power cycle [ 658.523126][T12550] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 658.543216][ T2885] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 658.563504][ T30] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 658.763146][T12550] usb 2-1: Using ep0 maxpacket: 16 [ 658.803296][ T2885] usb 5-1: Using ep0 maxpacket: 8 [ 658.803437][ T30] usb 1-1: Invalid ep0 maxpacket: 512 [ 658.893246][T12550] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 658.902334][T12550] usb 2-1: config 0 has no interface number 0 [ 658.908868][T12550] usb 2-1: New USB device found, idVendor=8087, idProduct=07d6, bcdDevice=52.52 [ 658.918822][T12550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.931166][T12550] usb 2-1: config 0 descriptor?? [ 658.939045][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 658.947630][ T2885] usb 5-1: config 0 has no interface number 0 [ 658.954193][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 658.964235][ T2885] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 658.976413][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 658.976548][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 658.998232][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.007623][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.016099][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.024624][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.033252][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.041540][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.050250][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.058942][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.067410][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.076243][T12550] i2400m_usb 2-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 659.083341][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 659.088658][T12550] i2400m_usb 2-1:0.166: warm reset failed (-8); trying USB reset [ 659.097800][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 659.105706][T12550] i2400m_usb 2-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 659.113808][ T2885] usb 5-1: Product: syz [ 659.119800][ T2885] usb 5-1: config 0 descriptor?? [ 659.122535][T12550] i2400m_usb 2-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 659.122731][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.151721][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.160281][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.168740][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.177562][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.186005][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.194508][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.203040][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.211951][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.220417][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.229508][T12550] i2400m_usb 2-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 659.241031][T12550] i2400m_usb 2-1:0.166: warm reset failed (-8); trying USB reset [ 659.249651][T12550] i2400m_usb 2-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 659.258406][T12550] i2400m_usb 2-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 659.269140][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.278233][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.286825][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.296092][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.305107][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.313621][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.322315][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.331048][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.339665][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.348753][T12550] i2400m_usb 2-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 659.358347][T12550] i2400m_usb 2-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 659.369459][T12550] i2400m_usb 2-1:0.166: warm reset failed (-8); trying USB reset [ 659.377426][T12550] i2400m_usb 2-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 659.385910][T12550] i2400m_usb 2-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 659.396210][T12550] i2400m_usb 2-1:0.166: Timed out waiting for reboot ack [ 659.403438][T12550] i2400m_usb 2-1:0.166: read mac addr: bootrom init failed: -110 [ 659.411432][T12550] i2400m_usb 2-1:0.166: cannot setup device: -110 [ 659.418431][T12550] i2400m_usb: probe of 2-1:0.166 failed with error -110 [ 659.433306][ T30] usb 1-1: new high-speed USB device number 35 using dummy_hcd 00:06:38 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 00:06:38 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c22d83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xfffffffffffffef7) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r3, &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/153, 0x99) tkill(0x0, 0x10010000000032) 00:06:38 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000000c0)=0x101) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) dup3(r1, r4, 0x0) 00:06:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) dup2(r6, 0xffffffffffffffff) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000080)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 659.437129][ T2885] usb 5-1: USB disconnect, device number 63 00:06:38 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000001740)=0x5) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0xa, 0x1}) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x11}], 0x1, 0x0, 0xff77}, 0x20048021) readv(r2, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000001780)=""/38, 0x26}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001280)=""/172, 0xac}, {&(0x7f0000001340)=""/131, 0x83}, {&(0x7f0000001400)=""/168, 0xa8}, {&(0x7f00000014c0)=""/207, 0xcf}, {&(0x7f00000015c0)=""/139, 0x8b}], 0x8) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) socket$inet6(0xa, 0x79e6b38ae30736e1, 0x4) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400000, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000011c0)='./file0\x00', &(0x7f00000017c0)='trusted.overlay.nlink\x00', &(0x7f0000001800)={'U-', 0x10001}, 0x28, 0x1) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001700)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f0000000180)="a2bcb3a0f6c96aebaf645a41fc1f4bf301957375631895e300e8dc926954ec765c9dd004420d30aa706a", 0x2a) 00:06:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r2, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x400005, 0x0, 0x0, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x2, 0x10001, 0x7ff]}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x8001, &(0x7f0000000040)=""/94) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) listen(r2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaffffff0800480000340000000000069078ac14ffaaac1414bb070b06ac141400ac1414bb0000004e2000000000", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="5002000090780000"], 0x0) [ 659.630802][T12550] usb 2-1: USB disconnect, device number 62 00:06:38 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6, 0x14800) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x140) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01002000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x1c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x1cb}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r4, 0x8, 0x2, [0x6, 0x7ff]}, 0xc) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) r7 = dup(r6) setsockopt$inet_udp_int(r7, 0x11, 0x0, &(0x7f0000000040)=0xfff80000, 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r0) write$cgroup_type(r8, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000000200)) tkill(0x0, 0x10010000000032) r10 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000003c0)=0xffff, 0x4) 00:06:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x200081, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) accept4$tipc(r4, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0xc}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x9}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x3}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x7}]}}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x9, 0x0, 0xb}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 659.963242][ T2885] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 660.015826][ T8833] sctp: [Deprecated]: syz-executor.5 (pid 8833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 660.015826][ T8833] Use struct sctp_sack_info instead 00:06:39 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000040)={@ipv4={[], [], @empty}}, &(0x7f0000000080)=0x14) r4 = dup(r2) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f0000012ffc)=0x80fb268a) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 00:06:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "4d154fc8"}, 0x0, 0x0, @offset=0xffffffc1, 0x4}) [ 660.214685][ T2885] usb 5-1: Using ep0 maxpacket: 8 00:06:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) dup2(r6, 0xffffffffffffffff) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000080)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 660.335312][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 660.343828][ T2885] usb 5-1: config 0 has no interface number 0 [ 660.350046][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 660.360115][ T2885] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 660.371188][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:06:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000240)={0x0, 0x0, "e44065cbada5e368b71a4d23ef6372d1c6f0b05a4270e7f08e65ffa78eed0b66"}) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="baa100ed0f01dff3993ef426af9ab0603d000f350f20c06635010000000f22c00f01c20f79821ab0", 0x28}], 0x1, 0x1, &(0x7f0000000100)=[@cr4={0x1, 0x2060}, @vmwrite={0x8, 0x0, 0x6, 0x0, 0x3, 0x0, 0x2, 0x0, 0x7f}], 0x2) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 660.484949][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 660.494222][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 660.502619][ T2885] usb 5-1: Product: syz [ 660.591636][ T2885] usb 5-1: config 0 descriptor?? [ 660.977018][ T30] usb 5-1: USB disconnect, device number 64 [ 661.753086][ T30] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 661.993054][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 662.113279][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 662.121378][ T30] usb 5-1: config 0 has no interface number 0 [ 662.127911][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 662.137695][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 662.148987][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 662.233240][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 662.242477][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 662.250902][ T30] usb 5-1: Product: syz [ 662.256469][ T30] usb 5-1: config 0 descriptor?? [ 662.496415][ T2885] usb 5-1: USB disconnect, device number 65 00:06:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {}, 0x2}}, 0x2e) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000040)) listen(r0, 0x4000000020000000) r3 = socket$inet6(0xa, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000001c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f00000000c0)=0x7) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) close(r5) readahead(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000461000)={0x10, 0x0, 0x2, 0x2000}, 0xc) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0xc) dup3(0xffffffffffffffff, r6, 0x80000) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) 00:06:41 executing program 1: syz_usb_connect(0x37fca286f904c713, 0x0, &(0x7f0000000280)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/X{\x00\x00\xf0lmC\x1c\xa7\\\xb4\x00', 0x1, 0x8082) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 00:06:41 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYPTR, @ANYRES16=0x0, @ANYRESDEC=r2], 0x20) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = dup(r0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x80000) write$cgroup_type(r4, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000040)=0x7) tkill(0x0, 0x10010000000032) 00:06:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x9, @mcast2, 0x5}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @rand_addr=0x77}, @in={0x2, 0x4e22, @multicast1}], 0x5c) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000e4e690b3000000000800000000ac14000000000000000000000000e356000c001500f01a76f03c58020c46991afdd8a272da029f37bb8b916721b9403d2629127174cb556bba8c5586fd618740754e970cfbafcc85"], 0x1}}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080)=0xbc, 0x4) 00:06:41 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x3) fadvise64(r0, 0x0, 0xffff, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x3, @empty, 0x1}, {0xa, 0x4e22, 0x2, @rand_addr="de62be6f56aa8b41d9b3be8cbfc45191", 0x20}, 0x1000, [0x3f, 0x7fff, 0x7, 0x4, 0x1, 0xba8, 0x6, 0x1ff]}, 0x5c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r2) 00:06:41 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) dup2(r6, 0xffffffffffffffff) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000080)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:42 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 663.073159][ T2885] usb 5-1: new high-speed USB device number 66 using dummy_hcd 00:06:42 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r3, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r4 = geteuid() getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r5, r6, r7]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r8, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r9, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r10, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r12, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) r14 = socket$alg(0x26, 0x5, 0x0) r15 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r15, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r16 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r16) getsockopt$inet_IP_XFRM_POLICY(r16, 0x0, 0x11, &(0x7f00000004c0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r18, r19, r20]) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r21, r22, r23]) getgroups(0x5, &(0x7f0000000600)=[r20, r22, 0xee00, 0xee01, 0xee00]) r25 = socket$inet_dccp(0x2, 0x6, 0x0) r26 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r26) r27 = eventfd(0x4) r28 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r28, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r29 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r30, 0x0) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r31, r32, r33]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000640)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000780)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r36, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r37 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r37) r38 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r38) r39 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r39) r40 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r40, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r41 = getpgrp(r40) r42 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r42) getsockopt$inet_IP_XFRM_POLICY(r42, 0x0, 0x11, &(0x7f0000001dc0)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000001ec0)=0xe8) r44 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r45, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r46 = eventfd(0x8000) r47 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/capi20\x00', 0x4403, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r48, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r49 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r49) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r50, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r51 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r51) r52 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r52) r53 = syz_open_dev$loop(&(0x7f0000002000)='/dev/loop#\x00', 0xf3, 0x80000) r54 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002040)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000002140)=0xe8) getresgid(&(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200)=0x0) r57 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r57) r58 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002240)='/dev/hwrng\x00', 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002340)=[{&(0x7f0000000200)=@abs={0x3, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)="34077e092e8b70c21b69f561ec488e2a97cca7803172e219e128f5d5d4ada36769442d42e2cfa841bc37cbb6bf03f207de72ff79fb35016d8d4530cb317415b5aafc82b4c80fc6802d4986e735189f43fc1cbe90f99ee5e87a4a3b7e83b05de1154ba69d3df3bd44bce8", 0x6a}, {&(0x7f00000003c0)="836ff592463a5b85927a480afc70f0acfd1727ce6e9961bd3f95d9a25729f943c88f55c265001bc2d3d15220e94bc73a0bd1f668d4e827da271ae605af9b88a990f2f69ceca9b134a1fc01be1569f7b5744471cc4cec35cafebe23333d6fb9160737b5a1efb9efd1049f9395be1f90691a58ff427ed1f27da83d974a2121e609d0d8f090cd1a5c6ebfdab4a7d30334bdb2c2d09b68d4728bd02d6fb1cb80f2fb687ac132603bd8ec198f1675f4294a129771f53527e1536e3d75cfa60a65c6ff74ed92cb285d4b4827ec27536e8ed8eef4b82b724a0448ff6b3aa81fd79cfbad35db7684cab2021169498e72d743", 0xee}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, r9, r10, r11, r12]}}, @rights={{0x1c, 0x1, 0x1, [r13, r0, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r24}}}, @rights={{0x28, 0x1, 0x1, [r25, 0xffffffffffffffff, r1, r26, r0, r27]}}, @cred={{0x1c, 0x1, 0x2, {r28, r30, r32}}}, @cred={{0x1c, 0x1, 0x2, {r34, r35, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r1, r36, r1, r37, r38, r39, r1]}}], 0x120}, {&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000980)="5ca329dbac670c50ff2c48b22d11933d2fc10ff148a406bf9095b062ecb4fad6094871ebb7c5d623fbdc6be39015a620ca9f0c353164", 0x36}, {&(0x7f00000009c0)="4b76f827e0d0374aa793f97c5caa2166585807f8f268b5aab85d99a8a9003ead", 0x20}, {&(0x7f0000000a00)="7d887669f092af2b411268a1a5acd8b36e542201d1c92dd39b68d1f6142652f0e50f7fb10f5730d42cd1f1c6f7c69a9ac8a68bc0411626fa", 0x38}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="57a86ea9d696f8ec23150461e805ec8da3b014f4d12270699254168518f8b2e62a2ae1ccfaa547e5f7f14886ab7b3db0352dc2c59a676f1ef04ea408006f1ab9d630a8a76b4371d12798cf8cf99dccb7d7ff86f3aade6c7bc9138cf8d2291feb0a275279a13f138e1945a012b450554b95c8b67b73aeb80e770c88ea04b60ea709d212ce5bbd24cb69a2f11cc8d6a2fa38ee11bc3a1c020fc37ba99078e36785a880c7cf93ca0b268126c7b2f970ed873821989e7194fd21e67337117474ba3b194d167bd6f326f4cd974a270677005e86f8a97572a99318e2f6bc8b8bec4229bab6f3b2c5c96ed24300d341b0", 0xed}, {&(0x7f0000001b40)="937fd8a77beff66deb0ec89696bc5f0d0072cfad97ac987cb73e7e49c031271815c5a4786faefd4f059d3305df81b057c740f051aa444bf48ee3c03ea67164823745bfa957489afa1170ebb0bf222adbc7e36e453dfe4ed87281554678fb94c5244f7bbc5669ab684b8b44581f845ce26130f7e8f4729a6e898e705b1c761f9072acd6d951faef3453a350b9dd79fb04574148632cb125a8c6", 0x99}, {&(0x7f0000001c00)="c5e26c52394e7117c8eee13e03ba7e46e483a21085cc17f5db90c7c3a402e4028424532e33671842abaa2bfeff25f57df58e530a16492fbb0efccc3147a4a0c5a2ca4f02e69a7699c132f33fa7b58d66c3199ffa5e9bb5c23cc17233", 0x5c}, {&(0x7f0000001c80)="901d82a8ed4535ef851c83ec0d328070a33d666afeff75c8b5987d63ddcaf417e5b440db5f2ab065ba19bf3c608b74bc1099c4208b8a62104135b10b7a5fb59f7d3504f8003ca99f979392da2b93100cfe2c0dd4f1ab70032838546cf2dbc702ec22a4b77eb5a8ee72877d12b6a532aaa0a763e9eb6e93f852534e56cf7e50ed2c5d0c1100937525c80a65", 0x8b}], 0x8, &(0x7f0000002280)=[@cred={{0x1c, 0x1, 0x2, {r41, r43}}}, @rights={{0x20, 0x1, 0x1, [r44, r45, r46, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r47, r1, 0xffffffffffffffff, r48, r49, r50, r51, r52, r53]}}, @cred={{0x1c, 0x1, 0x2, {r54, r55, r56}}}, @rights={{0x1c, 0x1, 0x1, [r0, r57, r58]}}], 0xb8, 0x4040800}], 0x2, 0x8000) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000040)=0x339) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r59 = dup(r0) write$cgroup_type(r59, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:06:42 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000001000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c007f8830b09bc49c5b3f774c25b897ffc0edc5e376d752202e0597444fc832"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 663.314460][ T2885] usb 5-1: Using ep0 maxpacket: 8 [ 663.354014][T12643] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 663.436532][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 663.446558][ T2885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.457034][ T2885] usb 5-1: config 0 has no interface number 0 [ 663.463354][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 00:06:42 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c460207b59a7400000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e50000380003000000c707bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b863167000200003beca448dd9f82c124c794f7091e2b1023e600000000"], 0xae) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000180)="1273098b201a7ce0796f429daa0734db581c244e2353ebf57ab990c7f381b579ef1f6222df66531920cb244c93c7d3a2763e214cfb038464352c9cedbd118004f9d038da2ca53d696b71f4325d5844eaf72e026a707a2b7f27c55969b5a9a0595b96517e961fd43df01a9732975feb6cb4d78219ecfea819cc65ea875e6113ba6a07f587d3cf2e2dd553be7ddde59265edf391a9a6949eb7e793c113727c316ecc1402d7cc48583208cc4e51b2087ce9a0989ea09bbbab59986d1b2d836fdaa432291cbafd55cb4398d13f6895c26e687efb497e78a3e7781db38dfe") r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000580)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r3, 0xe48f57264b36ab1c}}, 0x18) tkill(0x0, 0x10010000000032) [ 663.474385][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 00:06:42 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) dup2(r6, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 663.613201][T12643] usb 4-1: Using ep0 maxpacket: 8 00:06:42 executing program 1: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x82, 0x2}, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x58080, 0x0) write$P9_RWALK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="cdbb11490142ee1216440d68e2c11d41008ece8e3a82cef946eda8fd3d640dbb35bd895548d30a615c68b75c79d1d35f06001d7da8dc1f5f8bd02f389650e2308b9cc201e1a4ee0aa347eaa479355312a7ee115b08f87c83c454c9f579b15873268a73f26ed749"], 0x16) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0xf60, 0xf3, 0x0, 0xffff, 0x6, 0x5, 0x5, 0x8, 0x9, 0x7, 0x0, 0x8}) syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x7, 0x20400) r2 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0xdae, 0x42) write$UHID_DESTROY(r2, &(0x7f0000000480), 0x2a1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)=0x3) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x0, @multicast2}}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) fgetxattr(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/130, 0x82) unshare(0x40000000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000140)=""/124) [ 663.663619][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 663.672842][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 663.681363][ T2885] usb 5-1: Product: syz [ 663.733471][T12643] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 663.741669][T12643] usb 4-1: config 0 has no interface number 0 [ 663.748071][T12643] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 663.758365][T12643] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 663.770902][T12643] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:06:42 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000021e000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000035a000/0x3000)=nil) mlock(&(0x7f0000e23000/0x4000)=nil, 0x4000) mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000d82000/0x3000)=nil) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x1, 0x8000, 0xffffffff, 0xfffffffffffffff7, 0x9a4b, 0x66a, 0x2, 0x1a1, 0x4, 0x0, 0x47, 0x4, 0x6, 0x1f, 0x5, 0x8], 0x2000, 0x208000}) sendto$packet(r0, &(0x7f0000000040)="233a55a9b80afbcf924a", 0xa, 0x20040410, &(0x7f0000000200)={0x11, 0x5, r3, 0x1, 0x3f, 0x6, @broadcast}, 0x14) [ 663.807313][ T2885] usb 5-1: config 0 descriptor?? [ 663.850311][ T2885] usb 5-1: invalid MIDI in EP 0 [ 663.857645][ T2885] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 663.943505][T12643] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 663.952687][T12643] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 663.961443][T12643] usb 4-1: Product: syz [ 663.964434][ T9642] IPVS: ftp: loaded support on port[0] = 21 00:06:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000008b7cd341b000005000001090224000100000000000001222900090581030000000000ec75d629c487b2625b36f632323b1060ce144aff052d75d70abdd58106bce5dde8607245080f1c26cd34b5a43f9c894fc7c38e42389e67f7a0f003ca77653d90a4ededc98eca2ccfc7502f1917e294c68b10a97fab2736857461537d04e48f50b708b4b2e1d74f6c26da021f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x305840, 0x0) accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="000033000000330290861c9b5edf0ef70a3e257eefc850c49f911bdeb7c22db7b1ae36c9d606000000d046"], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:06:43 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 664.095928][ T2885] usb 5-1: USB disconnect, device number 66 [ 664.112820][T12643] usb 4-1: config 0 descriptor?? [ 664.473133][ T12] usb 1-1: new high-speed USB device number 36 using dummy_hcd 00:06:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_usb_connect$hid(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1]], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7}, 0x0}, 0x0) [ 664.713317][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 664.764790][T12643] usb 4-1: USB disconnect, device number 42 [ 664.833423][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.844339][ T12] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 664.883265][ T2885] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 664.933488][ T12] usb 1-1: New USB device found, idVendor=cdb7, idProduct=1b34, bcdDevice= 0.00 [ 664.943564][ T12] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 664.951726][ T12] usb 1-1: Manufacturer: syz [ 664.958878][ T12] usb 1-1: config 0 descriptor?? [ 665.143063][ T2885] usb 5-1: Using ep0 maxpacket: 8 [ 665.273267][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 665.281557][ T2885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.292008][ T2885] usb 5-1: config 0 has no interface number 0 [ 665.298394][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 665.308784][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 665.395882][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 665.405673][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 665.413979][ T2885] usb 5-1: Product: syz [ 665.424301][ T2885] usb 5-1: config 0 descriptor?? [ 665.468018][ T2885] usb 5-1: invalid MIDI in EP 0 [ 665.475714][ T2885] snd-usb-audio: probe of 5-1:0.2 failed with error -12 00:06:44 executing program 4: syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) [ 665.667554][T12643] usb 5-1: USB disconnect, device number 67 00:06:44 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@rc={0x1f, {0x9, 0x5, 0x10, 0x3, 0xff, 0x27}, 0x9}, 0x80, &(0x7f0000002800), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f0000000180)=0xff) 00:06:44 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:44 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 00:06:44 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000010160307ebff000600e700004004000022edd220c3b6dfe16573e926df044d7f136948a3de5d27a0a1ee356a64c0650ff20fdb87b9d9a9d7ae5db097f2211d2bd29090af2c2d3884436043856d6c75d314589cd16597e95a05de6bbcf3d2c2eb661dcb55b06596fc43d2c5a792cf13f11544a38c71a86bd3c58886ef7b0590201d8dce69b96ea400406e9a8392", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000080)=""/80, &(0x7f0000000180)=0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x2}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:06:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getpeername(r4, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f2, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000066000b0500002067002000edffffff00", @ANYRES32=r3, @ANYRES64=r3], 0x74}}, 0x10000) bind(r2, &(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x4}}, 0x80) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:06:45 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00!|\x05\x00\x00\x00\'\x06\x7f\xcc\xaf3\x00', 0x6) write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x145843, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x1c1800) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000b00000007017bcbc27580461bc83985c3a9430af5f9486968adffec1bf67fa6eaf31f47e0bc955a6079bc8b898b7396008cfddb8c2e3ea444b882eaa04ddf2c3c6f51a03cf901c4cf79a0b1df94e1cbb7caea0a48f00a9597095ccca4d8d4a149b693f18035708e739e6aec4129ec14ae43dadf4f1e6ab50f65a22f25dfee76ddf4b8072d697416dfb088becf70ec7107472bf78363e89badc72ca62895ce288bf00a524177ebc8284e574779367ecb59d20a6b8bf000000000000"], &(0x7f0000000180)=0xd4) r4 = dup(r0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000140)=0x2be68b5256a19c4c) write$cgroup_type(r4, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/190}) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r7, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) tkill(r7, 0x2e) [ 666.025431][ T30] usb 4-1: new high-speed USB device number 43 using dummy_hcd 00:06:45 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000100)=@ng={0x4, 0x1, "b9d8f72671e0d6"}, 0x9, 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 666.283076][ T30] usb 4-1: Using ep0 maxpacket: 8 00:06:45 executing program 1: prctl$PR_CAP_AMBIENT(0x2f, 0x2b8246564258f8df, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4042, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fc7390f20d86635200000000f22d8ec440f200d663504000000440f22c0640f73d3b90f38c93c0f01caf2ad0f2221ba2000ec", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 666.403617][ T30] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 666.411875][ T30] usb 4-1: config 0 has no interface number 0 [ 666.418762][ T30] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 666.429845][ T30] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 666.440915][ T30] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 666.543808][ T30] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 666.553430][ T30] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 666.561715][ T30] usb 4-1: Product: syz [ 666.571499][ T30] usb 4-1: config 0 descriptor?? [ 667.012197][T12643] usb 4-1: USB disconnect, device number 43 00:06:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x8c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x1}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x1d}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @random="d47f73da8503"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 00:06:46 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)=0x7) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:06:46 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:46 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) 00:06:46 executing program 1: r0 = socket(0x2, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r0, &(0x7f00000001c0)="200000001a00010000000066835f7f081c000000000000000000000004000400", 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x3, 0x1c4, 0x3ff}, &(0x7f0000000100)=0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000000}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f0000000340)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000002e00)=[{0x100, 0x1, 0x6, "ef2bdf90bea3de4ff8d9d547fd66d2c9d4ee719a24d1f7e838295227768cca5c29cfd11b45ca185662a903466ecbae680069b1a65c67d80aca36742e88d9121476aefdc80b2d38be242ebf3d0fb02e11ab2d1a4df73683b3b6c9d67f2393dba506aa4efae75fdcb7feca2ca916ea22e04f2310722fb67c0011e437749674373886161a7889ae18faaa817c7f82b3bf6c313a2a402fe7e1aed7f3e26083123b6b735e111e576448dade0c3bc8417d91e90947043aac173dc0bbfdc290a8254b715b6eca9bec5547ad854bd040ff56bb89b4ae5efc8b86c9ac9c97ddc6f98602a9d05bbb0d935278b58f0b"}, {0x1010, 0x10a, 0x0, "b64537e30b00542e3002cca7b15385f4053f468686de9b79af055075872cb040acda2c30d1725352dbde058a1af6c463a83bcd63536634b830c18279efa4c68c4ac4c84cb715a7bb9a74707e198783a4e5b5b2e3214d2babf016d12b3bd90bb94713fa4b9ef3f8fe2c4c25f241032fcbb1c07613a48d63e74d83c39b157eb6c1e955e31cad6a19244c7bd91ef93358506c827943ed6f4057653425cba65fe65aaef8a315b402c9d9b8bfc9a6c6f1936bfc25d5f4ff3fe2d4e3a831cd637938520739b55e23b062b9d8352ca9204b6137da180b5e62785d578bce8a9e564d95439e480f1a501d863affb20805309bfff9d65015e2311d12df3a26983e144cbde774f6375e77ccd1184aaeeb5bcd274c7cd4e3d7360acd82034be006b6d00ebe04c401f4c94bba75bf543a6fa699c17702fab3074bcce51f1d1b6730cfdf4e3ed277344be0df70d408887b2380f1d3cc281cc63d36b0cfe79724600fd7b968a3dc66987acf72108cfe45b06d867ca31ae555aea8d6fddbe31ba757b7b019e38ecd5f08c583b485d08e8c10e9044c2193bfe00156b65cdad984f581b0ee545a86c5575f13e78a9182565ec2a23fa619e3b663e04730c2355f631de1d80eed64ba90639d787bc27836dd7b5704e56f9fea851fa77cca8f2231ae3c2ea7bb198264424cb620455196034e17bb3cce89036e7192b61a30de857dd1c153edf037d01d24a6f70d68a9e749681b526f886af3dc778baa279b6f4d14cf7e1d787f493fc1704ecbcc0f605df5f890163c2f85a22903cedc5857724fba19b9f2ead1d8ca5aae77293ce05de15bce1ae3735e079e4674562bea185ae460072c460a3a5a7e90836e54aa493605fe179af108c02a3e5ca91bad1e01ae0e8a3b039525f5b32ce4c7bf81de7a49502ebefaade1d2a6dd4736082d6c18e9e83e00500f89d9a812adde84a84d0dcc049574f866ffca75d8ff6b7b09423535b53d726c30eddd18b2d32bc95e2be524ba338cb042d319111c306c50dab01d08265f83613ff219632560d3da02c42934a9467e2a164da0ef71d2d0c4c6f90db592ee68823d87e22e705d1d6936cbce32a85e35908af9b3e2ca3b1a4a7ceb0da78cbc2d104c20d201a246e4b140084b4bd107ec04abc698caaa769b895a2a2e88beb480c71ab4937d1be5c84cdef7a875f989bacbc2f71a6dd8c430fe8c0c6efe6fc096f4b22287aac586ba6b8e8962e42cfcaab617a1d862a6fb6466458bb417b9084af7a1a7d9cfe94320aa10776abc24cddf76733cbfb62a2fde7bc7ccab5f686e49262a7cc121e5b0be6b540e4b88bef1c67c738f7aad753bcaa5c1dffeddb39bbad5083db93219b56604f6d9b545c1b48223dab66980339728d9713529c008d5dbe367f2edfc9fea8f75165d64a3d8b4ec934b433f3bf7e541d530b820040e2d3cffda05a2fb75362930d8ae849f37e84d2b247d2dfc1226c1feb1678e04910c7c166898e6179d5b9eb7c2f7ae85de6a388514318f72eb28658c2d0b986e7d80441aac66e01a2eecc352a99f7cc58b0ccc3c03e93e96ec8c787e670ed52df2ca4a0db8b32eea8afc6a280cf5b55648d8dbe8643a8d7b873d1165932af8b0f9fb7bc82e97ea17231749303255eb110cb1996034d12c7bf8ed12fd0367eaba773d87d26045148911d8a607b7a82a8cbb36882d99888460675a07e9566c682fe9c61e0c86aee9f93df8a91f500b1503dccb36abddc868f88fc2d01422f787c4d0fdb71848cf699665fa57aab8eb7e79eec7cf88c53a99cb44d6f3bce12e474de1d905fb1c24eb51e8d669e9223e8525998225a2ffa47a7bfbe0b133730de33adcaa557e180196e0cf3df01f29968b48371ebcbfea82aa034809ac7968e0ffd4e561cc77782e95b5d3bf026850574041b5fbaa5b684d5551ecffb1894cb7540fb4f48e0ac4e618aff40af6af4a36417e8c275bd5076b96f926a447e614199d421276e82808373b2fc26bef526dde76cab8e500278fc661958ebfa0a35b61ddaac68d79b315c74f4861c13af0f4abdde343310849c97bb2ec4d42d7331326a6994c512b3b5021324ae622c59573b851952c937c36ad5e1090f5a25feeaa0522cf0c26c3d753b697523bb06de18b8db4ab91b0742b54078594c644751e77634be6e738edfa05875b7e7b024247ca2cb7063fa755788a97d1618cb37c2bc8201c38c154572de0b9d7943061e4a70d2853a5ee5ecd2f348282c977f81661545257931d120124b2d87f4aeed87fc2d6cd83d889d1f417bab76a8c9b15943320715b4f6ef1fb85600a48cb88162f8937d0568cf8021fb388f2e22ad5b508a716d93ad38a083ec46ded833355c45c0addc39e7bad4bfbfd5997aa265828f71c5e054df34bfc00ac8e6fe18f8151114942d82769b693ca7d9d545e3bd4d940a1fecad9cfad8e3fc0fdf8663de9b86be329c97cef7228398f75dd9cba88f88758bf6c694a90a85cabcd987534a73ed3914396172e81a587f7a9803190404dae704875472be91982d5706891976c6c4c2dc6a1f0061d706587828ae7c2d882ec98b3335ca0cc5db4dc2774900f5936d2cc36de24f804f7ff35f649b167560176079f94ec23a3a67616ff9e19e8c4cfa3cf4dd2cc455aed9bc65e4ba3c321e19460f11e1b64b28ecd113ca609526304feb772a696f5d19494fb2adb8544ab3a49a2961b0a32364d8038b51ed2b267c5d5323ea12172f147c7294617f1cb3c013dc5eadd9884dc79c3742cef4d7de65a9048749f4602eff65869f9e4c0cd8f33db5d0197e7db5e459e8e63b5035245cb898bd7404965f70863462c93f28ce2309f7ffcc60c8f655a5041c6b10d5f26774af5363536213091cfeb712e2d04f347e22ef22140ddbcfa599cbff8c893527a3da31b26588b5cf1634c502255dfda43a05f536d3b3d5748abb5a8b5d5cee59d185f5104c889344993623a380586b2b8247cd158ad301fc7cf53eb8e9cec18c4e2019553407ed417d1cb1e8532df2c39ed1a3398b9b47d48e7a14eb9ca1fc563295f8da9255b0c080758a90e089605df30c7d88edf574929c275b4026fb6a690e256cbe9c0f891047db4bb38e84aaa7e27298495353f85f26b7a01c562dfa3bbc414936db62156d1907e2b967ce8937a8eb1b9d0eeb5f4eb7cb87342af49e4bebc122e5723dfde7ef9268145dfd8084e739f641113d46e36cdd134afc647513e3a7c429b41b9db6158aad970d865871e94a8fb8429821e313d5e5a53beaf5505912506198af7718677f6f01d339d6c921b3c6ef5f5061a9cb26045b75f3f974527c929d05cad6590d82193456f5dc66df5d8cbbb4f593190f461fbb06cacc4864a6813e8872fd5a6be78d31d1edc39c7342b76dd7f299757ec4234b01c9e4c7867b4bc239fd624e3cf692b357ca2a2b2fcdd93e949f1b8c0e42fcd3a1e62ccd8ac66a6fc87e34f495eb8bf656ac6b71c9881ebb80d649f081b7d52d420ac194d4d75fc51db902c20b9c9c5a58983c1381cb533aed269b023e3cd2534e9dfed913100574fc6c04988e6a694f9865b832d61532e398a592d5eb6ae4553f7469edd80b1418583041b366013e9267a03498f04255adb1f1d329ed5859926eebebf1866084741861979769a36421b204de2316393bceef5e83c1015dbabf4707968f61ef37db75bec0f7de2def43743416f36c5238f365fc208b6d29fd2a0a495d410622c0d02dc7fea017b668f28b460f4a7b43d8a54c643292e437e709cb07156776a5051cf68db1bfaa43d64898ff6e2ecd8bb21f760f61fcf99771f01036140ba124ee25c727e3b4c231f67d2c0d01bf1557dbf542ca6aa1e9d4a465b52828a991d2ed52c37e27c70d3390285b34de60768800eb60559d814c207838fc44fe6ea98a95e580ade72b87b8cdb2dcaefbf1d59098f37a710e90bfe9ba803af2ceb66842d3def321b5eaa1372e72d9da2c4c506054776c509f786b061d94b051dbf0da4979211fc75efc31c011b150f81394dc91fd936f77a04f52f0d78f164050c9f4492eadfcdd466363696208acc78c7dc958204908cc923dc4f178dba7f9580aab308bfd1ef3b246160ab10ab052cb369b95db13785fbb0285fd5b94dd80a6686ccbb57144b38caa125349ca4391d0372b4d84546d68277cd5be9f4c4c8273c09b6028b7ea5c687f7f02cbd8f5ec9ce3692de0931b6a40e2fad1ed0d47f8556655968664683024d6996706865388c49bec5940b5456cf3969b207ea1f23ffc54ebb24a3ad8c2a3da87eee3dff326701e3c72b93a84ac29f57e748c7fa8f97c76b840006161af65948c4be0012c9664984e870e64a53d1237927664607dab7f0123b03562207f229b150750762cec656dbc3d746657bad98d290423505f5fc136b4e216e9ff64003eb9bc306ff4ce8326df272cb7539fa321de57bea18d06b55478dd6088895a7ff83f0383d08bec82485cf0ee3deef22d9f9e6f9d2fe69c5441971019f3750fe714b5fa1f1da9bbb3cc91989a94cfd8848df7cd0280c1ea21322653190a033e6005aab4f213806385e012d4638eb41ae7c5996c3cc612433da3163a0e0e6b1a1a589953d478534732c0ba2e3bd2c89ad3190e8070c19d78f04b40f1664733071cadea71790791506ec9d09dd1c04a3acf9d61f9def406173211331a9880626850fc3774f1b87cbaa881ce8435432bdc514f7920b195395540067b2bd9c1d2dd042f6b32aebfa54c0be589249b95c7cdf06ecb8d305ccb1b5b1ee8522305043ed66145f6c6f00f4b41a6d75dd5815afdf4b028644c6b62c384eb79b2f61fd9098a5468fcca988ba95305c4cd54dcd918c2eb0e5ca8442267dd6c81c6220e054dee5f6fb020fe180a2130e394b3796b255f3a158d89255dfa75a805b0468772064be7e769c5af484e67ea9a46ac21c6a57c25071390aa1ce87e31109ec172827650fdc04a66ed28dd89c948e14d766e161c9055f4f8b1f909afaf9c7f9f80864534e56c484ab4637db02b88c545d3bf6a83e25c89bdc59a1520fa3a0955bc1ca2aa3ea03dd2c4d0a30a9b4f13bdb3eaa35b5bde147239a0c2210e2854e89d7350b2fab67fb7052dfdf12c5fbbe12f2ec6739f5fe9e490ff91a0f797d36f64686b98884daf6d33833b398781918cb7a13e3444e5d2666ff97bb1f9e6d7bf4730c092710c08757901d75bc3627817ab5ceb412cdacd6d4833faba76c5fa3f755c0bb3e7e26ec2d52097c589aa063c79b8dedb17638300704de940d6130a8eb2dd6b6408f645fd7df3e12154df32679a2715381a4fa61b52b5fd92e0c80adf357c46adab388ae41c86af20cb220eccb064b005ff6d6d6a5d897d2f20e952e4c286453ac28a6502926dbcc6414827146f591ad33ca26ed90c9e84bfd67ea1df59021f702ea75e9d4e392ff533de9d8819d6f47843aaed03e5181e5610d55d2228cdf50be4bfb29cd580e392db2c6427b1285669c17b2741448e1e39321db60314364b745e00d8e175f15e6b81856993b9af28090a822c93634ab55c6ca22a11ff10023a6bb9d78ae31aa20d808e1c2aeb2382000ba1bdadaede51ddc6ff4c39ea88511abc6f798d02944fd043ab519ff7335c6a7f7522bb9de08ba6adebdd0b40b88f40110e3a831fcb9f801833f88be9a0d22b8c7d32b1603178cc9b07d54240a3a17991170a4e96fc190357ae1ce7b85e4f31abf7d0df1674640bb291540cc1fe530f65af8e6b8267baae02b59cdc4ff7e57f4050039a608ce354dc019ebe8675a502caa6781e114b066f4a1d2ac395fe8e34774237f8ba26a75115c29"}, {0x40, 0x110, 0x200, "1d79f0222d3804eea9551e9a87485df20932f5acbe4be066d3bc619b5eba4b23e39c1f76399b28eba2dc"}, {0xc0, 0x10e, 0x8, "b25b06c5966a93854f174165550ab805fde0c926b5e18802c113ba54ba025d576a9ae3bd67cb68b58c2cbaccf8e3d82d07b68b0fbf06a96440a8ca4353778170ac60852dbd4b82ed2564ed92a03384f6884bc7efcc425f3749a7c9b8d8966ffe34fccaa43532794f2bbb3379d4c3f031f80af3be4ce446e74428291b68fc951ed8233b41227240acaa60fae39fdb5b8cdcdb5a0c96a72f8b00ea96ba890c10d344fb9bb5bfe65965d818e41ae383"}, {0xf0, 0x10a, 0x0, "72754fc604fec9c297d0236548f59576283149f4084ca96175fa5f87f53a9e1c2b0e1f6e559c579bd1fc6fc3ad232a571db466f3b4dc8d999ee34e2c28a396204b863c6ccabc20ee8d52f751cc7ab704637331304fca4d49d11964c4a09826c7635f8b2789bf1ae500dcb1d01922f3816dc8a0d37d1f495a7f7edccad40e9d5f1abe385f4a1a4355a013387b9fbeb0fc6cce1aac475305bd656e4c235a1042586a5626157a4beb9688e0d8e57b51e990e17831ace634eaa5ef4d532918a1505643b7b4d0a090046a12dbdfb76e6c261fa3b2af1d4c5802e919c46c658968"}, {0xb0, 0x190, 0x20, "92df08be6e86ba847bdc3071e49300950b9dc77155ed65cbf48d6dd224595343ca4be8f1e48214dd14cc8e3650a03d711514ed7da0bb6ee017ad70e57f4885dbe36dd4f44ca0d23515cc7c597717369f4f5b0e2db94306643040d8098bc21e3376ccb2a06763b1d283f437f0c9618c7432d9524a71d2b2350690cab69fb8858cc32b77696f049b63fa2d0c2b25771987ebb3e3f206bb1bdc97"}, {0x30, 0x29, 0x1f, "631dfd203451e33a541b8176b20cea7050eabd6465bf664c11705306dfa001"}, {0x48, 0x10a, 0x3, "e2cb8fa49cb60da5da80e3e499332e71bf6b5cb04f0a13761c8782b2c09da0145f0fa379164d6b06ead0521b09e9d273207608d730916ddd"}], 0x1428}}], 0x2, 0x0) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f00000003c0)=""/185) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r1}, 0xc) 00:06:46 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 667.218894][ T30] usb 1-1: USB disconnect, device number 36 [ 667.309428][T10752] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 667.319249][T10752] netlink: 'syz-executor.0': attribute type 24 has an invalid length. [ 667.328131][T10752] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 667.336890][T10752] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 667.345325][T10752] netlink: 'syz-executor.0': attribute type 8 has an invalid length. 00:06:46 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x80, 0x0, 0x1}) r1 = getpid() ioprio_get$pid(0x500884aa9f0d60cf, r1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0xc04, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x182) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$TIOCSCTTY(r4, 0x540e, 0x80000000) 00:06:46 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') fchdir(r1) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x3b3800) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa5120042}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x800) [ 667.543225][T12550] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 667.555116][T12643] usb 4-1: new high-speed USB device number 44 using dummy_hcd 00:06:46 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pread64(r0, &(0x7f0000000180)=""/176, 0xb0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:06:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x20, 0x3, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x31, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) [ 667.803281][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 667.803511][T12643] usb 4-1: Using ep0 maxpacket: 8 [ 667.934783][T12643] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 667.944065][T12643] usb 4-1: config 0 has no interface number 0 [ 667.945377][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 667.950523][T12643] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 667.959348][T12550] usb 5-1: config 0 has no interface number 0 00:06:47 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x2, 0x0, {0x3, 0x80000000, 0x81, 0x9}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0xfffffffffffffe3c) close(r1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x1000}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0x11) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x4340, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 667.969237][T12643] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 667.969334][T12643] usb 4-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 667.976122][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 668.013765][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 668.025328][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:06:47 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0xfa6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff40) ioctl$TCXONC(r0, 0x540a, 0x7) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x0, 0x2, 'client0\x00', 0x4, "d446d3f77d85a0bd", "9621a8d49ff45103d82793d54a292659cd3f27857ad047f5984e27350881f8e9", 0x400, 0x9}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) unshare(0x40000000) 00:06:47 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 668.183402][T12643] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 668.193255][T12643] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 668.202504][T12643] usb 4-1: Product: syz 00:06:47 executing program 0: r0 = socket$kcm(0x10, 0x20000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="d800000018008102e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc0009007c00069903000000050005000700812fa8001600030063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f87f5730d16b8683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40ff040000e04adcdf634c0285dc4fc82a9ecbee5de6e4edee3d93452a92954b43370e970300000000b818b824f9cb1337a0d8d0d1e1c0", 0xd8}], 0x1}, 0x24008040) [ 668.253470][T12643] usb 4-1: config 0 descriptor?? [ 668.267815][T11153] IPVS: ftp: loaded support on port[0] = 21 [ 668.303893][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 668.314035][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 668.322363][T12550] usb 5-1: Product: syz [ 668.376203][T11186] IPv6: NLM_F_CREATE should be specified when creating new route [ 668.385149][T11186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 668.393129][T11186] IPv6: NLM_F_CREATE should be set when creating new route [ 668.401037][T11186] IPv6: NLM_F_CREATE should be set when creating new route [ 668.408919][T11186] IPv6: NLM_F_CREATE should be set when creating new route [ 668.423509][T12550] usb 5-1: config 0 descriptor?? 00:06:47 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/287], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000180)={{0x1, 0x0, @reserved="da2803191d064d304dfc560bff01000000000000be05319223886977ef2182f0"}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000200)) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) ioctl$KVM_SMI(r2, 0xaeb7) [ 668.932830][T12643] usb 4-1: USB disconnect, device number 44 [ 668.986874][T12550] usb 5-1: USB disconnect, device number 68 [ 669.763301][T12643] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 670.033196][T12643] usb 5-1: Using ep0 maxpacket: 8 [ 670.163305][T12643] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 670.171744][T12643] usb 5-1: config 0 has no interface number 0 [ 670.178863][T12643] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 670.191014][T12643] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 670.202859][T12643] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 670.294555][T12643] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 670.304409][T12643] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 670.314816][T12643] usb 5-1: Product: syz [ 670.320700][T12643] usb 5-1: config 0 descriptor?? 00:06:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001400090500000000000000690201dcb1", @ANYRES32=r2, @ANYBLOB="14000200080000000000000000000000000000501f4c00a566fc24aa"], 0x2c}}, 0x0) r3 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x2c, 0x1100000000000000, &(0x7f0000000580), 0x2a9, &(0x7f0000000100)=[@op]}], 0x492499d, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 00:06:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\xeb\x00\x01', 0x420600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x7f, 0x0, 0x3f, 0x1000}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) ioctl(r2, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg(r5, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fcntl$setsig(r5, 0xa, 0x13) 00:06:49 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x6ce600, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x8}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000100)) r3 = syz_open_dev$media(&(0x7f0000000500)='/dev/media#\x00', 0x7ff, 0x400) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x3) r4 = syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x400, 0x200000) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x102001204}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x2) r6 = dup(0xffffffffffffffff) fcntl$setlease(r6, 0x400, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) readlinkat(r7, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=""/12, 0xc) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2c902001}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xc0, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xcf28d8f8dde32e07}, 0x40091) socket$l2tp(0x18, 0x1, 0x1) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r9, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x10110, r10, 0x0) r11 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, r11) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/audio\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r12, 0x84, 0x12, &(0x7f0000000b00)=0xfff, 0x4) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000b80)={0x0, 0x2d, 0x5, 0x3f, 0x8, 0x1f, 0x528, 0x2, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x4, 0x0, 0x5, 0x2, 0x447}}, &(0x7f0000000c40)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000000c80)={r14, @in6={{0xa, 0x5, 0xfb59, @remote, 0x2}}, 0x3, 0x2, 0x5, 0x0, 0x93817377c7c4a109}, &(0x7f0000000d40)=0x98) r15 = syz_open_dev$mouse(&(0x7f0000000d80)='/dev/input/mouse#\x00', 0x230e, 0x40000) fsetxattr(r15, &(0x7f0000000dc0)=@random={'security.', '/dev/media#\x00'}, &(0x7f0000000e00)='/dev/vga_arbiter\x00', 0x11, 0x0) 00:06:49 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:49 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "cc86150154f2a241", "7f230c97979e6743ba91360e741462ad", "8b1275b4", "bb65a378c127b553"}, 0x28) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 670.501319][T12643] usb 5-1: USB disconnect, device number 69 00:06:49 executing program 4: syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f00000000c0)={{0x6, 0x0, @identifier="6187e0c08a9d0666d79786f834cdf354"}}) fchdir(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0xffffffff, 0xffffffff, '\x00', 0x6}, 0x5, 0x0, 0x80, r3, 0x0, 0x8001, 'syz0\x00', 0x0, 0x0, [], [0x4004, 0x1, 0xfffd, 0x7]}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r7 = dup(r0) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x5c85e) close(r6) [ 670.610428][T11510] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 670.668465][T11510] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 00:06:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={{0x2, 0x0, @identifier="57cded32a7736d52325f33742c295940"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r7, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) syz_usb_connect(0x2, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRESDEC=r8, @ANYRES32=r5], 0x0) 00:06:50 executing program 1: r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x68, 0xa4, 0xa, 0x40, 0xc45, 0x608c, 0x52d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x0, 0x5d, 0xbe, 0x2b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001c80)={0x2c, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 00:06:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r2, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={[], 0x8000, 0x4, 0x3, 0x9, 0x0, r2}) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008000800", @ANYRES32=0x6, @ANYBLOB="1800120008000100677265000c00020008000600e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x28800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x400400) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f00000001c0)={{0x7, 0x7, 0x0, 0x4, 0x2, 0x3}, 0x5, 0x2, 0x4, 0x9, 0x1ff, "ee4592d60ee128c843e6ce698a13ec32829dee656ddfa4d51f4e3b29a48c4f2ef82572b33ee893ce96faeca412d9210f4b7c2b5bc31b1e73c02e173944d9847ef52fbe141f770787ce6fba0bb9e4a1078b78a296a89ed78f20171f8ceea0defbb6b40c489f99fd2f219cbb75f2987faaf2dd2f633541466dce1ded2daf92f737"}) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000180)=0x1) 00:06:50 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:06:50 executing program 3: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) perf_event_open(&(0x7f00000000c0)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) init_module(&(0x7f0000000040)='security.keyringtrusted&trustedvmnet1\x12&+\x00', 0x29, &(0x7f0000000140)='mime_type\x00') bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffff49, 0xbd, 0x0, 0xf7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x62, 0x0) dup(0xffffffffffffffff) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) [ 671.314207][ T30] usb 2-1: new low-speed USB device number 63 using dummy_hcd 00:06:50 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f00000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c1f1e7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e600"/174], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x7) tkill(0x0, 0x10010000000032) [ 671.553271][ T30] usb 2-1: Invalid ep0 maxpacket: 64 00:06:50 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:50 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000000}, 0x100) socket$kcm(0x29, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) [ 671.725038][ T30] usb 2-1: new low-speed USB device number 64 using dummy_hcd 00:06:51 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d00000000000000000000000000004f000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a681b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000100)) tkill(0x0, 0x10010000000032) [ 671.981339][ T30] usb 2-1: Invalid ep0 maxpacket: 64 [ 672.007824][ T30] usb usb2-port1: attempt power cycle 00:06:51 executing program 3: syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f00000000c0)={{0x6, 0x0, @identifier="6187e0c08a9d0666d79786f834cdf354"}}) fchdir(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0xffffffff, 0xffffffff, '\x00', 0x6}, 0x5, 0x0, 0x80, r3, 0x0, 0x8001, 'syz0\x00', 0x0, 0x0, [], [0x4004, 0x1, 0xfffd, 0x7]}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r7 = dup(r0) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x5c85e) close(r6) [ 672.123533][T12643] usb 5-1: new high-speed USB device number 70 using dummy_hcd 00:06:51 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{&(0x7f0000000180)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/92, 0x5c}], 0x1, &(0x7f00000002c0)=""/109, 0x6d}, 0x3}, {{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001740)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/137, 0x89}, {&(0x7f0000001480)=""/111, 0x6f}, {&(0x7f0000001500)=""/168, 0xa8}, {&(0x7f00000015c0)=""/190, 0xbe}, {&(0x7f0000001680)=""/173, 0xad}], 0x6, &(0x7f00000017c0)=""/4096, 0x1000}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f00000027c0)=""/86, 0x56}, {&(0x7f0000002840)=""/224, 0xe0}, {&(0x7f0000002940)=""/205, 0xcd}, {&(0x7f0000002a40)=""/82, 0x52}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000003b40)=""/172, 0xac}, 0x1}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003c00)=""/49, 0x31}, {&(0x7f0000003c40)=""/96, 0x60}, {&(0x7f0000003cc0)=""/216, 0xd8}, {&(0x7f0000003dc0)=""/32, 0x20}], 0x4}, 0x3ff}], 0x4, 0x2, &(0x7f0000003f40)={0x0, 0x1c9c380}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000003f80), &(0x7f0000003fc0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 00:06:51 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x0, 0x1}) [ 672.377017][T12643] usb 5-1: Using ep0 maxpacket: 8 [ 672.523341][T12643] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 672.531733][T12643] usb 5-1: config 0 has no interface number 0 [ 672.538501][T12643] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 672.548460][T12643] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 672.560460][T12643] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:06:51 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 672.684038][T12643] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 672.695574][T12643] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 672.704267][T12643] usb 5-1: Product: syz [ 672.752429][T12643] usb 5-1: config 0 descriptor?? [ 672.784870][ T30] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 672.885394][ T30] usb 2-1: Invalid ep0 maxpacket: 64 [ 673.043136][ T30] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 673.133401][ T30] usb 2-1: Invalid ep0 maxpacket: 64 [ 673.141465][ T30] usb usb2-port1: unable to enumerate USB device [ 673.219436][T12643] usb 5-1: USB disconnect, device number 70 00:06:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 00:06:52 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2, &(0x7f0000000180)='\'\x00', 0xffffffffffffffff}, 0x30) r2 = getpgrp(0xffffffffffffffff) tkill(r2, 0x80039) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000200)='\x00', 0x0, r4) 00:06:52 executing program 3: syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f00000000c0)={{0x6, 0x0, @identifier="6187e0c08a9d0666d79786f834cdf354"}}) fchdir(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0xffffffff, 0xffffffff, '\x00', 0x6}, 0x5, 0x0, 0x80, r3, 0x0, 0x8001, 'syz0\x00', 0x0, 0x0, [], [0x4004, 0x1, 0xfffd, 0x7]}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r7 = dup(r0) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x5c85e) close(r6) 00:06:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0x8}, 'port0\x00', 0x19, 0x1000, 0x8, 0x5, 0xe48, 0x87ef, 0x9404, 0x0, 0x5, 0x8}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) 00:06:52 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd(0x20007fff) write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/212, 0xd4}], 0x1) [ 673.993189][ T30] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 674.233127][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 674.353280][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 674.362834][ T30] usb 5-1: config 0 has no interface number 0 [ 674.371020][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 674.382150][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 674.394047][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 674.483597][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 674.492821][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 674.501393][ T30] usb 5-1: Product: syz [ 674.507650][ T30] usb 5-1: config 0 descriptor?? [ 674.757093][ T30] usb 5-1: USB disconnect, device number 71 00:06:53 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r3, 0x813, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x10'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r3, 0x900, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x513bbe99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77a15b63}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2c048090}, 0x402c080) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r9) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000500)={{{@in=@loopback, @in6}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r11, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r13, 0x0) getegid() 00:06:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000340)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwrite64(r1, &(0x7f00000003c0)=' ', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x10076) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0xe0ffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 00:06:53 executing program 3: syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f00000000c0)={{0x6, 0x0, @identifier="6187e0c08a9d0666d79786f834cdf354"}}) fchdir(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0xffffffff, 0xffffffff, '\x00', 0x6}, 0x5, 0x0, 0x80, r3, 0x0, 0x8001, 'syz0\x00', 0x0, 0x0, [], [0x4004, 0x1, 0xfffd, 0x7]}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r7 = dup(r0) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x5c85e) close(r6) 00:06:53 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) 00:06:53 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:53 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b0913500000000000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000ffd070000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb8942efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a73fe8f53236bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e51cc6d94e2949067fff31318f11203b89c09ecbdd00"/344], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='\x1bdev/[e\x00\x00\x00 2\x00\x00\x00\x0e', 0x20000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/247) close(r0) 00:06:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 675.091654][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:06:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0xfffffff8, 0x4) r1 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r1, r1, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) r2 = dup(r1) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:06:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 675.293226][ T30] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 675.419739][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:06:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 675.533209][ T30] usb 5-1: Using ep0 maxpacket: 8 00:06:54 executing program 3: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x6ce211f4402eed1b, 0x0) [ 675.655154][ T30] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 675.666122][ T30] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 675.698576][T13163] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:06:54 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 675.773373][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 675.784577][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 675.795741][ T30] usb 5-1: Product: syz [ 675.898799][ T30] usb 5-1: config 0 descriptor?? [ 675.968252][T13195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:06:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xbc1}], 0x2000000000000024) readv(r0, &(0x7f0000000580), 0x3c1) 00:06:55 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = dup(r1) write$cgroup_type(r2, &(0x7f0000000040)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000080)) 00:06:55 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) 00:06:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 676.190977][ T30] usb 5-1: USB disconnect, device number 72 [ 676.923098][ T30] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 677.163051][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 677.283334][ T30] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 677.294481][ T30] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 677.383409][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 677.392817][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 677.401905][ T30] usb 5-1: Product: syz [ 677.407705][ T30] usb 5-1: config 0 descriptor?? [ 677.685206][ T30] usb 5-1: USB disconnect, device number 73 00:06:57 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 00:06:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {0x2, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 00:06:57 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f0000000040), 0x8001) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0xb, @pix={0x8, 0xd693, 0x43564548, 0x0, 0x3, 0x0, 0xa, 0x1, 0x1, 0x5, 0x0, 0x1}}) tkill(0x0, 0x10010000000032) 00:06:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:06:57 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 00:06:57 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:06:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x100000, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000200)) 00:06:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:06:57 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) [ 678.296581][ T30] usb 5-1: new high-speed USB device number 74 using dummy_hcd 00:06:57 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xa489, @empty, 0xfffffffb}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)="ba36925307ca3e26effcb62363aaba8a75e70e6650a02d72cbec3fc1d52eeff0b9dda19d53c1e6a9619ea48045f1ac30ba5d1b4c34166d4bc55e468db1ba6c5b2d1f91fb023cd80ba175b48b3e7960", 0x4f}, {&(0x7f0000000340)="2145cc37a7f23728bb7440a99df0c18b96dd8a4dd81594c710f2169322149b47476647dc6ce5baea057c2f7af6492a14ce11584d6ca848f193f91df04f800cb4e05419affbad7a307ae0aafca060ec516fe4e1849498e98ff71985c56026b60fca0a51b1814d685dc229745342060088b71b4d302d8b034e9d8194aad633405d35a23f61467704f0ce3f14", 0x8b}, {&(0x7f0000000400)="2142a7dcffb27277999bf395806d2a51088f9b5845668dcbe7958038a2290f51ec31d65e653f819549faf1e1372078a5cb78f47a09289c50e70c4af1a47c387b229793d165762173e04e23120b3b000863ab6d7933be1ad7d1e8e77a15a802ab7bf7fd7cdb4c57ec99c167a8901e36d68166a9173507ffa38c0568c3d31740a6fb9a47bb35491b6a595799ff1209372549810a0d9931323ef14a1bf6885e6747819df392d3bb1fc48430ded45a7d3295ffd90ee1ef1e94ebacfcbf3d1e8cc0ad", 0xc0}, {&(0x7f00000004c0)="37dcb0f5c5a836179437f6d9780019ca9f4df9ead24f9f9d23ecdf8b706253a39a4d0a74869901efd32c4d0acc8d1417539f3eca09d48b3d0d931898da6c9f0731cf6bd92b782d7a385f22ae12199ef82c4565b552520df3b70400b381214903b34b89fc972cc917c53637b0ec7bd091ba1e535ffdc60eecce5a4f493cf8ce7965cbec86f23a55bbcf7572c52ed31f854c0646c4d25472f1d2d80393b7f9db96a168ddd27c38c480ffb8a935becde30505defd0c99eadc", 0xb7}, {&(0x7f0000000200)="f16ef10c14b9b0e2742eeea04228cb6d8ea1b68e0a00975c63bbe75799186e2d01faf103ea1e5ecf80da94dd96cb60e8358f21a49ce928a94006e523cabd908fc7d960b490d5101dc72935606188feb67e6657398321846e84a22ded64ab573ed5e79a0397f654ec250e7e995f92b4b60ef427b7a9baea77b9ef2f719f", 0x7d}], 0x5, &(0x7f0000000600)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x1, 0x4, 0x1, 0x5, 0x0, [@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffe}}], 0x80}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x3f, @loopback, 0x5}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000680)="4bdf634c638f81783183899a2d70b8c711648ae20994d08fd732e7717bfb84ff78be5d6d4707714002559b479534db08f5a8b911b9fc2329c8fa22f0a4416b4560925694dcbe00aef5963969018ec3d87ec516fbeb34cc48a509c44d22dc650d7dd79c357aab24aa2e095d9c7164521ce958ab7dc510e009eae10a18a218c474002da0a68b724eaec69d5ac75da80b181c6bb53bc8245b15f72562f1803e56ce8aeefc848763bd6175fa301b0ea490851f6300c9b5561a121d5675c4aa3b8ea5967e735f4f74d99c81b8960eee3d148e35f7940fbba5a3e6be91fb804784d1d1d690c18a7387441b0e7783", 0xeb}, {&(0x7f0000000780)="d0d39aab4c3e7f6c135808d588bd3486a15fd8537067e4c21fd92445cbc58b868c1db555b3ef8971", 0x28}], 0x2}}], 0x2, 0x827a6f29403a8466) 00:06:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:06:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 678.546868][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 678.604093][T13646] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 678.705783][ T30] usb 5-1: config 9 has an invalid descriptor of length 32, skipping remainder of the config [ 678.716775][ T30] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 678.825180][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 678.834903][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 678.843725][ T30] usb 5-1: Product: syz [ 679.188733][ T30] usb 5-1: USB disconnect, device number 74 [ 679.923209][ T30] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 680.163237][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 680.283213][ T30] usb 5-1: config 9 has an invalid descriptor of length 32, skipping remainder of the config [ 680.293683][ T30] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 680.373240][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 680.383262][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 680.391453][ T30] usb 5-1: Product: syz [ 680.674992][ T30] usb 5-1: USB disconnect, device number 75 00:07:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000080)=0xa4ffffff) 00:07:00 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 00:07:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:00 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) r2 = epoll_create(0x6) splice(r1, &(0x7f00000001c0), r2, &(0x7f0000000200), 0x1000, 0x8) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES64, @ANYRES64=r6, @ANYRESOCT]], @ANYRESHEX=r3, @ANYRES64=r4, @ANYRESOCT=r0]], 0x8) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r0) write$cgroup_type(r7, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000180)=0x2, 0x4) tkill(0x0, 0x10010000000032) 00:07:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) [ 681.136685][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:00 executing program 0: write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14}, 0x14) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0x9caf625c75de0c9d) 00:07:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 681.424570][T14016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:00 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001440)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x9d}}, 0x3ff, 0xe63, 0x10001, 0x3ff, 0x9}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001500)={r3, 0x1}, &(0x7f0000001540)=0x8) 00:07:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:00 executing program 0: fanotify_init(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x6e}, 0x2c) socket(0x10, 0x80002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) dup(0xffffffffffffffff) 00:07:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 00:07:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 681.887013][T14138] bond0: (slave bond_slave_1): Releasing backup interface 00:07:01 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) read(r0, &(0x7f0000000000)=""/73, 0x49) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:01 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000380)=0x80000001) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x2}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000280)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000040)=""/61) tkill(0x0, 0x10010000000032) 00:07:01 executing program 3: 00:07:01 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000080)=0x80000002, 0x4) close(r0) 00:07:01 executing program 3: 00:07:01 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f450846020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e69c71f6f3917cb85594c6000001000000000037cf39da527a6610d5d993a974f512fc5a339b8a636482ab48c94046ddcfbeb55ce83e9417847f7aa00976936d32868f293b5e4ae7a616ecd0"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 00:07:01 executing program 3: [ 682.633084][ T12] usb 5-1: new high-speed USB device number 76 using dummy_hcd 00:07:01 executing program 3: 00:07:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:01 executing program 0: [ 682.893607][ T12] usb 5-1: Using ep0 maxpacket: 8 00:07:02 executing program 3: 00:07:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:02 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce35b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53954e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e600000000"], 0xae) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0x8, 0x2, 0xffff, 0x2, 0x3, 0xfd, 0x4, 0x3, 0x2, 0x73, 0x8, 0x6}) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xc02) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={{0x1, 0x0, @reserved="1f6d68ecab8fc380c7939bacd00e165461ecdd513b94b7683c6aad2b4884af63"}}) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @loopback}, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x4, 0x4e89}) mq_open(&(0x7f0000000240)='\x00', 0x801, 0x2b4, &(0x7f0000000340)={0x5d, 0x5, 0x5, 0x3, 0x54fec593, 0x776, 0xffff}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) tkill(0x0, 0x10010000000032) [ 683.028294][ T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 683.036822][ T12] usb 5-1: config 0 has no interface number 0 [ 683.043140][ T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 683.054043][ T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 683.065362][ T12] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:07:02 executing program 0: 00:07:02 executing program 3: [ 683.306775][ T12] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 683.316033][ T12] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 683.324328][ T12] usb 5-1: Product: syz [ 683.368013][ T12] usb 5-1: config 0 descriptor?? [ 683.775492][ T30] usb 5-1: USB disconnect, device number 76 [ 684.543065][ T30] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 684.783162][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 684.903173][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 684.911227][ T30] usb 5-1: config 0 has no interface number 0 [ 684.917632][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 684.927452][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 684.938525][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 685.023254][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 685.032588][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 685.041263][ T30] usb 5-1: Product: syz [ 685.046818][ T30] usb 5-1: config 0 descriptor?? [ 685.286190][ T12] usb 5-1: USB disconnect, device number 77 00:07:04 executing program 4: syz_usb_connect(0x3, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 00:07:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:04 executing program 0: 00:07:04 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:04 executing program 3: 00:07:04 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a59424c39fcd42f93cb596906cd2629c1fd83df3ff1f000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410803e29935c2153c7346a685b4c73f8b3a08c5339f915c15813a12c26c71b15e2cee7257225501be2d9a2d7a0ec8c06b51e67593641cd29f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e44e4cc45382bc31a9307be740aa0332b9ce916a70"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7fff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000200)=0x8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000040)={0xe, 0x9, 0x3}) tkill(0x0, 0x10010000000032) 00:07:04 executing program 3: 00:07:04 executing program 0: [ 685.466366][T14797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:04 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) syz_open_procfs(0x0, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:04 executing program 0: 00:07:04 executing program 3: 00:07:04 executing program 0: 00:07:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:05 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:05 executing program 3: 00:07:05 executing program 0: 00:07:05 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x104000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r5, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r8, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r10, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r11, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r12) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYPTR64=&(0x7f00000008c0)=ANY=[], @ANYRES64=r8, @ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYBLOB="f8d0e7f3d3f8c06ed3435a192b15937fbf31c76ae590999b0c5175d9596b36439baefe5c79e1c269d133c62dffd33598c0545fae0e0fe125e7ab437e287e00ea97cc82c9423bac1e017aee4e3c7b56f3dff43286f4bbe47d9c84389ba48c959653d955c14ec2d92062eec939475c2bf4d084ceb777931a1fbbb49ca65a0a216c213293955cc4ecebd43c53d8fabb6bfba1d805eac8f916a1d942a204148c2c7d47d16786c6063cd2ec2347d19081a7ba80ff076caed76d4f6bc8b3a45065bb70e930c3b879adf792a820dbf3d3474e6d34a8db9a4c7735f5976421031126ad17ba8d4e02e1c6203aa409e8b576d938995ae9dfc9b7c5b557a89c0699e81d7d96a3611e94fc8754c25786296b8afff5bc049749a90a9587deac42d2da445882fa8b1dd1e38f9de01ef8659e36391a17bcd05df6f1f1b8f1189d407c3a74d777cb11fc34f2ffccae6c5baaf24c1040a200426ceab0c9309d942549fd087021db5d541fdcc4d9acc44239aa3a06325a071d5a424e094e2d78110f1bbcefb79dc2e877da0ebbc703dcb1eadc7b63e9621e6f9b000cb4a04668003b7e688e29f40de8b8a112adfee501657182ef01e43b59c56e3dbc53c32d2d9f1c4339af9d024f8fb2dd5d5b8a7d9070503380f78bf704", @ANYRES16=r3, @ANYBLOB="1e575c233da1d5d1679097b5d933b046b842aafda2796865f03943e594f1939624b2e980b5e53434a7eb5d3710090990094590cd7da2f89b9ce4007a", @ANYRESDEC=r9, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=r13, @ANYPTR64, @ANYPTR, @ANYRES64=r8, @ANYPTR64, @ANYRESDEC=r6, @ANYBLOB="a45daca2b8bc76e58b28e7d8506e3a72888fa15a6c794ffec151e77b96ed5d6dd2c8cf3574a3cacce0e82a9643", @ANYRES32=r11, @ANYRESDEC=0x0]]], 0x18) r14 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x2, 0x80202) r15 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r15) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x6e4e8f9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r15, 0x84, 0x13, &(0x7f0000000380)={r16, 0x4}, &(0x7f00000003c0)=0x8) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f0000000280)={0x975, 0x8001, 0xf80, 0x7, 0x3e}) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000180)={0xdb, ""/219}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r18 = dup(r0) write$cgroup_type(r18, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) setsockopt$RXRPC_SECURITY_KEY(r17, 0x110, 0x1, &(0x7f0000000400)='/dev/dri/card#\x00', 0xf) ioctl$sock_TIOCINQ(r17, 0x541b, &(0x7f0000000040)) 00:07:05 executing program 4: syz_usb_connect(0x4, 0x0, &(0x7f0000000080)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000100)="de9382b1b619f1b8841428e79ef50645a3da830cc358bfd76c165787160223af0f30bd9f30ff06c5ed9fde0680add786d84ed9353e9e5927083fd9d06af2702bc950007a0e21cab008eb4ddf736274260002e7000000001000000000b2", 0x5d) close(r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x96) 00:07:05 executing program 0: [ 686.565487][T15033] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x8000fffffffe) 00:07:05 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) syz_open_procfs(0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 686.877146][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:06 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000001c0)='b', &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000003c0)=""/140}, 0x18) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000180)={r0, &(0x7f00000003c0), 0x0}, 0x20) 00:07:06 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:06 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6\b%cpu\xd8\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x1ff, 0x105800) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000340)=""/135) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) poll(&(0x7f0000000180), 0x0, 0x0) fchdir(r4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000040)=0xfffffffb, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180), 0x4) write$cgroup_type(r3, &(0x7f00000001c0)='\x10\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:07:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x2, &(0x7f0000003180)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYRESOCT, @ANYPTR], 0x4) [ 687.221719][T15089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:06 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="0900000000003639408fa3a3ba27661e0ee781aefb81534cd91df034783b0a7a2a0731431c207e3db2f0bf59571679539a6fa656b046be44b6ef23d6b73cc791e30a5f9ec74534457df69f1c70533566a9cfb4dbe00f1d82b781fcba99f6cafaede55fc2bf317b4ab4832600a04db038085145c59138a2436c94a01b5e785afa94077f1bbca3019609c16d420177dea87db3eb71756f571b54cbe012443cbb144a3c3338cbbd9c886fc7cc1d3423f6bb21b642a674785e87ad4c9f1e0ce9227f8859f148cde93eaad31377752f4c5e2b8cfeabf0fae417ebd46a1b67ff9049d9d8b6e3", 0xe3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 00:07:06 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x401, 0x100) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 00:07:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:07 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:07 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) fanotify_init(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x14', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 00:07:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000140)='$.6/%cpus\x82t]\x00', 0x4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c11a8ab044ee4df085f192abca42027bd8ade47dd867195c2d87fa7e1b"], 0xae) sendfile(r1, r1, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r1) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r3, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) tkill(r3, 0x10010000000032) 00:07:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 688.010030][T15528] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 688.053284][ T30] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 688.078415][T15530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:07:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:07 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x4}}]}}]}}, 0x0) [ 688.293333][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 688.297913][T15608] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:07 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000100)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) close(r1) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 688.415733][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 688.423949][ T30] usb 5-1: config 0 has no interface number 0 [ 688.424044][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 688.424145][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 688.440098][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 688.614060][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 688.623444][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 688.635144][ T30] usb 5-1: Product: syz [ 688.654577][ T30] usb 5-1: config 0 descriptor?? [ 688.805319][ T12] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 689.035047][ T30] usb 5-1: USB disconnect, device number 78 [ 689.113106][ T12] usb 1-1: device descriptor read/64, error 18 [ 689.503098][ T12] usb 1-1: device descriptor read/64, error 18 [ 689.773102][ T12] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 689.823232][ T30] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 690.043136][ T12] usb 1-1: device descriptor read/64, error 18 [ 690.063254][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 690.183357][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 690.191445][ T30] usb 5-1: config 0 has no interface number 0 [ 690.197796][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 690.207581][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 690.218802][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 690.303197][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 690.312383][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 690.320806][ T30] usb 5-1: Product: syz [ 690.326315][ T30] usb 5-1: config 0 descriptor?? [ 690.453489][ T12] usb 1-1: device descriptor read/64, error 18 [ 690.568742][ T30] usb 5-1: USB disconnect, device number 79 [ 690.583731][ T12] usb usb1-port1: attempt power cycle 00:07:09 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:09 executing program 5: r0 = memfd_create(&(0x7f0000000140)='TIPCv2\x00', 0x3) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xae) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5a4debdde05cb0604a9d1db6600ce2c157cd1a87c04f53df2548350e835b1410f419b1743c7e6867efbf1998f729d6eee7b35eb300f74299388a08b1d196eb4def5c5d67d5a79756d3992c2724d5c6194e2e561abfe1423d99ded474e155341e0d3ad881b332fc04f5091388a183d51cc53d8bfff1dfcf32b188ed40f61a34179263d41f7f392b7a0d7aa0cda123c417bff34beadc79b37df96bba10958ce01ccede90", @ANYRES16=r2, @ANYBLOB="02002cbd7000fedbdf2509000000100004000c00010073797a3000000000100004000c000700080004000600000024000200040004000800010067fb00000800010008000000080001001f00000004000400"], 0x58}, 0x1, 0x0, 0x0, 0x10000800}, 0x80) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) faccessat(r4, &(0x7f0000000280)='./file0\x00', 0x80, 0x900) tkill(0x0, 0x10010000000032) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000300)=""/2) 00:07:09 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) personality(0x8000000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x13) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x107804, 0x800}) 00:07:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:10 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 691.165334][ T2885] usb 5-1: new high-speed USB device number 80 using dummy_hcd 00:07:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 691.252158][T16004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 691.314170][ T12] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 691.413554][ T2885] usb 5-1: Using ep0 maxpacket: 8 [ 691.533330][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 691.541404][ T2885] usb 5-1: config 0 has no interface number 0 [ 691.547905][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 691.557865][ T2885] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 691.568974][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 691.583326][ T12] usb 1-1: device descriptor read/64, error 18 [ 691.653379][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 691.662498][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 691.671514][ T2885] usb 5-1: Product: syz [ 691.678248][ T2885] usb 5-1: config 0 descriptor?? 00:07:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000835e00000020341a020840000009000109022400010000000009040000020301000009210000001f22010009058103000000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) read$rfkill(r2, &(0x7f00000000c0), 0x8) syz_usb_control_io$hid(r0, &(0x7f0000002800)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "bd62749f"}]}}, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r2, 0x35}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20400090}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x222, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000080)={0x20, 0x3, 0x10001, 0x100000001, 0xffffffff}) 00:07:10 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:10 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x8) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) read$rfkill(r2, &(0x7f0000000040), 0x8) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r3, 0x2be, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r2, 0x0, 0x5, &(0x7f0000000100)='\x00\x00\x00!\x00', 0xffffffffffffffff}, 0x30) fcntl$setpipe(r4, 0x407, 0xfff) tkill(0x0, 0x10010000000032) 00:07:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:11 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 691.967059][T16022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 692.080528][ T30] usb 5-1: USB disconnect, device number 80 00:07:11 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x2, 0x58f5d1ad, 0x49300000}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 692.273519][ T12] usb 1-1: device descriptor read/64, error 18 [ 692.543212][ T12] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 692.813044][ T12] usb 1-1: device descriptor read/64, error 18 [ 692.843159][ T2885] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 693.093008][ T2885] usb 5-1: Using ep0 maxpacket: 8 [ 693.203250][ T12] usb 1-1: device descriptor read/64, error 18 [ 693.213285][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 693.221437][ T2885] usb 5-1: config 0 has no interface number 0 [ 693.227821][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 693.237602][ T2885] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 693.248794][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 693.323312][ T12] usb usb1-port1: unable to enumerate USB device [ 693.333363][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 693.342795][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 693.351198][ T2885] usb 5-1: Product: syz [ 693.357011][ T2885] usb 5-1: config 0 descriptor?? [ 693.598709][ T2885] usb 5-1: USB disconnect, device number 81 00:07:12 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 00:07:12 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:12 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:12 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000180)={0x81, {{0xa, 0x4e24, 0xe7, @empty, 0x5}}}, 0x88) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e500006c5c0000000000000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7467225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede020e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 693.940468][T16245] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 694.264134][ T2885] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 694.503111][ T2885] usb 5-1: Using ep0 maxpacket: 8 [ 694.623393][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 694.631599][ T2885] usb 5-1: config 0 has no interface number 0 [ 694.637986][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 694.648093][ T2885] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 694.659153][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 694.743232][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 694.752487][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 694.761330][ T2885] usb 5-1: Product: syz [ 694.767336][ T2885] usb 5-1: config 0 descriptor?? 00:07:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:14 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:14 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:14 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x80a41) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'syz_tun\x00', @remote}) tkill(0x0, 0x10010000000032) [ 695.147425][ T30] usb 5-1: USB disconnect, device number 82 00:07:14 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:14 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 695.603477][T16445] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 696.023140][ T30] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 696.263201][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 696.383239][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 696.391414][ T30] usb 5-1: config 0 has no interface number 0 [ 696.397960][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 696.407777][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 696.418930][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 696.503231][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 696.512465][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 696.520759][ T30] usb 5-1: Product: syz [ 696.526351][ T30] usb 5-1: config 0 descriptor?? [ 696.766763][ T2885] usb 5-1: USB disconnect, device number 83 00:07:16 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/seY\xc4\'\x16cer2\x00', 0x0, 0x0) close(r0) 00:07:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r3, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:16 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) tkill(0x0, 0x10010000000032) 00:07:16 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0xe, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") membarrier(0x40, 0x0) [ 697.037336][T16593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 697.056748][T16599] IPVS: ftp: loaded support on port[0] = 21 00:07:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:16 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r3, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 697.355474][ T30] usb 5-1: new high-speed USB device number 84 using dummy_hcd 00:07:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:16 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:16 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c46020000000000000f00c4b4000300f8d4947c85a34f61206688e48a1468043e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e64d660000e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8020212}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x110) [ 697.519162][T16813] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 697.603678][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 697.723964][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 697.732255][ T30] usb 5-1: config 0 has no interface number 0 [ 697.739427][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 697.749318][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 697.760533][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 697.853539][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 697.862826][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 697.871137][ T30] usb 5-1: Product: syz [ 697.896041][ T30] usb 5-1: config 0 descriptor?? [ 698.130609][T16599] IPVS: ftp: loaded support on port[0] = 21 [ 698.141276][ T2885] usb 5-1: USB disconnect, device number 84 [ 698.923017][ T30] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 699.163117][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 699.294755][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 699.302989][ T30] usb 5-1: config 0 has no interface number 0 [ 699.309238][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 699.319144][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 699.330172][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 699.423336][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 699.432433][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 699.440731][ T30] usb 5-1: Product: syz [ 699.446335][ T30] usb 5-1: config 0 descriptor?? [ 699.685935][ T30] usb 5-1: USB disconnect, device number 85 00:07:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r3, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:19 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:19 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x640040, 0x3) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x81, 0xffefffffffffff7f}) syz_usb_connect(0x0, 0x1, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 00:07:19 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000500)=""/197) r2 = getpgid(0xffffffffffffffff) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r3, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r4 = syz_open_procfs(r2, &(0x7f0000000640)='net/softnet_stat\x00') fchdir(r4) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x0, r4}) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = dup(r0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xfffffffffffffe00) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r12, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={r12, 0x1, 0x6, @dev={[], 0x27}}, 0x10) getpgrp(r2) tkill(r2, 0x10010000000032) 00:07:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1000000010, 0x400000400080803, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x4, 0x0, 0x4123b79bef9aec01, 0x0, 0x20000, r1}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r1}) dup(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000040)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='\x01S\xb8\x00\x00', 0x152) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 700.165997][T16938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:19 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:19 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:19 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 700.602538][T17048] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:19 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:19 executing program 0: bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4), 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x440100, 0x0) mprotect(&(0x7f000020e000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) recvfrom$inet(r0, &(0x7f0000000280)=""/148, 0x94, 0x61, &(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40200, 0x0) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000001300)={'syz', 0x1}, &(0x7f0000001340)="fe", 0x1, 0xffffffffffffffff) keyctl$chown(0x6, r2, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r2, 0x5f, 0xed}, 0x0, &(0x7f0000000100)="07b39485439b25b2639ba86377503f97986dc9ab62cf91b4b049fe01af250da9743684ae962fab40e29c4f4e33b6b82e609cdb852de196950ff47861f34c9204751912a0cc1ede3371521ebe4f38356a95c5a56ccc8deaf524e08791c41bda", &(0x7f0000000180)="d8838ecc31c4babedc37388edad7bdc23cdcbd0d891f5f47ed065de27fcdc98f83fba5f82ae6020746eab1bea18137aeffdc2675ff12195f661e6846c73807a30b6643b6339d0a1e1d1883ac3720b8433abbced229f3c3c0447c9744c5cda337c039e690a69abf94939096fc0c7ced90a86a2448c98d38e9d1db22f13e802fa4a0edc796997e2aa79ea17186486c2376024f6bb5f5f9c52a740c5e35bce58323d5a718a34f820efc116f2480629fd12e65f5f0f613eb863c82741ab584a92e01b1ffa65d968e35a7652b7416b74ea385643135da5f47890e18a23a95a6737aa85d0047a5a67b26eb586b7b9442") ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0x1, 0x5, 0xffff, 0xffffffff, 0x1000}) 00:07:19 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:19 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x8000, 0x5, 0x75e0}) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close(r1) r2 = dup(r0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) close(r2) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) [ 701.003567][T17078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:20 executing program 3: r0 = userfaultfd(0x0) unshare(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xe1, 0x7, 0x0, "73cc54b28da894a165a26dbb7eccf6c9", "37fc6cf44250c171a2c579df47f974fe72386cd50889dbbc680ac33b6eb3459625cb55aade1e7f8f6c6d92e9c084e26a25cee2f9b74ca4d0be9e61246503be42ced42f339f9e94735ac895624fa48872978d59dd772a9376ea5c3bf8546bfdef800ce5c0a292070a825b2779a153c80f26d5f6e0b7ed63013748524136131a1e1604c8f752ed0d7a85bf45e807115486d747b5d146a0e376b1a81ece23b5715b72812fe9958f986dbc400f87a0a763c53401f3eb292613a51b27216675fd3ceceec2d8ebaee6a65ef0856f59"}, 0xe1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x400000000000158, 0x0) 00:07:20 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 701.382110][T17291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:20 executing program 3: r0 = userfaultfd(0x0) unshare(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:20 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:07:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:20 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 701.791822][T17328] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:20 executing program 3: r0 = userfaultfd(0x0) unshare(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:21 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:21 executing program 3: userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:21 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:21 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xffffffffffffff1b) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 702.375333][T17527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @raw_data="8a72c3b61e5485960936c985402bf106c5f51f21482fa0f603c99b9afecaedfe3a443455bcf85512218fd3e52407afc91848cc343bb9937bab07361fca37b98c9e6fff1995bc0ac318e121ea1489e076a10665cc63f6d7e7f2d7b46e54630d892a6a75aa8ace885e49c8628eda8253262a22e041300c0f9833aede5c5a4c43e9699e0aa790e75d6f78a903bcade7d5971139249dfc6971e032a0e727c0de64da7165813d8df56f83ef01fbf9dfaf3a95e1f7142fd28b550de888e11cf5a79859fd6e11e171bcbd38"}) times(&(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x8000, 0x2}) 00:07:21 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d00000000000000000003000000000000000000000008000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:07:22 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:22 executing program 3: userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:22 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 703.028567][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:22 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa5c2ee2261fbc86dd6088dc4f00200000fe8000000000000000000000000000bbff0200000000000000000000000000013c113e00000000000000050200030000000000000000040190780096e26600000000043a046c3d8f292375f58d00b60d1956b985052af2c8435d2041b66a7a7aee39f8a459f0e9224de1d46be85ea522c2e3eb79ed630279e6a1b4"], 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0xfff9, &(0x7f0000000100)=0x2) 00:07:22 executing program 3: userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:22 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:22 executing program 0: 00:07:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:22 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 703.663841][T17892] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:22 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x3) r1 = memfd_create(&(0x7f0000000140)='o@>FO\a\x00\x00\x00\x00\x00\x00\x10', 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xae) sendfile(r1, r1, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r1) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)=0x1) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) tkill(r3, 0x10010000000032) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x101000, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value, 0x8) 00:07:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:23 executing program 3 (fault-call:2 fault-nth:0): r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48002) socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x404000, 0x0) 00:07:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 704.058181][T17963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:23 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x2, 0x1, 0x0, 0x9}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:23 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:07:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:23 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fffffff, 0x40000) sendto$rxrpc(r0, &(0x7f0000000040)="bca28540c86a9abc2669beb811750ca61c96f6cef62bd56341cf6f3c147a88e5170f23b6e50d3aae64229b86df42d49815e278ab0259e3becfceab493a473cb9f89c72208a4a3132cbf296d4a10fba95b1dc8ab46f1519f42099517a4ab044ef7e56c513257c37ac46851281b3", 0x6d, 0x0, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @empty, 0x4}}, 0x24) syz_usb_connect(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x406000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) 00:07:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 704.704083][T18237] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 704.723382][ T12] usb 1-1: new high-speed USB device number 41 using dummy_hcd 00:07:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x3) r1 = userfaultfd(0x800) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000000)=0x100) 00:07:23 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0xb0fd50831dcea052, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:07:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:24 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 705.003990][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 705.044816][T18297] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 705.145649][ T12] usb 1-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 705.155068][ T12] usb 1-1: config 0 has an invalid interface number: 174 but max is 163 [ 705.163646][ T12] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 705.173473][ T12] usb 1-1: config 0 has no interface number 0 [ 705.179671][ T12] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice=40.fb [ 705.188865][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:07:24 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 705.236160][ T12] usb 1-1: config 0 descriptor?? 00:07:24 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000003375a26f4ea3c56e34743ec6efa7e475eef857f128b2f6e7248fed77f987c3f5cb48c5e88c05423b45ea4b43d5db46b6f6000c3bc82e6a8d10150d610dff65f86f179ab2fd568542f45ce90d2e40e6109df9a5867bb63721da921aa9e66cff7b1042360bdd87aad006", @ANYRES16=r2, @ANYBLOB="040029bd7000fddbdf250d0000000c0002000800010003000000400002000800010000000000080001000100000004000400080001000600000008000100020000000800010000000000080002005716000008000100060000002000020004000400080001000400000008000100020000000800010005000000"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x200c0090) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 705.312399][ T12] usb 1-1: unknown interface protocol 0xd2, assuming v1 [ 705.319963][ T12] usb 1-1: invalid UAC_HEADER (v1) [ 705.325905][ T12] snd-usb-audio: probe of 1-1:0.174 failed with error -22 00:07:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:24 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 705.498769][ T12] usb 1-1: USB disconnect, device number 41 [ 705.566886][T18631] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 706.303103][ T12] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 706.563013][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 706.683314][ T12] usb 1-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 706.692857][ T12] usb 1-1: config 0 has an invalid interface number: 174 but max is 163 [ 706.702429][ T12] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 706.712067][ T12] usb 1-1: config 0 has no interface number 0 [ 706.718541][ T12] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice=40.fb [ 706.728039][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.738872][ T12] usb 1-1: config 0 descriptor?? [ 706.789105][ T12] usb 1-1: unknown interface protocol 0xd2, assuming v1 [ 706.796265][ T12] usb 1-1: invalid UAC_HEADER (v1) [ 706.802041][ T12] snd-usb-audio: probe of 1-1:0.174 failed with error -22 [ 706.990273][ T12] usb 1-1: USB disconnect, device number 42 00:07:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r4, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmi\xa4i#\x00', 0x0, 0x140) getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, 0x0) 00:07:26 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r5, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[@ANYRESDEC=r1, @ANYRES64, @ANYBLOB="2987001cc41b68cfd85102cefa8d9577bc690e3baab68abd9ca2108854a4ee19653bcb98bedd6e8c25719e72c3012c1a8093bc38967f2a6b99b08b7b9a79b7279b47427ef8cad45ced513269cad4e888c3b46498fdd13639d5faad606d08b7df1fe06dfa221a2e7941e4108fb5d768a15a95d4fdc51c568c2058a74358853845e49c3c95d8ff93bd9a01bd68a976f63b1c7721df8580d8664b7851da449a8b0d3c80545a6aab7f38dca5e8467865f721d94f7be8416caa3103bc98ae0963ef0c233a96496832a91393fbe6402d24b530275b2772dabf10ac9f4bec2b6667163ab0241236e06607ff0efbc29532606d47bd4932bd3e765044bad872c0ada9ede87b4ff51d02ab3ee3223dcd54589b2ccfec082040a06a3629f2b81c0b981809ba1fbb28a137edac12df31ca9bae34047bbb34128e00c5a6f3c09e42c27d92254f4efe46e589ba0350c773370b0a8f98abf6dd1e9a96fd205e5d6094166e0cab443ebcb18a632f1d08ed3e9ec353f0696018b42b9d9f8e2b27b9f25a71679e66cbde13d10ec971ea5a573ce5824ab1f61e2fcafcf16f5927c363cb147d7bd877e3010b05284378b528877b1b04558891da1ccd0955a679f3cf48892799216b49becb66f3832c35d236b6c8b85d6af2b8e56974634e29d6878f0ad5448bbca25c42ca4515f0096034843c8246d94bb212daa9b2ee9f24754bb85107da6e983c06c98abf50141c9446cca5d61dc5a113c34da6f3ed4c9e969aa12432c1a2f68505e41c5fdee9cb40e19d06f99144f246167d2d231057dea869faa46c104e34dc09f4a2b86c08bdba305d8a00d5e0d8600cd932e1ff0ebff59907f278fb97fb6ac7c133f7fae3b5ffcdf8b05f2e8fa4038468ad4cf75b40ededb9aafdc7f3674109ce9be44cea7b0d1a509857651e7294b9e75e9b4c688ef3dd840ae3b780fb02d991667148f4bb43b515149634df5164603b9865a402fa79b28a2235db880c0c68b0bb89c72b70d5f334b45919dd70890da353a064b99f82c1f38e5e0c10e2a2389c81a50a3b4dbc942290c83ded01b2dd78b9ec249a71e1c780fc8e5d8a74d7c04e5afe0c594aa3ae275d394d52d38f5ddf1806a89281c6c649883e842628901fe6873d3c567f47a92d9d0b72efc6abb62d3f44d2b9a8dbec81e9f325f7ac0980c7a14059f1bee5a878f5670242aea223c73ed576aa7e0dffea36fdc08289c549882928ff02bafdd8bc44bfcc53332739b4ca54389a4eec28c0b1cc6ac6a8adbea423d6ed2f49ed00cceb759975276bbcc503ad724daf2101dbeeda1ae2b098e308e5a580d5239243a4f742efc20f94aecf6f840cdff2dba21375a9aca3ecfca89ff74aef073217819fc9c1f82e78766c8064e72767ba9bfcad260fca807cd754ebb625af2d2b89dc182f74e157c2d8c167667e967995757ff7eda545b8c67996de84be146813260a4efb1792b21305b1dc1c6353b3d33e73f6b185d36ebe1c4e28450c89d4c753fd7c11409bef18e176885beb8b662d06d7b403e2972f9123ed80725434dc19dd6029042fcc71aabfe3297990e07d67099df97fd0d59b7eb46bae878fe9923fc5d9a4c053c262954c13ef7b16749d98559ffdef0662c3d8380b5614a83e03da2f8a2eb942115d0cbf2becc7342ecbd7b3e7a539fbc3cd5231605e7e6fb62f07df7f8cdbc4bbf242bd7116eae5b440cabc99361cf2daea2cd756e1c76968c2debfd45273a33950a6716556ebeea530f51fd02c9d90b45f6f82440865b1d1a375d4ec95058b2d3d1536beb387028e3d20080ee7fce6f5dc599b6a27d9af7352bd4a8a948d2285961d27b42f4328c00fe2c5b12d83d69f9fbf7bb66d66e48fc388c7722750ca6243f8ccbfa1c8aac6295788468cdb1e517e92517df82e6526d922c128677c40cf98e16e9ca66c97eea5bee05d5cb761ba41486b0d3e2785ea2b211530fb33cd23a92bdb9384b42f216a59050e61e34579eaf3b5339b2db76df3e542833c0962f6296f8e654b9ae661e6dec6b17321df3abd678d86cd2d2026ecb0802bdd0c3b3e726f76f89e34f419353c06c9b5899c4645b88b459a3ee9e76f3da378def6e9460d12658c2036ff03b6ae067f851edd6ae1fe6515892dd81def1df5ebbca23606dcca2b4747b6d7ff80c476afdb701f6eddd5f83fa45807d8b1d064ad052aeba80571076ad9ace58f662d5f5eff3e3ac57193c6c6ab793330f32663657aee7b0418152cfc1b548e4b495f857498361b4bdf1b4cb876c777d7f1b334a17501bc75135753b9e476c4dfbb4ea2b8160dc2f99611784d206581ff02ccc82f59744914ce47f9482aa27b39be69940ce181063ce1c57903d9903e04e9be568220a27e3492cc693d8e86b81d9afabcf7861ea091874c5d0fd89fcfc27bc43eefb5a3ee50e57c4bb6ff5e0d9e8df54e7aabade1d7bc27da247f2d1d8759fa16ab8a094bfedb91cb7bc0b1b38780c4dda068e459ad1f461ebca0c97402dee5393539c82f3b77a12a51dcbd5ba4f5a2059b24b76503580e2b8ac6b66c07066044028b9f2b11b09a470f298a0c48a36e6a9bcaf804d5d5ddc7e9314314a76d2601b1d1a3778b6ce2f81cb29a1f632512f790030ba3da749b593461cd2531c01e4b1b792464596015da003f7955b5f8f9c11b9d5cf698ceaec17b9293ea169c06d8364638925916bdc6a791492690e1c87ef6b22f14e9d34afd66af0e323fc185dbbb5cace44a34ad851bcc8356675b7104e35d3ef3fcc6e449616cf4ac91405c222474c7ee3873f6e8037c6f8e75815c229ba7175d2f98518a89de854938bfa2264aad78d08b0297bb5fd8af4e88e05e09778ecf8236f191c567a8781ea76dc3471aa9cada821caeac6956872b5be1a597ac561903eda20427f77ffce3475475cee2a760f5d873ce06c9bebad0a2440d2afa8b27e571ca3ce0e14e13717c8546e74892b33e11e83a69e8203146ca5674a687d0af0d598ad1f781498ab80e801bfeb332391180a5a0e3a1ea39cca6f637ce268b9892412e59547f58475207855da7c7468805fb0ad6199b2778225044fb64d87580fe04ecdc847220c47919b7452df8e42d342dfeff4718bb3d597c9e47f974f278f7c3668165fce3435b481a90137ae419b40753199d2dd830d368dfe215383136c1854aeb440869fd6f9041498b7c10f12b2c769299b42c5abf07a153ae08cbb3b5b2517b9b95f016b3374637e129190c0314025bcf54ed6196b9a12abace384a5b62ce79bd8409254aa62020944c4f4569e86aeebb27558c9a713ca3ef79908937b2ff4ef286f6dc42299c5ab8b404d726c10395b8a093019af24063e74f2deb615d5707f70ab2943325b08faadf5000eb85fab423d33fa52eadb185b6236b983d698ed02aa9575741d3073a395ac5b7aa43dc76687e09658ff575eff971bf4a5edad8d1c04bde3c20907646ad367bec0b6ae6e5f9360d3f289f2bafd630038808a9c85834a8e6e16e1a9aea62729956d157d94081a57638f85442dbabb0d6dbb283b6159530c1c247706eb8195b71c48fd7431192d5528f8e5059bf403dab25daff7674f948c25e99818d7d0f0bb4affee960d6976718467d0fa94b1a3e680d09caf84cbc3b489af3d616c44e2e952782ce59b67d39f4979acb0342bb3c63ad740239f5779aad9fc55a1363ed9cf26114394abaadcb3545652288a6d24684860d1752c8fc6119b1a908b6887d9119086d7d0c03704d91ddf014ca473c00f953ed8e8922aca2d023ec83227f685e846170b038959ae96328f985e03135c581ab287480bc58b6917be1153c5c388b25fe5b471542bae07d250776051ccd7de68946953bde6743c1c54ea9bb2a63086a1408ae49abf91ee2b28864526910ee0b2b9800b02dbfdaecc8407eb1e9a2f139dbd6bc59d0b0bda8e4138b6bd3908edb6fc87cb4c783b39acca9469687b8256be052d8ffbd8db4851cda38c886f20184ab72646bc6d37aab748f989fbcc5ff581c155de3967a946b1c02d3b92bfd806456accdb99dbfe6376328dc158ebecc2d8fd9eb95d3a9a4f46ca666adc26bb950a71465b5e5509de2e97dac5a69cfec53879b1073211ceac2af6b4b327056b6db746b3bf7c9887973db8410355f948b45623b587c4549022e6b94292712f9f9e7bb1370fe2b1b91c6a55196e098e5399ca76d2b0a395debb82c6d227824ab6577865cb34e0c4c6c75b04ab806affc1d7dd10e404a5eb2a6e8f072ff2f724dcea1a77e977f7454517623858f9e8bc3d6a5b56f757619abc83f7bbdb56eaa5a623c98b6af8e1a1c8ff9c8758ad1190a0c7be7d9af61aefe91f2c36bd5f56cb8bbad748a1b3033667396f33775232af98b5855034ba4ec6b49b3a4c8d1734b6d9cda0b9fcb7279c63b57b38c718bd2866f44f42eefdf4c721176c5b3819c55cb6af1078f4f5f8e1b6c028ded33e4bcce20684f91743c4d4d69e460f827f775a838fa5d51945c2f5d6584b5868110819eecdd5e43c4f274037c110da78752f19bf838ba65754df4dff7a1f3c5a88c15aeeb5afbf55d2bacf651d62cc8da3cb3df69c0a9bfc0f4079a779c613524abf5b5c56ee50368b7be5ade4965c515ff42b0f5706b5f9863f60083cad574957f98d0d1301258b72c195eb8796fa965c0d4514582ce2af032ced03d442190f912a6367f6098dfccf248fb99b4013f7ba79f97f095c17d158dc8f1bf56406c27ff587522d0b623d3c62a5248261e5889df341905b7f056b47964c65711f3237abb163ca778b1c8f99b23366f206b3ef8441c6162de0d71e3b762ff0ddd1f0b4908547a374b43e08e0dec43a189ddc6b5bad6be53cbdbb3fc3b0fc7f9dd73f897e4bd7401550fba352ad6c4c98286893fac0d0203438a2cfd61b15b3adf39eabc1511bdc88812a5fa48f798d363475a726bf8cfff936e60ab437b49d93a54d822440c9f32f15bb932e110f15d2608ad679402ab9139d920fb323f38cdbace75fa7494cef658acc4dcddadf82fee5eff9ba77891b78d438256e248aa255ecb068afea60eededeff9342990b9886ab244081dbd0cad06bd4b2dd83fb57049ffb9452aa3bd15c2a302c774406fdaafc8409c9a4c2716c94f4ea2481b7bc86cabadf715a30abebb2665cccd252d06d2cfa991241578793f2e615614b7b2303895f510114f28dd49b8bcd291b5f4f1d049f401b6c01028abd65f11c2735fd995c153e9e0b46116a9cf2758e9a6597b9da6456ce252594f0cf4da2daef1121c7c0ef71412337d47f8727a0b49d4c2d10093bb8612e17caecf1761048863649b61517b3f2f3a18374e25e39cf890e42d39327bd097ed44998f43f016623e767513ad89bde932ef89f07d9d136f35bb49db6155c8eb0f8d07b0be2111d0bca49923b3078cb15664ecb382a1ae03d999815126a5423ddd0fce97acafed3bc30756ea9fd6effdd3827b92092602ec331dffd50f14b988db992e80223b65bd74c339b0235ebf346b1e572822067abca6d3f43816116dcb66e88d8de516989b9e63712863c8bb385b95d9111efa549f0f50673177109cb0a83fbd9ec7cd4a9b83754a323c70f3592be3e0deceaa253b14bc86f7ed4b321efab91807ff83a1bcb0fe6a6fc02000821ff9d100d4ee7551e5613287bb073c3174965b546955326e48e19ff10cddc3da8d18c8f2b0a66ef1cc04ee7828073615ee8de41302221eacc08ac2a131ca5f8d0cee99a84a781bec2707f8fc9cec36caeb3632141c7affc4cb6f9b82c51e6bdaa9d7151956b86909689008e17e2673848056f75a132ee4294cb2d3d6", @ANYBLOB="07e1", @ANYRESDEC, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000840)=ANY=[], @ANYRES64], 0xffffffc4) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) r8 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r8) open(&(0x7f00000002c0)='./file0\x00', 0x80000, 0xc9) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r10, 0x1cb}, &(0x7f0000000040)=0x8) ioctl$KDSKBMETA(r7, 0x4b63, &(0x7f0000000240)=0x9) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000180)={r10, 0xffffffff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000200)={r11, 0x72dfdf7b}, 0x8) r12 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r12) ioctl$EVIOCGRAB(r12, 0x40044590, &(0x7f0000000340)=0x3) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r13 = dup(r0) write$cgroup_type(r13, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000300)={0x1, 0x2}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000380)=0xb, 0x4) 00:07:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000000c0)={0x8, r3}) syz_usb_connect(0x2, 0x1, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r4) [ 707.533216][T18800] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:27 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:27 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = getuid() ioprio_get$uid(0x3, r1) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000080)={0x7, 0x0, 0x1, {0x3, 0x1, 0x80, 0x98000000}}) [ 707.977051][T18906] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 708.148615][T19099] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:27 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x10000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') fstat(r2, &(0x7f00000022c0)) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000000)=""/1) unshare(0x40000000) 00:07:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:27 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 708.465570][T19211] IPVS: ftp: loaded support on port[0] = 21 [ 708.493671][T19231] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:27 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:27 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x10000) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x14) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x0) userfaultfd(0x800) unshare(0x8000400) 00:07:27 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x3c5649eb988ae463, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 00:07:27 executing program 2 (fault-call:5 fault-nth:0): mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 709.056941][T19374] IPVS: ftp: loaded support on port[0] = 21 [ 709.123990][ T2885] usb 5-1: new high-speed USB device number 86 using dummy_hcd 00:07:28 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:07:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:28 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x689, @remote, 0xfffffffb}}, [0x61, 0x2, 0x2, 0x0, 0x9, 0x2, 0x1f, 0x2d30, 0xfffffffffffffff8, 0x1, 0x158, 0xff, 0x9, 0xff, 0x7]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r2, 0x8, 0x8, 0x3f, 0x1, 0x2}, &(0x7f00000000c0)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) write$FUSE_POLL(r6, &(0x7f0000000300)={0x18, 0x0, 0x1, {0x7f}}, 0x18) shmat(r5, &(0x7f0000ffb000/0x4000)=nil, 0x406000) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r5, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) flistxattr(r0, &(0x7f0000000240)=""/37, 0x25) 00:07:28 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "76608c", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "b19ade"}}}}}}}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40000, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000000c0)={0x5, 0xfffff54e, [{0x3, 0x0, 0x7fffffff}, {0x20, 0x0, 0x80000000}, {0x12000}, {0x8, 0x0, 0xd6}, {0x5, 0x0, 0x2}]}) [ 709.373986][ T2885] usb 5-1: Using ep0 maxpacket: 8 [ 709.406944][T19559] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:28 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 709.514003][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 709.522205][ T2885] usb 5-1: config 0 has no interface number 0 [ 709.529069][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 709.539014][ T2885] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 709.550176][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:07:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r2, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) rt_tgsigqueueinfo(r1, r2, 0x38, &(0x7f0000000040)={0x1, 0x401, 0xfff}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe0700000000000800ff0008000000450001070000001419002b000a00020014a4e91ee438d2fd000039000009006e00", 0x39}], 0x1) [ 709.696486][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 709.707206][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 709.715916][ T2885] usb 5-1: Product: syz [ 709.770604][ T2885] usb 5-1: config 0 descriptor?? 00:07:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:28 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x94100, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000100)=0x7444011) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 709.853715][T19773] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 709.862068][T19773] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 00:07:28 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000000000/0x600000)=nil, 0x600000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) [ 710.020248][T19779] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:29 executing program 0: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@random={'trusted.', 'cifs.idmap\x00'}, &(0x7f0000000480)='syz', 0x3, 0x9a4874dca9877cfb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), 0x4) keyctl$chown(0x4, 0x0, 0x0, r2) socket$alg(0x26, 0x5, 0x0) getgroups(0x4, &(0x7f0000000140)=[0x0, r0, 0x0, 0x0]) getgid() r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f0000000840)={'syz0', "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"}, 0x1004) keyctl$negate(0xd, r5, 0x49b, r6) unshare(0x60020000) [ 710.195705][ T2885] usb 5-1: USB disconnect, device number 86 [ 710.402365][T19879] IPVS: ftp: loaded support on port[0] = 21 [ 711.005031][ T2885] usb 5-1: new high-speed USB device number 87 using dummy_hcd 00:07:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={'team0\x00', {0x2, 0x4e23, @remote}}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:30 executing program 0: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x0, 0x1a, 0x0, r0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) clone(0x42108000, 0x0, 0x0, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc1, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) 00:07:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:30 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = accept4$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10, 0x1800) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000140)={0x67, @empty, 0x4e22, 0x2, 'dh\x00', 0x2, 0x1, 0x1a}, 0x2c) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:07:30 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) [ 711.437345][T20013] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 711.440932][T20007] IPVS: ftp: loaded support on port[0] = 21 [ 711.712532][T20020] IPVS: ftp: loaded support on port[0] = 21 00:07:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 711.825157][ T2885] usb 5-1: device descriptor read/64, error -71 00:07:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = dup3(r1, r2, 0x180000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95)=0x4, 0xfffffffffffffef5) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=""/102, &(0x7f0000000180)=[{0x8, 0x7f, 0x59, &(0x7f0000000080)=""/127}, {0xffffffff, 0x22, 0x0, &(0x7f0000000140)=""/34}]}) 00:07:31 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x6, 0x2}) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 711.967509][T20227] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:31 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x8, 0x200001) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000380)={0x3, 0xff, 0x25, 0x0, 0x4c, 0x8}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000004c0)={0x5, 0x6, 0x2}) r4 = syz_usb_connect$hid(0x2be434794b91929e, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc295, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x1a0, 0x9, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xed}}, {{{0x9, 0x5, 0x81, 0x3, 0x1d, 0x52, 0x40, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3d4, 0x1, 0x7f}}]}}}]}}]}}, &(0x7f00000002c0)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0a060003000907403f00"], @ANYBLOB='&\x00\x00\x00', @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="050f260003141004ffd1a3544727b0f0ebc0963e673f3e5bee0a10030202000302730003100b"], @ANYBLOB="0700000004000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="04031a0c"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="04030114"], @ANYBLOB="01000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="04031a0c"], @ANYBLOB="04000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="04030c18"], @ANYBLOB="0400ecff", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="04033004"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="04030920"], @ANYBLOB="1c000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="1c0320b57bd58e844c97980c13658918fa690129293237115f64b9d0"]]) accept$inet(r2, &(0x7f0000000400)={0x2, 0x0, @local}, &(0x7f0000000440)=0x10) syz_usb_disconnect(r4) [ 712.193061][ T2885] usb 5-1: Using ep0 maxpacket: 8 00:07:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000140)=""/102) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1209000000000000000c0500400000000200090224000100000000090400fe0903010000092100000001220600090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000100)={@reserved}) [ 712.313306][ T2885] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 712.321466][ T2885] usb 5-1: config 0 has no interface number 0 [ 712.328273][ T2885] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 712.338143][ T2885] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 712.349213][ T2885] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 712.381299][T20268] QAT: Invalid ioctl [ 712.441708][T20289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 712.573662][ T2885] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 712.582836][ T2885] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 712.591230][ T2885] usb 5-1: Product: syz [ 712.648217][ T2885] usb 5-1: config 0 descriptor?? [ 712.683704][ T12] usb 3-1: new high-speed USB device number 75 using dummy_hcd 00:07:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:31 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101002, 0x0) pipe2(&(0x7f0000000180), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) write$cgroup_type(r2, &(0x7f00000001c0)='threaded\x00', 0xfffffffffffffe01) tkill(0x0, 0x10010000000032) [ 712.774838][T12550] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 712.964522][T20456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 713.044030][T12550] usb 1-1: device descriptor read/64, error 18 [ 713.067019][ T12] usb 3-1: config 1 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 82, changing to 10 [ 713.078506][ T12] usb 3-1: config 1 interface 0 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.092026][ T12] usb 3-1: config 1 interface 0 has no altsetting 0 [ 713.106642][T12643] usb 5-1: USB disconnect, device number 87 00:07:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 713.395267][ T12] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.40 [ 713.404841][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.413223][ T12] usb 3-1: Manufacturer: ᐁ [ 713.417922][ T12] usb 3-1: SerialNumber: ᠌ [ 713.421892][T20660] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 713.434102][T12550] usb 1-1: device descriptor read/64, error 18 00:07:32 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee72546fb3b8f7225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0x400) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) 00:07:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 713.639226][T20668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 713.703459][T12550] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 713.835395][T12643] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 713.983189][T12550] usb 1-1: device descriptor read/64, error 18 [ 713.983470][ T12] usbhid 3-1:1.0: can't add hid device: -71 [ 713.995761][ T12] usbhid: probe of 3-1:1.0 failed with error -71 [ 714.005591][ T12] usb 3-1: USB disconnect, device number 75 [ 714.083284][T12643] usb 5-1: Using ep0 maxpacket: 8 [ 714.213450][T12643] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 714.221655][T12643] usb 5-1: config 0 has no interface number 0 [ 714.228009][T12643] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 714.238189][T12643] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 714.249268][T12643] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 714.343693][T12643] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 714.353024][T12643] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 714.361406][T12643] usb 5-1: Product: syz [ 714.368264][T12643] usb 5-1: config 0 descriptor?? [ 714.383090][T12550] usb 1-1: device descriptor read/64, error 18 [ 714.440316][T20268] QAT: Invalid ioctl [ 714.503390][T12550] usb usb1-port1: attempt power cycle 00:07:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:33 executing program 3: lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x4) r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x800) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8947, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {0x0, @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {0x0, @local}}}}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x44) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x200, 0x70bd26, 0x0, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 00:07:33 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c13410806a685b4c73f8b3a0cee7257225501be2d9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d89f0666ec576e6002ca2d3e432b9ce916a7036c13c8b86316701123c233beca448dd9f82c124c794f7091e2b1023e6"], 0xae) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) write$cgroup_type(r1, &(0x7f0000000080)='\x00\x00\x00!\x00', 0x9) tkill(0x0, 0x10010000000032) [ 714.598549][T12643] usb 5-1: USB disconnect, device number 88 00:07:33 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd000000000000"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000480)={r5, 0x7}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000f34000/0x3000)=nil, &(0x7f0000e2d000/0x3000)=nil, &(0x7f0000e22000/0x3000)=nil, &(0x7f0000e1a000/0x2000)=nil, &(0x7f0000000080)="a34cf2f1248b186212871d221cf62f78ef58758ec82cda2b6c9bd218f1978884cac454a75e894e821289e5043eeb0eb5678436472793934f8129e984424e2dd2f4ae04b57316c931ea169d9bd9cf0b888da503e6fb61b823abb517a05bc3e805cfba6f2db6c1b3c8e24e9f80369a244ccab49731a5db7b1effb6a44518194060e3a17835df2aa8f5a9e6579a7509fd32d76f08890d82c0342beef33734d1afd9036f1dcc9fa6f0c49631901635a8189e4f95e4c73bbde8fb44c70ff6b56ba7f38c8aad60ef816c9c94ab35d2051d0307779858b66c8bbe5ea3", 0xd9, r0}, 0x68) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r2, 0x19, 0x4}, 0x10) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000380)={0x1, 0xfa, 0x800}) clock_nanosleep(0x6, 0x3, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x0) [ 714.713350][ T30] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 715.074575][ T30] usb 3-1: config 1 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 82, changing to 10 [ 715.086289][ T30] usb 3-1: config 1 interface 0 altsetting 31 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 715.099526][ T30] usb 3-1: config 1 interface 0 has no altsetting 0 [ 715.185020][T12643] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 715.213274][T12550] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 715.303422][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.40 [ 715.314004][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.322080][ T30] usb 3-1: Manufacturer: ᐁ [ 715.326922][ T30] usb 3-1: SerialNumber: ᠌ 00:07:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:34 executing program 3: r0 = userfaultfd(0x80000) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x100) fchdir(r2) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x3f, 0x7, 0x8002, 0xfffffffd, 0x4, 0x80, 0xf139, 0x0, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, 0x4) [ 715.433182][T12643] usb 5-1: Using ep0 maxpacket: 8 [ 715.486537][T21080] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 715.513477][T12550] usb 1-1: device descriptor read/64, error 18 00:07:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") socket$inet(0x10, 0x80002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x1) 00:07:34 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) ptrace$setopts(0x4200, r1, 0x9, 0xa0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 715.565819][T12643] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 715.574733][T12643] usb 5-1: config 0 has no interface number 0 [ 715.580943][T12643] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 715.590863][T12643] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 715.602279][T12643] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:07:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0x0, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x6, @mcast1={0x3, 0x4, [0x0, 0x689, 0x28, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) fchdir(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x7ff, 0x8006, 0xa6d, 0x8, 0x404, 0xfffffff7, 0x4, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @loopback}}, [0x7fffffff, 0x2, 0x80000001, 0x4, 0xffff, 0x9, 0x5, 0x7, 0x2957, 0x0, 0x2f, 0xd8c, 0x4, 0x5, 0x2]}, &(0x7f0000000200)=0x100) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000002c0)={0x4, 0x0, {0x0, 0x0, 0x6, 0x0, 0xffffffff}}) [ 715.727269][ T30] usbhid 3-1:1.0: can't add hid device: -71 [ 715.733798][ T30] usbhid: probe of 3-1:1.0 failed with error -71 [ 715.798059][ T30] usb 3-1: USB disconnect, device number 76 00:07:34 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff, 0x2002) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x1, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00kB\xc9\xd2\x04\xe3\x8c\x00^G\xae\xe0\n\xe2\x9c\xbb_>\x9ax3\xe3\xc3D\xa9p\xfd\x13\xb2\xfe\x1b~.\xf5d;\x85\xce\xe6 >\x8b\xa3\\ yg`2n|\x19j\xd3\xc0\xe1\xe6\x93R\x89\xbe\xcb\x8bsSs\xcf\xbbEB\x97\xac>\x89\x80r@\x97f\xa9U\xcfH\'\xdc4Ay\x91q\xae\xa6\x97\x9eMC\xa9\xd4\xcdm\x95\xdf\xe8#\x129*\xc0]\xd6\x92\xa9\x14\xe1\x1a\a\xa7\xf7A~\x9a~\x99\x168G\x81\x12anP\xab\xcf\xef\xff\x86\xba\xd0\xf9\xe8;u\x00'/166) r5 = socket$kcm(0x10, 0x2, 0x10) sendfile(r5, r4, 0x0, 0x10000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', r6}, 0x10) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140)) [ 715.885172][T12643] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 715.894451][T12643] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 715.902999][T12643] usb 5-1: Product: syz 00:07:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x480, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) r2 = socket$inet(0x10, 0x800000000002, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x80, 0x200000) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6b) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x53, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007021dfffd946f6105000a0080001f0000000000080008000f000400ff7e280000001100ffffba16a0aa1c09000000001f0012000000002000eff24d8238cfa47e23f7efbf54", 0x1db}], 0x1}, 0x0) [ 715.990799][T12643] usb 5-1: config 0 descriptor?? 00:07:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x82900, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000006d0900000200000000000000000000000008000004000000000000000000000000000000000000000000000000000000ff7f0000030000292445f20000000000000000000600"/104]) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:35 executing program 3: unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc7d7, 0x400) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x13, 0x1, 0x0, 0x1f, 0x10001, 0x2, 0x20, 0x3, 0x380, 0x40, 0x2d0, 0x1000, 0x7fff, 0x38, 0x1, 0x0, 0x6, 0xffff}, [], "692e32aa13b8c40608afa91774889c69da7d86725607e7ce5e4e552443cfd95f0e876e1adbf4628ebae80d918ff5fc9c8b3976a14f472be575e10a7006d12e224c99dcc58410c59a1b4d7079fb47dd3fd89664ecc8e42355a821fed04596717f50c6c03866bf951c63b33c8ac4149d324f255ba2ce90f854a0b9204b535bd6d974a93da01d068ecadadac4aee932bc74551df34467a880", [[], []]}, 0x2d7) [ 716.127223][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:07:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0x0, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 716.375582][ T30] usb 5-1: USB disconnect, device number 89 [ 717.153117][T12643] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 717.393133][T12643] usb 5-1: Using ep0 maxpacket: 8 [ 717.513218][T12643] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 717.521611][T12643] usb 5-1: config 0 has no interface number 0 [ 717.527995][T12643] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 717.537829][T12643] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 717.548922][T12643] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 717.633344][T12643] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 717.642569][T12643] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 717.650861][T12643] usb 5-1: Product: syz [ 717.656379][T12643] usb 5-1: config 0 descriptor?? 00:07:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) futimesat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r7 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0) fallocate(r7, 0x0, 0x2000421, 0x9) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:07:36 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x43}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:36 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000000e, 0x100) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000180)={0xff, 0x1ff, 0x4}) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000040)=""/140, &(0x7f0000000100)=0x8c) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) kexec_load(0xfff, 0x5, &(0x7f0000001480)=[{&(0x7f00000016c0)="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", 0x1000, 0x40000000000004, 0x6}, {&(0x7f0000001540)="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", 0xfda5, 0x7, 0x2}, {&(0x7f0000001240)="148170732d8a1c101fba0c7d4e54f37cd8f270e6618cf08c15399365ab7c08280ec9013022b2577bb53683e84d4df7cd75f1776425d618ac55c067e5a71321625447fda92034655ffd4e00a29fb49a50d16178708224ab987408d731195cf5657c347385d6859557c57a29681343490515a399f8da141af6d0f2f3a8cb24c583c6a759420c6bc915e172fd28701d6e939e1bfd68f1da22c3fccb6cdaad8d1ef3388b9e7b82f75d9372e3c42edc7c4d1f2a473bc35d07f731788dbd936784441f7f8da0bcf4", 0xc5, 0x9, 0x5}, {&(0x7f0000001340)="7ede0c45b5507ab63d36f55099aa02791876d2ad493aa7a8b8a848b2b097d73feed1d11fa19ef80ca12f2da0b6e114a07d29e47972b1e557725a9201df44c45fd5b3fb77c870f079e7e4fa70a6d2a45bd642ddc1c6cf49c16e1e39c0710a03cbba7b4ad8b2473d1f0bedc53b150973f8c6a0dbe6310c1d1a1a4cc4e585d2118121925cc0c090390c048296726fadf57b7eaf0263", 0x295, 0x3, 0x10002}, {&(0x7f0000001400)="de40a56f37786c3f4befee8eda191069409aae8e31165bed9e212765e0183984b8cf997a8ecf17329618c12b10a5282852cf7195525ad88f651555d565f85073189b89cb3805c96c837ef7c719258794abf2a0bb0a650e55", 0x1a6, 0x4, 0x9}], 0x160000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x4, 0x4) 00:07:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0x0, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:36 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000005c0)=0x4, 0x122) prctl$PR_SVE_GET_VL(0x33, 0x158ad) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xb79, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x2f, 0x1, 0x0, "dcc3be6175bdf7718f56a6e2217c8d244cfe1172b20100009f4000"}) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000001300)={'syz', 0x1}, &(0x7f0000001340)="fe", 0x1, 0xffffffffffffffff) keyctl$chown(0x6, r2, 0x0, 0x0) keyctl$update(0x2, r2, &(0x7f00000000c0)="9c37b1ec581311bf73b304c7fce984d65dc782f58570d44f35eb55b1d1bfbffbc44f79e29123ca4b7a6ad672a9bdaa2a342620201d696b965e0d99f71451fa9d73373bca859183681aeee509133c782c91c0b1ac230a9bf3533f5f83325764714dfe5d470b0cc8734db340abd34ed7cb3f38b9aa0f3b5114aa7b123291a6bfbcca447b6c19051b22de429426411d462da72ffd6ce7430d0097d4cc1d3b8525f67a2e0a305bd3932ba2c2aa1f9925bf9e626bf90e31e6f7b5f25b79a9717a2f465764d2965973bde06efe0e0e814ec4587c85229d2cbeb894cb474dccc21395343f32bf8135a944405f06a1785eec0dcd51d2757b", 0xf4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$TIOCSCTTY(r3, 0x540e, 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x7, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:07:37 executing program 4: syz_usb_connect(0x1, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) [ 717.902466][T12550] usb 5-1: USB disconnect, device number 90 00:07:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, [], [{0x1ff, 0x2, 0x0, 0x7, 0x2, 0xf6}, {0x6, 0x7, 0x4, 0x8, 0x7fff, 0x1}], [[], []]}) syz_emit_ethernet(0x300502, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 00:07:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) munmap(&(0x7f0000011000/0x1000)=nil, 0x1000) 00:07:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:37 executing program 5: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003600)='tunl0\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080)="313131d918d8e0be04c91a9e8150eff679d12d4a0101080ad849c4ec5142a2bf", 0x20, 0x0, &(0x7f00000001c0), 0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000000c0)={0x7c38, "3562f8e4a4fde08e960e418620de7828f26d735f22d4e2f5481425e9b3604255", 0x2, 0x1}) 00:07:37 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x1cb}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x6, 0x8}, 0x8) 00:07:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000000000/0x600000)=nil, 0x600000}) 00:07:37 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81000) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x200000c, 0x20010, r0, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x58}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x2011, r3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95)=0x1, 0xfffffffffffffe07) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) pipe2(&(0x7f0000000140), 0x4000) userfaultfd(0x81800) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000080)=""/82) 00:07:37 executing program 3: r0 = userfaultfd(0x800) unshare(0x8000400) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x280040, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x80, 0x2, 0x4, 0x1000000, {}, {0x2, 0x8, 0x5, 0x1, 0x14, 0x4, "f555e8af"}, 0x8000, 0x2, @offset=0x100, 0x4}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:37 executing program 5: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) close(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x300324b22272539f, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x1}, 0x10) 00:07:38 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x111) close(r0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x1, 0x7fffffff}) 00:07:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x1, 0x3, 0x4, 0x1000, {}, {0x1, 0x0, 0x0, 0x1, 0x1f, 0x0, "1b00f26f"}, 0xb3c0, 0x2, @fd=0xffffffffffffffff, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) poll(&(0x7f0000000080)=[{r2, 0x400}, {r3, 0x2800}, {r4, 0x2100}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:38 executing program 2: ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:38 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) r1 = geteuid() r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r2, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) pipe2(&(0x7f0000000000), 0x2000) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001980)={0x5d8, 0x17, 0xa01, 0x70bd2b, 0x0, {}, [@generic="964579f620bb163a686a0c8b7851f18ff6d6fc7d88f460bffcbeb945c4f0f11da510d7e2fdb4a388332ac49b7ae32672befcf9ebd5bdbbe6473534ad9e6927a605816970364978be806f65b0609dded7ff98be243a4e46001b3c494bf599d2a7cbf43189d33786169fe58460dbe028948049dac769063c912513017c9a86fa0e0e3b256ba05388b72d257bc29ef3064b1b07d805c7826e385f6f676b795e", @nested={0x244, 0x17, [@typed={0x8, 0x3f, @uid=r1}, @generic="dad384c257783273b7b000b7ce99d0c3c8a3a958e4b05911df12458c90214196b96d33cb5814343c7f2cc3141580c054681456aef3424d3c9484294251f26ee7a8d9ee53d2425af47889b09a0506263ef009d3d1c370d62bbb5a88f63ed1e94c1ba3d3059d46bc4ace28274527e7eb95d5fea117a35b3420a6b0bf68f2f667736dc51298c02f10bbe49f795c220de23bdf0e733be7fad00964aa0a564d71f585b3fe76e2fb468bcfef", @typed={0x18, 0x7a, @str='securityvboxnet0\x00'}, @typed={0x8, 0x63, @ipv4=@remote}, @generic="4b19801983601aef80a5fb4e70554e773e4d5df0821aebc571f4bae55e8828d55ab6dc0d7123f877f26b1cf8c1dc8c62e6156c035c616e32bbb210d703d30c69419d17db165c8392fe1598ee605ce62e2c5bb1c1bb3be6a71a009f8dbf3bda40b1f23d6984b2dffc65b17fa483d43a852311e973fbc722a75c1dabf22cb2b906e93fddf84a6dc67c6ce76328b14f4d31b4efd654736ef7ce2e9595ad99a29ddedc94a3aedc6cf9fe832eab903e5d6cd1dd81b954d2b573c027786f67541123f3501d6fdeacf94b00ab7d2a4e4ced66ea86a9878880d32827c76085abe4e36ea0a9230177098730ee1d0b01", @generic="1bc6c691ba77f1ad24dfbd46b64aaad7fe34978a6dface52d1cd0cc0dbf1c0eb576fe8440556d73e476224b4539ab887fc54f8a8be933afee2890362fa1e55a856e3f122abf216bd47ad8e41120f43c14ef315c5368cf8c168e2550649a71c0bfef1491074564b2b911f0310d5068b8ad386869b2601c5d291a84d6d4208", @typed={0x4, 0xa}]}, @generic="e2770d184013ecb72c688cb21b6581e253eea9a5ff9232745a6bf56a52c6521543f213cc95c33d80c586f5488af704ebf3ea3e6ccd1df903352c31", @nested={0x2a4, 0x48, [@generic="a10b96689f593af4048af4479a012f3edc5a2407fe316cbd6f2436379b78877a4506ab81af236824c4ef732666314f87c0c57adc9895f2973915271d8817d66cb1b591a6a81c936e614d93a224efff506ca84166f09a21ae8eafbec432fa9923f581109ec828a062d36055a2", @generic="a84817970643ed0cb9a26287832281d5ea127eca7eaef4007d636142bf96dfa5800a02", @typed={0x4, 0x33}, @typed={0x8, 0x3a, @pid=r2}, @generic="71e925bb958651e724c90135bc8d66d1c804661256122e0d3c6749122d22e6a316675a32a439968f66f7b66f65bab43d91ce1f8bfad4d45c4cc3ff702a44223496f909d638a1713065f81e78f76d63e46060e6c327d02b3e991051e921d72527dd4d7bc6db1a7520d5f75a52e365cc3e5a7cd388dab5efa416285ee118aeb71218a4017490679748b4865a128f91ed73eac0c452c682619897077331b68dedbbc2cd8e6d43", @generic="59a8301a6e1a3a48c32b5ce24d28b5d6b6cb786ec3fff85bc1f5e1395e212186d1a49018fb77510243e92c104045257db9ce3077e66d4c1346ea470998d1cd9b55dcb2a62a87a6ea980a01030975f37535f11d5625", @generic="29d63c51599526d49de25003d5e3ceee80af977b909c9c46dccd519b035763", @generic="61728f50f02aa28d14e148b99396c703f93dd9f4053f3993ffba0c6e", @generic="93b5a7a1b44e0e2ec55227df546fb739f8aa606ad90e6132f5f3d04ea26e012ff4056247169ad6a6f43ec2fd075f54fcf05f8b45f2d186954b323fce55588008847bf933f7f888d4a5a756d682f9fd1e8e30b1e01fc2a2e9597f04a19bfa632b18a6dd4173dbd19fd3933f99a996715485e30b16d32284d5b5161f8306ddcf34d4f23e7be7c84919502faae977d25306e617df904bd5badec42a66f4fdfe45e7984e9368ddeda310b4a850407bec784c6f82cb5094661b21ab14475d4f4448d4d43fc405ec17c3f5d51f92bd4274"]}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 00:07:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 719.573522][T12643] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 719.813359][T12643] usb 5-1: Using ep0 maxpacket: 8 00:07:38 executing program 5: unshare(0x8000400) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x31aa) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = add_key(&(0x7f0000000300)='user\x00d\v\r', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000003c0)="2f88c040775e3263e40f5a14c50fc2a8374c26c689b4740715727b5bdbb35882c72504a056d9e3fb6580f2c1bc8d73ba9a7dc97a0523e22fde408259066374ae09e956d13b669af78a6da27d407a82a285b84e7ffa473b4596252a62b59cf3edc8768321049a142a8a0d0923c9c5a32ba73236", 0xa, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, 0x0, r2) r3 = add_key(&(0x7f0000000300)='user\x00d\v\r', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000003c0)="2f88c040775e3263e40f5a14c50fc2a8374c26c689b4740715727b5bdbb35882c72504a056d9e3fb6580f2c1bc8d73ba9a7dc97a0523e22fde408259066374ae09e956d13b669af78a6da27d407a82a285b84e7ffa473b4596252a62b59cf3edc8768321049a142a8a0d0923c9c5a32ba73236", 0xa, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, 0x0, r3) r4 = add_key(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="2f88c04077", 0x5, r3) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\']:vboxnet1\x00', r4) r5 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='vmnet16\x00', r4) r6 = add_key(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="2f88c04077", 0x5, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\']:vboxnet1\x00', r6) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$negate(0xd, r5, 0x8fe, r7) r8 = add_key(&(0x7f0000000600)='\xe0C|\x995\x06\xfa\x0f\xbb\x86}\xfe\xab;\xe6|\xb15\xc2g\xae\xf2{_6r\x06\x12h\x13Y\xde<\x038!O\xb7\t\xb6\xbd \xd6\xbc%\xce\xa8\xd5\xbd\x88\xca&\xd6\t\xd6>3\xdb\xa5\x96Q\x11\xefi\x87\xcc\xe3KR\x8dG\x18[\x89\x85\x1e\xab\xda\xb3\x18>[\x8bv\xc3\xa86T`\xf8\xd9\xa3\x8c\x9bY\x1c\x88>\x91\xe2m\x9b\x99\xd5\xd8\xd3\xdfN\x14\x97x.\xfa\xa4\xc9N%\xcc\xb1/}\xb2\nQ\x13\xa0\xe1\xd5\x0f\xc0\xfb\x83\xb9\xca\x17\xe6C4\b\x7f\xe1\az', &(0x7f0000000700)={'syz', 0x3}, &(0x7f00000006c0)="feb20b4453294053f008b3e921bd5a326c62cb42ad29ffb8d9580f5f289ee945", 0x6416, r7) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\']:vboxnet1\x00', r8) r9 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000480)=':}#proceth1/bdevtrustedvboxnet1trusted]#\x00', r8) r10 = add_key(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="2f88c04077", 0x5, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\']:vboxnet1\x00', r10) r11 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r10) keyctl$negate(0xd, r9, 0x8fe, r11) r12 = request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)=']*', r9) keyctl$instantiate_iov(0x14, r12, &(0x7f0000000380)=[{&(0x7f0000000340)="6a31651cb136dfbada75879837ab06c8cdcdb240dec53f1802b870c93c2d551dc510ef729883b82986ee549cf79de402c3f8d88de87a905bd691a36f664b", 0x3e}], 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x1a806) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = gettid() openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x8040, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r15) write$P9_RLERRORu(r15, &(0x7f0000000240)={0x12, 0x7, 0x2, {{0x5, 'syz0\x00'}, 0x5ad}}, 0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r14, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) ptrace$getregset(0x4204, r14, 0x6, &(0x7f00000000c0)={&(0x7f0000000140)=""/225, 0xe1}) mq_open(&(0x7f0000000040)='.n\x00x\x00\xfe\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 00:07:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r10, r11, r12]) fchown(r7, r9, r12) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) getpid() ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x20}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@deltfilter={0xe8, 0x28, 0x421, 0x0, 0x0, {0x0, r8, {0xfffc}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0xb8, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x80000001, {0xff, 0x2, 0x6, 0x0, {0x0, 0x7, 0x1, "28c2da1eaba805"}}}}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xe8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@local, 0x71, r8}) fchdir(r2) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x81000800) [ 719.943631][T12643] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 719.951951][T12643] usb 5-1: config 0 has no interface number 0 [ 719.958379][T12643] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 719.968232][T12643] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 00:07:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:39 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/fev\xfd9\xe1\x90!\x0e\x06\xd1\x00', 0x1ff, 0x40) sendto$isdn(r4, &(0x7f0000000240)={0x469, 0x0, "a62ee81de4b9b76ce294b8999fec87fd4e7e95b6a28e8392e0a605091f78f241cd1186b0052a61cd574f5010bba01505b5db008e9841ed9c52f3363fabbfab990299d2f717c69d6a598eca2f421e126fc5f8c9ef0ed4b130a0ec7759fc79fbcc20d82a256613ea5cff107f51ba2bdd1e3f1f3cee97f20f0e08ea772b3f873047a888e580a4539107993c5ce6213e04b8e305cf168495ff4cc4eb62077f3802abe2a166b535488a70d126250deff416ca5110328e3efc3c1cdcf7b0b4112c12"}, 0xc7, 0x800, &(0x7f0000000140)={0x22, 0x8, 0x8, 0x3, 0x6}, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000180)={0x1}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000380)=0x4) [ 719.983022][T12643] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 720.075594][T22627] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 720.094480][T12643] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 720.103864][T12643] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 720.112045][T12643] usb 5-1: Product: syz [ 720.171333][T12643] usb 5-1: config 0 descriptor?? 00:07:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 720.404213][T22738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:39 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4280) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x27, 0x1, 0x4, 0x0, 0xfffffffffffffe06, 0xfffffffc, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x98057d6f9daa7800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10, r2, 0x0) 00:07:39 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r10, r11, r12]) fchown(r7, r9, r12) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) getpid() ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x20}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@deltfilter={0xe8, 0x28, 0x421, 0x0, 0x0, {0x0, r8, {0xfffc}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0xb8, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x80000001, {0xff, 0x2, 0x6, 0x0, {0x0, 0x7, 0x1, "28c2da1eaba805"}}}}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xe8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@local, 0x71, r8}) fchdir(r2) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x81000800) [ 720.595561][T12643] usb 5-1: USB disconnect, device number 91 [ 721.393125][T12643] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 721.643064][T12643] usb 5-1: Using ep0 maxpacket: 8 [ 721.763261][T12643] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 721.771461][T12643] usb 5-1: config 0 has no interface number 0 [ 721.777823][T12643] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 721.787707][T12643] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 721.799342][T12643] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 721.903311][T12643] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 721.912609][T12643] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 721.920951][T12643] usb 5-1: Product: syz [ 721.953994][T12643] usb 5-1: config 0 descriptor?? [ 722.200357][T12643] usb 5-1: USB disconnect, device number 92 00:07:41 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x208000, 0x0) close(r0) 00:07:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:41 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r10, r11, r12]) fchown(r7, r9, r12) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) getpid() ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x20}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@deltfilter={0xe8, 0x28, 0x421, 0x0, 0x0, {0x0, r8, {0xfffc}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0xb8, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x80000001, {0xff, 0x2, 0x6, 0x0, {0x0, 0x7, 0x1, "28c2da1eaba805"}}}}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xe8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@local, 0x71, r8}) fchdir(r2) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x81000800) 00:07:41 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vsock\x00', 0x4000, 0x0) syz_open_dev$sndseq(&(0x7f00000007c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000006c0)=""/245) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4c032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x10b000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000600)=0xedc, &(0x7f0000000640)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7, 0x1cb}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000800)={r7, 0x2, "9353"}, &(0x7f0000000840)=0xa) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r10, 0x813, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x10'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3d0, r10, 0x100, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2ba4bf97}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7ff, @mcast1, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x699}]}]}, @TIPC_NLA_BEARER={0x108, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @remote, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6548}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb975}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc88}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x39b}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x1f}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x200}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x46}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x1}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x40}, 0x800) getdents64(0xffffffffffffff9c, &(0x7f0000000900)=""/103, 0x67) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000540)={[{0x4, 0x20, 0x2, 0x8, 0x0, 0x6, 0x0, 0x40, 0x80, 0x0, 0x77, 0x9, 0x9}, {0x8, 0xfffb, 0x0, 0x1, 0x8, 0x0, 0x6, 0x40, 0x0, 0x2, 0x6, 0x1f, 0x6}, {0x5, 0x1, 0x1f, 0x8, 0x7f, 0x8, 0x0, 0x1, 0x8, 0x6, 0x4, 0x8, 0x8}], 0x81}) r11 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r11) setsockopt$packet_int(r11, 0x107, 0x12, &(0x7f0000000040)=0x80, 0x4) 00:07:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) bind(r0, &(0x7f0000000040)=@nfc={0x27, 0x1, 0x1, 0x4}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) getsockopt$inet6_tcp_buf(r1, 0x6, 0x2e, &(0x7f0000000140)=""/153, &(0x7f00000000c0)=0x99) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="850000000500000035700000000003fb9500000000000000"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) [ 722.447118][T22864] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x4d}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 00:07:41 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xfffffff7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000600)={r2, 0x48, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x6, @remote, 0x1}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x800, @loopback, 0x3}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x39}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) 00:07:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) r1 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xa0000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x3, 0x0, 0x1017, 0x4f, 0xffff, 0x6, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 722.726547][T22955] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:07:41 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r10, r11, r12]) fchown(r7, r9, r12) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) getpid() ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x20}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@deltfilter={0xe8, 0x28, 0x421, 0x0, 0x0, {0x0, r8, {0xfffc}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0xb8, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x80000001, {0xff, 0x2, 0x6, 0x0, {0x0, 0x7, 0x1, "28c2da1eaba805"}}}}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xe8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@local, 0x71, r8}) fchdir(r2) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x81000800) 00:07:42 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) prctl$PR_GET_KEEPCAPS(0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @mcast2, 0x8f07}, @in={0x2, 0x4e21, @rand_addr=0xbe32}], 0x2c) [ 723.035763][ T30] usb 5-1: new high-speed USB device number 93 using dummy_hcd 00:07:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:42 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000072a8c94e0000450c63b740466be099e85cff5432de56cbc0629e120000"], 0x0) 00:07:42 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x200) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 723.291708][T23195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 723.301753][ T30] usb 5-1: Using ep0 maxpacket: 8 00:07:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0) r6 = add_key(&(0x7f0000000300)='user\x00d\v\r', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f00000003c0)="2f88c040775e3263e40f5a14c50fc2a8374c26c689b4740715727b5bdbb35882c72504a056d9e3fb6580f2c1bc8d73ba9a7dc97a0523e22fde408259066374ae09e956d13b669af78a6da27d407a82a285b84e7ffa473b4596252a62b59cf3edc8768321049a142a8a0d0923c9c5a32ba73236", 0xa, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, 0x0, r6) r7 = add_key(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="2f88c04077", 0x5, r6) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\']:vboxnet1\x00', r7) r8 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='vmnet16\x00', r7) r9 = add_key(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="2f88c04077", 0x5, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\']:vboxnet1\x00', r9) r10 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r9) keyctl$negate(0xd, r8, 0x8fe, r10) r11 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r10) add_key(0x0, 0x0, &(0x7f0000000480)="69005295c0fff1038111d58213f8122e2d77641f4bdd784de414321aae5e70d6bba6c83970eae42b0e3ee9cbc71a154a230945ce06159a05eece8cb39696dd7efe2a2b3bff28db86116b6fb0dd9cff7b89ff6312606f8d8df034820c3995226a55fd31f1c5a7cd540abcc810dd8daafb6746e8458686cd0e5f72a014247c0ab6f409f3dc4f31219388356b33c05640fb7eeb8ba1d72ccbddcc87bdb49f26e10c4f63a7e32f93ef2c5c31a0b0b194cf4d0f94fc74b23436f30e105410d4138b63dd61c36b5d7aa1e039e35de6f0f49a70516517b0c50ef1677f06798e76cb15f45241f78a69f7ddbe8352b4b2831c52d1e4d7ec67b9ae30f1976894dee71dfe14af8de10bc9013ee68ad68d35a794763771e06d49522fca6fc3deeaea9145fe085744db6ef20b1fe34f3bd67f2b3c1e5354258beef1b958f1ac906075faae5fa1c77efa28796eddb883fe9945d1048da0b5bfdd1004454cd47d9996eeb7143cf464b503636f324e6c9089a6d980b0e40118dfdef30a548545e9b766a852cde78a11d107b5d1ac507f22c7a7c709fb3bd3d0d6f5e70a7a9d20e8658e960fa7faf11d711a1b635c387d77b9e3318c137ef2c330f01b4dce42d267ab0d0b6ef14778785cd1f1f25a8a7c8ee03d6035209feb9fabe0f88e29dff9699e9f5d37c0aeba8321888dfd7861e085ac773af3766d75bf5ea78390b4a0ad68f777ff16d6f00e8f1c00a1ebf1400fb37abe1ea7aeea917b327890c824e19eabd44d3040c55d81875285e0b9cf60b801fb979db143d93bbbc55ec42b2fd5c7fda7089e90270ec45a76485e8f1f219cef4d8a77d0a740439eb4a005cb8d047d1ffc3b04dc604ef6a008559e0ff648cee5521baae6ca426a6bc8d44e40e7803380c3a45438f0869fa8e0184fdeee809483d2822ec367180a93579f0dcb6bb23f4daf7a3e5de6793afefb12f510e501af8c57166b330e2284f080837a8bf0e928b2f9c61cc7ae7ed4eff522b6c31a224c8e30bceb9918ecafbe61a25778bf69e9ee2ff461dd3fd694f59287302ab0bd682fd4d260b477bb2da50ec260b9c9562d6742611760d483bcd86642d7177fe1fcde09a82994e52400a38b91b3d522e44e1f078a923232112ff23e9ed60a6a051a8109ba3e25db36aee79f024aeeaa36dfbf7a8a0e68c7382b7db350c7bc08ee591ab1598bbbe3f8f29b47de010dbf10b805832b7295cfbcf0d180c069060a748f54ad32e3985398c0d70e52a8cdda650cadcf3dadefe5d39aae4637c75a60cbcf6e5743cf915644dbc433ce0a0836e02d25e3477ddd2209e0888d7f197ca924353de7f54c42eb872ff9dc0b163a5db97e482346ce7f70038639f3e3f3adda5d7ab258d346cdabb096b3cde92c0a485f0b04f5d90eb881a3fe81c5177304c83f8cb196f7fd5d1813a76aea7a91aac7d0a5cdbd6be107ae68d99ec02a26bdf247cde74b74ee2adfc747edc8828fa55a5149a7ec15161adb5d9d5c747d830e5f9e732f5c68c0b3d11eb172d3372cffea646eb92167f1fed495bad0702d00c3508bbc8c37b57d84d63cf78a2437e07c5db5575192b16f62acf1870f9ce8c9f24dcec433c3a2d3207f6038224a10898ee8a81f64a1dd73a8f5d41f135cef0b772d926608446deef1c8208f5f0c0b62f62f27c87677f5d3f69f1b9e510c915d292ad3cf7aaf5b17251d66a79428b34ba78127433278ebd1ad91e128374e7a1b0d832b9fd164cd2d98c2da6e4f0d4224db2e0dde3d56ac0b37534b5876cc1cc71b8bdde2dd87239c75d18b365520d3e2deb7078d3b2bd555e4d65211a27ddf8b77ac775dfde4299ff02a325959223bb517a71af9c7ad673c9da8b4b63c107f45aac7a7e07a63d7ae2f078b1bfefeccf54377498da223be45ff8a651343fa0361dcbd5293428b821b69ba013bc993d0e7ca197df2feed4e16520792145eccfc4f605e599360f9bb455586ad9413a04fbdebd79ceeccbe56d40632475376c1201bf394022a291fe0034edfa4bbbf16a6deb6ae0c51e19353d6b529f49d42b0d4c86ae5894279d002b1b7ef92b6e52f0e9f1d39e2d852a621f0e7e20d372755929a561b117bf1645c84244552b83789f648f5728fd96e0e11bc126b5c88b586d49c85a6fd7c3580263e627b2e0f8c45d625fefcb802c6250400bf7eb114c4d539508b02ec4574307818406b054cedae9419ceb8237b8044b2a90ff3b16b4d3d15e8907421cd519af335e74d3f6783253c898e0ad3acd653719030d2060ce11572d0be8203fa249a211b5e1231d0fdbe8bae29ad632051ae6d89c9d1939ffbf3ba8ed911e7643d73dc78f6194e80dde05ca1a9b2a70180760fd621b3230a0890235e1d894acb4b347e09a624e3ba26aeed20055702bc4c9011ded7e399752bec166a2e416a99889710d7acf2217ec27a9050251f3cdad42b40655ea877a153cdf901ececfe169cf579426f471a308138de2182ff3a751dcfd7047af965651526956e7587d9981edbfd028532fabc95c1e9cbccad6f74f32b541ddd7d1a801c1ea3004fd2cc33b2213d2a1e2526463d5721e1d1b3461ebe600225a922943d9a68c9a19c14d0fc234d714b6ce96201798f62f0179d535e23fea52a8832a6b534a0ed58156bedb133f9f0e761bb085b2db5f85088c60f3f26f9ef05f2b124d34edd4a025aa00a60047a4d5db4fc2becc136a9d135f40aae12a5af7921aacf8b905c2507695192226557243eddacce2208d48666d56716edef097a7e930c3827b42a10cadd57eb4548ceab7a99d81e6209fcd4e183ac346987d7ad63df3e06804bbec9f1ae7fb39dd38f7095eb0b3c8a41a38be4d888dacad4f2c98075b79a91f1a253d2b585296395fdd225e41eb4247bbc054c1c82d9bb2b71b1b32c79d03d6c698a53b055efe945f6dd0b0c703400af2abdc03932ab1fd9d411240c2b5d4e9cd0f177fce32e38831ae4276afcdbcbc791b0be142ced3e0b350a83b7c87117884e2be797151988df493c07a6b74232fb0bc6eb55cd6eb3d637fab06513d0cc3167058453740b836f9e112f71f8fd1281e2f7323385608aa4b7245c516567782ad71f394657c15c4806da97c6601253b0cde6b4113dfd6875d7e75512e3b9b0377aa545e8d9623a881024d890c5dd36e63fd83a7740773df4b558744c2c781a55c38aadf26b1171dc634fa37c2ebee460a86073a356803313e26591480f15451b6501a96e235425ff52fb70a45971c13fdec2582ab84176f4a6dca9087d94e0119226338e871b62523c485ea54ef792b7fdb9af73ed2fc314855b3bb3841187cea82ba9ac374847145316816c265cde867af1747636594c075a1f5e20cf61f0f15cff2646edc50b1a09388fb6b28506d9711af794068a0db333661984c1375e509e0b16be210020d4136119d68b5a0e245248d7379993c9e372c4bb510535977b4b849446048284d816029045b367e1078cc736d799b6e45aee3063ca6c1646f49d25fb1ffeee306266be4910193fe7662fcb2d0bf818883477161789b5992b13304233da81a17cb741130c7177193a51ff95c0a2fd1923178cdc714e4cb94f4186afc9c43578e58b3821433e17311e1aa1cbd7118511432f79d08f7ddc8025eb4fa9a0b016fe8a449f20758227df9ddce574aae0c2f0a239ff9f289dacce425181ee682f278a0253841b4747f00f532b5a8d043287021d39ded38c3806b74d80da4da7f9a09aee4ad97f037dd4f4ddacf7a91ca81fa8f07cccbc640886eff27063c5ca4c83efcf03903e7389b8c1e7890d5f45486940daf4e5376e4533daf6de16c944ba66d116e4c8992eb82cd0fc29230998c033428db9e299ba59b7cbef3033735e4cf122952e96f6d71a0c9f1252bb897ac98db1c5685d16235ce1e5704e6bb31ea2167b882746a6870f87c81b0e0a6376b83b0c4633db9d6572d9f043117038db1763596229f123a3d260a0691c273ac006c29eeebd728d3227f8c86999c0e6b4b073c09953545261545a136765c48a20e12853f2409d146da2fa42356167936715f134cd0689a31c565c902feab1f492beaf5a9ee5b91663565c362ab82c03fc2886ac0170354e78e5aac8f62c433377603b168e942783888011b50570d22a37a4c482fb2cc52a62b30019a7ef291338b87c4703545eccf2f79b408f90b5b60b7d91b0542d0b67a494a1126071d08a407b14b2d9710326b9fe191cc25929515086853f5d96f2714f6cde", 0xbae, r11) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x0, "8005d0586d9642f00853a5669456b50e405cf4652716219a3e8514bb5077f28f"}) [ 723.423538][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 723.431737][ T30] usb 5-1: config 0 has no interface number 0 [ 723.438161][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 723.448038][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 723.459419][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:07:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 723.586413][T12643] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 723.611448][T23218] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 723.643521][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 723.652782][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 723.661422][ T30] usb 5-1: Product: syz 00:07:42 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95)=0x40, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) write(r3, &(0x7f0000000140)="b2d488e202744b8894444add991b20e7c9babe1169f9dbeb6353dfbeeb37d1094272f0a8441f47c156f33610057a12716fc23189cc60398948af0a17ec3b3b612a467319f5fcc5dcdef33038eef0ca4787cfd1c64fae920f97b239714c352138f16a9fa877d3830e6ad36e83257812ca750ef02f868f8b949f305a33a0347e813299890c44d84d325cd6cc15947b5d59b2c23538faefbc2b74c5ab2ca21639c6c8d216bb0cc3b3241b7f9193e398a258e99a9604bb50abb83154e8145809faed5eb0b98df9083c6cb67b03f578f179b6a27fcff2d02d66e723ae56da47c65d79318a42bb6752c46354072b70db8d48812efe63f7f878345a210c139f461f2caaba974c5dbd0576cf107aa3b825b5486ca49e04efe8d80c6306446d39c26135d2b2b352173250e53acffb5c823df2863e769766ab84041ed318a629eaff8f65c98d95e00fe4f1b866ccb868b15d4c65ce95265f7e291477700eff2831109c02328f0b716447f59c947b1038b4d7f0d66b76eca7d0fbde0de3288ecafc72ab1bfa2ce106475b68034f8d626c7d254fed277f54a886e51cfdf07061266c5627b6a40b018f98419be29a9d8421d63386a06aafe38daf40cc2dc57be84f880e50dced61c4b7f5b7839b813ab168de69ae0fd21ee234ec344a1c5a5fa135f25f8ecd7889411a32e69d12a0849ae68694f74fc3b72a4aa5ba1684e36e17205312bbf9dc5e92200dd1ef8c8d599a0c9927356fd1031fdbf08cfb07e11be1e0d19958ff16d36e5f3866e904584b03e4bb8a13aafb7c1b9c705051d15d0c187eaa649189341a0c9b62b30f9827ce00334e67ae4c01fca4a4b75e8080d3ccb2f614ec98f818a21d0862f2759c0cb559dcc24c3083cbed4d1ddb5d22e0ffe75bce23eba8fa19de6694ecef439f64d65f9ed076851d8bbd5e6ad3a795f14cfe977a59b861b0186df26e9e82aaf9dce4a199145c216f3d74ddc7df46d4aa794cd6f56d0b54bf92d44f8b0482c4da9798ea6c7500211a51fb52f43e8442183ab294e50812e830416ca7ef78c5827c79302cb6ca6ebde77f3bbe7a1421a3c9866630c7889ccebe1896cde556696e3a9f62ffaa04ebb514e277f497db5e7ca8bee141af65a32122cd81bcacd5f9c868bd5c1ed658c2130ea295a2602f66ccd02707a2dd2b82e88cdc85bed704c214b4256537885938ac12b8327e0493dae76ab933e19f796d93580799480162bcd450904d706b1cca34049cb6a70df13bfed9a25022939f248202357f40654f2c425db0fa44dd0b1671e771b0441118f10e16b70b004a9e5fdc4faa209d6d4ec55ffbbe056648d7a61e2f453fcd7098b3fa1b07db0dd2aab05f53fe48e6420ed4e268268a858bcd5ee2c0357f7c2086e290a7032563e7df211c1c463202994fa68892a59d1f120a570010af96152dd495c272eddb56990df12461f380cb57bbaf033d660b8706fa0f3d386dfb237c26229633b688b287b954c7a275a72eea4e5ffafee270491f1814b3f441b0b5a9e11f1522c85f911136e68f8c97e3afd447cd796d54c2ed287223d2ac4306cf64911a47f7233d868b9b143189714b528bd5836774c353407ac6afdc645c2675398e5ec3b56b722e420475ca4bd70b16e074da405724a635de1db2ce7d7e511bb0b5a1fda069c978ee429da0a5027d4ca7c4288935e4b73e4eb14cacde4b4ec555cccf4633c871fc7b356f9e36d2634830630d5007d061b8d01eda342a404c66c29f31b5e14f8158a9767659fb9e9c146810c981f57e62c4335e643ea7d9a49cd641e498d5903d1778ca6c07197ea204b4b07f8e9e578f756bf62e6161d6d048aa9e90597d8a3d01f4124fcfcf0cbd8727ffeafd2ecca0f52788da6f189ec89b6c6f917735b1775552320144f461e89f2e6e639c8f53f5155c7ff3cd0fc7565dc4f6ea9700d4858976c540e1eb4211ec26cd0055e65a23e78a765028130066e22eea522b26560402a61ee8d2aae519d34a3256c781118a49860418836ce07a6b464640ab685ec6836061063faa023d282073ca552305a151d226efb059d88082e082ac934269c557b8bc44a5b47894502812a01fd78139dc194569743bed7a71396c62e6f358f3f457f4a0dd6aa980b2b6eee28e65dc935f64bfe85dcaace2ad2c591ee039017eac62933ab3e9c87712eb9ca1e057daf685ef1ee89c4d584b139c67ab9a967965611f1b558160aabc12577f81f880070fc8ce53f50f044f88dd0d09909200543087d448a4f6b64ba162ea13f7231cd2d08960a93211f38b771673c431d68a6aaa8e234ea454c18f92ae1974fa27fe0b5b8c838603794fe6658e124864330c6f0caaa0df3ef39eba2e50308de4510e969f241bbad1dd135b9bc2b46a48798fe1a39c7f6d94a41b50904fb214c0ae002a4ceff58433b282b1d2a1ba3abac279608b2cede6577821a42b0c5863e9205695aa401e6898a801daedcdde86d6568b49af7be18e0fb54c46035ae514acb90b998dd2110ac31e5cbbc5316857eb82f82e5582a101608d5f48f88a7255e254c5f13fcd5eaf3f18fe378eccdebbe2d4a9c8d772ba5fbd1e6eb1a17c77aab7b26bf7323580fa4f7fc2ac117eb2883562480160b83f44acf1ada063f1eed78b8611631863e539874bcf5ae778a3cfacccb359ea4954ccb14b8f968f2bc7f252cf2e19df158451af062a91d73d4caace78b23b0d509fd255d3850c6d8c8dfd4592ffad6434337a4e569166569bbfc204190285ebf1561dfec63efcfac9301807d7cd84f7ff1c733ba46b72ad55459dabc08285b3c2b536651ff4939df86eba90a11c9c4716a33d0f6b79878659f6ab8f10765b98505f063a438e1aad3800354d586816933680f9127c95c7b149a126bf1418d21cee3317496e2099e4e5a432ad0e889a8027a891b2b966dfcad80c1ee825be8b48f889a254f3909288b6df7fdbba55e2a4f0b724d4f80ce922dbe8d990aa0a5eeb892921d7b929435ec76c95179a3fdc60c57827a2769d904e904b0cb8c4878f107bf720ec7014466dd31444b003a7aadfda683c68ffa4dba92c93728de949937bff30d9d30fb1e7a42ebccda34e80c204dba494e15a220eea7b961e8f46e62f34397dd77104a133c840aeb7e521ecd30f4b9b892ef251b5126e8d61ef924177121a4dc0c8fc33fe21c7c940c5a9ccde113748b8afb4055921b040d3ee9c102847e7f5e130ad26a8d7b7e7dbfc9ea6167fb40a30e34e9e2adc62a249afdd390cb212a3159e2ecc2616645e61d5c03f65c2127267c9cc1ff23a9e205ef4266e13c76d0e000ad35d92eb223cf63f3fbb68cc6660214b55ce7e60663db5d66604055d867ec7d9203e0f4308ef95939c449831fd94ec3f3475ef74c71e571810c9945f02c6d9b501be961ac1e52e617eb6c75c6e2b3739eba8a2134c8ff71959cb7e1c9a39255bd7b1455720d74a24f8e17bc8fbf9805995bbc26557b7f230ec4fe17a432050858ffb8500d85322a4a1aaff931a720423405f89ab6c105a84987bd71c63184cd5be88e1e0d961e0311dab218c976bfdc7f38e0b3b6d7197b877e5d92eb1099e8b35c173e6afad8665ee49745d7a624438c2147c439779ebf4ff239208d6d209f6214a99f40d7ba9207c62300bce85dfb90aa07a7b5c0109225745f3277749d787be5fbceba959b0ff11c2b6296aab1e6b835ae4ebe2cecc06b69a54b82b6d9b65da707cb6619c8a0e3e7c973bdd7f91436fe7f059e52eafa9ac6e61866515dd5a5fcd59d518f9cb66a0aa4abc079478921be1896f27e0ce531f09ffbfe5117f2bca7e3058f3cb6ab26e3b706fd4bf0d1d67c0d32040fa68f52f57cd05f21cd13a82d81a89d2edce8d70c8b0a6f36bc2c723204a154be50ce72b30ba7a8b3a5f753787cd5dc0b0c05d2b435ab1849f804c799a320e734ceeca7bb12720bd713e0c78da323af83b15e63939eab5d245ebf8ae44abef7dce3dcd4b1e7eadda52d349d9f5ddbdf14e5e0de1d233dea35f01fb48d75d07826f6a3b62f3754a598f4edbec08c241459cc7b3ee36572a7030f88c8c18816c2c7c474c103a099d1f4bdbcc922b329bd2bdca6aaccd1908c35b50e903044ddf58aa4b68474b2faadff21ebf1096fe55b747036fe9113073f8cddfaa795208f7f577eef2d5b471b8cb089e4cf0adcdacab1d1f0e0e87d56520075dd5fa48df9795a8a1d0b67499f7ed9c992e5c7703dc10d58d0439c888ca99de5b06af724de1a82905df560527b36dcc20c485b93b0bfb79468a9df38d29a5c2744a1dda9b19ecb8c91929aa5ff5ebaafb57fdbff253e5be71e7abf679221a3dcad3c83a3f8af1ea6c01361ab42ed623cb7bf3334484439f72de774bb2981fde7514a863a149cd4cd2f788b9ef96f6f034bf8429b8376862a187e7847f0cb557564169f8432fb3dc553e99c86508340ebb2e4d00ff3119b2e235958497840063839ee00e6fca14beb2ca8d3fd5efdbcc5272349cf85b5a02cbc7ca7757fd2fbeab28608a115a57c1695bb5dc39a8bdd0549e09363eb251a67700b58bdddc63e97422a7d599af7a7723d6a8624001d3bb6c384576fe403320b6e04d4daf76777fdf08164dd0e90ac07f3a739b4eeee07739bbd3084765db7490a589a1c12f47e55f3ba50f2962ebcacd66939cb2733b25ee3ec94e328ee4566a38559a1933b4f9c86218d1e0324d4db4a03e78fc6b3fec784dace3c41277c077dcc9e6c0a79999eaee9b3d4890694f869e0f32c53dd37e54ad9b75c161fa8eaafe3ae26a7436773cae59b7372b83572c1c390ea53c7df463cf1b9c323b6bc8c28f78837d384e20076a72f8ef7cff57802e53143171d6d3ac5d93bdcb601872cc949dc11d784fdcc89a4992a47bcac43e2eba3fc2b08d7e99983022cb56f71e7558910c07a9d8b65ce1b68ba26a2f98f2873abe28fd273fb5064ed9706c6c45e2d0a3c26b035d23a5703c935557eb7e88fe2b7cf78e69953ef09f14a288300e30684ba30e47bcc021b20ddc003dddca666559fb5a8d38e53250e972bbd47f0bd8dbed6902d37b99fae886a8e5c837862720acee9107cf4d2724d91cadf007db51ee68c743964a9af227bff9c56c3c7ca0cee1f1992d74b95d70a8d649440ab0d924919c5c6b0047c97187378ead19c3a7d4a99ad8551e31cf396d4c0a1deaf43ed813b231bf7a47c82c0a5b272426d8c9f9a92cb1535b199bfb9db77d321c7235f77906ac51504be755c1350699adeb6a544d8c571368849c4dc402c90ddd6c4c26b23a4b7807e4bf039174527f334d5c0e20f6153bb894e4a9e1b5bdbc1d11ce880cd1422960abdd9615bda3842b1e0f700f78b146d0af96d90c35eeaf5ab6465276827a274c15bd9f7ab06ef9499a6ae545854bcc18105e2be94b8f51e355ca1bf037d8be77ac08d9258322354ca3e1803d2e6ad58ee8d1405e85e819e9ed67756d5c650986af563d71aa05b8b08716c489b7b6230d8356c630075fa0e0cc222a70a321e113d3f5037fd138340ed7166dc044109790ee8592bfbac5730483fcfd6ec2ce8c4ee794e70b4e7e586a9f957d500f1e70acf295740fce6d9ee59eb493df69d44bec46073739e647e682a21144293f4380d0a4f983ca8296002757eaa537b7018d8aa532f604fc2e4d640a8885355777c96c6bb3daa0c4b0be47f6dcd4929d2f635bc0fe57a2d132bd139d40229c3e4218fc0d097154e11ebcf7f7b2ac312cf10122984ae06bb1b0b97499e40191383308a5e6aeeec146076617bff2fcf24c2e248274f214b78bb6beead5dd04da1934fffe2cb356b395ef", 0x1000) times(&(0x7f0000000000)) [ 723.694072][ T30] usb 5-1: config 0 descriptor?? [ 723.865025][T12643] usb 1-1: device descriptor read/64, error 18 [ 724.098959][ T30] usb 5-1: USB disconnect, device number 93 [ 724.254597][T12643] usb 1-1: device descriptor read/64, error 18 [ 724.523390][T12643] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 724.793064][T12643] usb 1-1: device descriptor read/64, error 18 [ 724.873073][T12828] usb 5-1: new high-speed USB device number 94 using dummy_hcd 00:07:44 executing program 4: syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 00:07:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x16, 0x10}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) 00:07:44 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/aOdio#\x00', 0x403, 0x20002) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x6, {0x4}}, 0x18) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000080)=0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '/dev/aOdio#\x00'}, &(0x7f0000000180)=""/170, 0xaa) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:44 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30) ptrace$setsig(0x4203, r2, 0x1, &(0x7f0000000100)={0xc, 0xfffffffa, 0x5ca3c730}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 725.184868][T12643] usb 1-1: device descriptor read/64, error 18 00:07:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:44 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x9}, @sack_perm, @sack_perm], 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 725.303828][T12643] usb usb1-port1: attempt power cycle [ 726.023079][T12643] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 726.303222][T12643] usb 1-1: device descriptor read/64, error 18 00:07:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x0) 00:07:45 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x411000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="c58fc101", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf2506000000080004003c0000000c000100080002008700000040000100080004004e20000008000500030000000800090069000000080004004e200000080004004e2300000c0007001000000010f024a6080001005a1f0000080005000000000038000300080004000500000008000300010000000800040000ff000008000500ac1414aa140002000000000000000000000000000000000008000400020000002400020008000d0000000000080005000080000008000600030000000800060004000000"], 0xd4}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:45 executing program 2: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7e8cf412, 0x400) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0x2, 0xff}}, 0x28) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x10100) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x400, 0x401, 0x7, 0x5, 0x5}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:45 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd000000000000"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x240ae0, 0x0) close(r0) [ 726.461407][T23560] team0: Device gre1 is of different type 00:07:45 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='!\x0e\xfe?\xfb\xff\xff\xff\xabv\x136\x16\xdeP\xd1\xf2K\x00\x05j\xf6ZW,V\xcc}9\xda\x82\xbf\xc0\x8bzT\xca\xa6$E_nB\x94\xbf\xb3\xef\f\xcd\xc6bXP\x91.\xf7X*\xbd\xab~J\xdb\xb0\x89\xa0\x89\xf1\xf0\x00D\xeb\xa0\xb3d\xfd\x1cC\x91\xfc\x1e\xfb\x83k\xad\x14>\xdb\x7f D\x1e\x94\x9c\x89\x80q\xf3\xb9\xe7X7\x13)]t\x97\x9b&\x96|D\xad\xdf\x13\xb0 \xf5\xdcw\xb7\x979@S_/\xff\f\x1d((\xc5\xf7\x8d\xa0\x06D\xc3w\x9f\xcc\x15\xb7B\x98\xbb:\xda!L\x92>\xdb\xbc\xa7\x1a\xa1\x18\xa1yJ\xb0W') fchdir(r1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95)=0x3, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:45 executing program 3: r0 = userfaultfd(0x800) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 726.785265][T12828] usb 5-1: new high-speed USB device number 95 using dummy_hcd 00:07:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) vmsplice(r2, &(0x7f0000001480)=[{&(0x7f0000000180)="f9b256d9b7a19147c63e5be8558d7ec44a61a3f3a87a950b9c1a3c1ded3a083a2b79747f824a6155bc98975f", 0x2c}, {&(0x7f0000001380)="8174d7c58a073a80fbdcf281787fe61ab736e757033e73ef741dbeb80b72284040f90f51a436352de47b888f0a0a2b40206612ec896cf61eb7eea41240d0284e864e873d80df6b6542a05bfe4b1d8502a7736026f14e86d1b8bc84eb4985d249f3f322f2c57f71c96a904699904a871749cf5cfdf2c355088a2a42ed6efda5aab6e0ccb882ebe3fdf55eed98f64e06e15c8db714b3bd4ed916eb46eb1a06b219fc72f187d81c7874b5d94ab421ffb6ab161d2b48938e8a04fe4a545b7ab742221c6228cf64909f4922c6f24f4a1027bd279f34676f8e8c2a94fc7644b5ee3a66a858fbfa8842fcd9dfa1201006d4ca4858bfadad88", 0xf5}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000004e0007041dfffd946f6105000a0a0000fe02000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(r4, &(0x7f0000000080)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000300)="7edf1ca4f03b504c30d1f52d1964839878e5c101eb0d1a66942a369f7edc97c51869df9985a906d75f94771f850ce74c1e70c957bc240578ab62e418082dfacc89771b2e30bbcf87a81517c7fb52db7bbef8994f60baa852d353db", &(0x7f0000000380)="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"}}) write$P9_RGETATTR(r4, &(0x7f0000000240)={0xa0, 0x19, 0x1, {0x100, {0x84, 0x0, 0x6}, 0x1, 0xffffffffffffffff, r5, 0x200, 0x2, 0x629, 0x1, 0x6b3c, 0x8, 0x9, 0x2, 0x10001, 0x101, 0xcda0, 0x100, 0x2, 0xffffffffffff0000, 0xa8aa}}, 0xa0) [ 727.063726][T12828] usb 5-1: Using ep0 maxpacket: 8 00:07:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', r1}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x95031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r3, r4, 0x0, 0x3b, &(0x7f0000000000)="9286c3f63c8e6d700066d94a869065d70ea77b267ded67371c78308cb1f0056329fe91e17886e73e0dec62c83428dc7385cfe4910e35795fa8ce6f", 0x1, 0x20, 0xbd, 0x6, 0x101, 0x1, 0xfff, 'syz1\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 727.175485][T23882] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 727.185075][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 727.204872][T12828] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 727.213171][T12828] usb 5-1: config 0 has no interface number 0 [ 727.219369][T12828] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 727.229581][T12828] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 727.240652][T12828] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:07:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 727.282521][T23887] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 727.292333][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:07:46 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x100) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000140), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:46 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) socketpair(0x4, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r7, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r8, 0x1ff}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000bc1b91c24669056fe80ab422d06aad6f671a37cca871d2d1c7da3359d2a495c1a94b878945a8c70bd7887010b2b1ee288fa77e90efe0386a8c3affcbb139b62535397a2d1c428683b197ac0d135ee99fad9a6a7d7c9296e7e2af2b321d22bc00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r10 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x40, 0x80) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000140)=""/247, &(0x7f0000000240)=0xf7) r11 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r11) ioctl$VIDIOC_ENUM_FRAMESIZES(r11, 0xc02c564a, &(0x7f0000000380)={0x0, 0x31424752, 0x3, @stepwise={0x4, 0x7f, 0x4, 0x1, 0xffffffff}}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r9, 0x1cb}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r9, 0x4) [ 727.463606][T12828] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 727.472846][T12828] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 727.481332][T12828] usb 5-1: Product: syz 00:07:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 727.558944][T12828] usb 5-1: config 0 descriptor?? 00:07:46 executing program 0: unshare(0x44000000) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1ff, 0x940) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r5, r6, r7]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x5, 0xee01}], {0x4, 0x2}, [{0x8, 0x4, r1}, {0x8, 0x2, r2}, {0x8, 0x2, r3}, {0x8, 0x4, r4}, {0x8, 0x4, r7}, {0x8, 0x1, r8}], {0x10, 0x25b32d4fe349b90d}, {0x20, 0x4}}, 0x5c, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e27, @multicast2}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x2}], 0x2c) 00:07:46 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x9) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 727.718535][T23967] IPVS: ftp: loaded support on port[0] = 21 [ 727.807816][ T30] usb 5-1: USB disconnect, device number 95 [ 728.076833][T23967] IPVS: ftp: loaded support on port[0] = 21 [ 728.585029][ T30] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 728.833142][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 728.953213][ T30] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 728.961455][ T30] usb 5-1: config 0 has no interface number 0 [ 728.968068][ T30] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 728.977937][ T30] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 728.989112][ T30] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 729.125371][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 729.134771][ T30] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 729.143165][ T30] usb 5-1: Product: syz [ 729.179408][ T30] usb 5-1: config 0 descriptor?? [ 729.427137][T12828] usb 5-1: USB disconnect, device number 96 00:07:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0x3ff}}, 0x8, 0x1}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x6, 0x1023f18d, 0x6, 0x7, 0x1f}) socket$alg(0x26, 0x5, 0x0) close(r2) 00:07:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:48 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x3ff, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:48 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r2, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x14, 0x80, 0x7, 0x3, 0x0, 0x7, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x4600, 0x3, 0x1, 0x6, 0x9, 0x8000, 0xb164}, r2, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x300000000000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r4, &(0x7f0000000000)="8b600c5c4e8d105436f0f6742ca99aac4cf8ae8af62e56ab73f98d418ba86c27f469616ab574f2bd543edd00af330e4b6cefda749af8d80ad5e7c0334d49d2113128b160fad219177c596bf9fef6acafdc5b4576607dbccd87dd7343aebcc5a9fce9d01949791650265c14ad55ba126dfe8f6113c5dad3667831a45bcb89e1f34a17e1d252ab18289147d608ef620a0689aab47c218d65397bc98a7f133856f41f3e95f713d93bff322d3ecb10a2c45043ab93a8c9f62e", 0xb7, 0x8000, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000001c0)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) 00:07:48 executing program 2: r0 = semget(0x3, 0x2, 0x490) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000000)=""/94) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) rt_sigprocmask(0x1, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:48 executing program 3: socketpair$tipc(0x1e, 0xf, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) r2 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0xe) fchdir(r3) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 00:07:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) write$P9_RWALK(r2, &(0x7f0000000000)={0x23, 0x6f, 0x2, {0x2, [{0x80, 0x3, 0x8}, {0x81054bd4fa37f3a6, 0x0, 0x2}]}}, 0x23) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) [ 729.985065][T12828] usb 5-1: new high-speed USB device number 97 using dummy_hcd 00:07:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:49 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4100, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x7, 0xfffffe4f) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socket$inet(0x2, 0x3, 0x4) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6, 0x1cb}, &(0x7f0000000040)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x80045400, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r6, 0x5, 0x9, 0x7, 0x0, 0xfffff182}, &(0x7f00000000c0)=0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x8}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009269f50bc4eb48fd076b22c2c8efc275c5c85dc8d02059919ab4b307d955359e0803dc9b3b2c0b18c1187b83b65f3566"], 0x0}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x15040) [ 730.233158][T12828] usb 5-1: Using ep0 maxpacket: 8 [ 730.365190][T12828] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 730.373618][T12828] usb 5-1: config 0 has no interface number 0 [ 730.379835][T12828] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 730.389797][T12828] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 730.400862][T12828] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 730.535314][T12828] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 730.544742][T12828] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 730.553887][T12828] usb 5-1: Product: syz [ 730.573156][T12830] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 730.595868][T12828] usb 5-1: config 0 descriptor?? [ 730.815193][T12830] usb 1-1: Using ep0 maxpacket: 16 [ 730.935565][T12830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.946676][T12830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.960095][T12830] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 730.969321][T12830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.996429][T12550] usb 5-1: USB disconnect, device number 97 [ 731.087211][T12830] usb 1-1: config 0 descriptor?? [ 731.566221][T12830] microsoft 0003:045E:07DA.000E: unknown main item tag 0xd [ 731.573770][T12830] microsoft 0003:045E:07DA.000E: unknown main item tag 0x2 [ 731.581230][T12830] microsoft 0003:045E:07DA.000E: item fetching failed at offset -784420766 [ 731.590834][T12830] microsoft 0003:045E:07DA.000E: parse failed [ 731.597285][T12830] microsoft: probe of 0003:045E:07DA.000E failed with error -22 [ 731.766406][T12830] usb 1-1: USB disconnect, device number 49 [ 731.784553][T12828] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 732.033162][T12828] usb 5-1: Using ep0 maxpacket: 8 [ 732.153327][T12828] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 732.161600][T12828] usb 5-1: config 0 has no interface number 0 [ 732.167968][T12828] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 732.177816][T12828] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 732.188948][T12828] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 732.293326][T12828] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 732.302550][T12828] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 732.311195][T12828] usb 5-1: Product: syz [ 732.337498][T12828] usb 5-1: config 0 descriptor?? [ 732.553319][T12830] usb 1-1: new high-speed USB device number 50 using dummy_hcd 00:07:51 executing program 3: r0 = userfaultfd(0x80000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x541000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6b960000", @ANYRES16=r3, @ANYBLOB="000429bd7000fddbdf250600000008000600090000000c000100080004004e20000070000300080003000000000014000600ff020000000000000000000000000001080004000600000008000300010000001400060000000000000000000000000000000000080007004e24000014000600ff0200000000000000000000000000010800010000000000080008000900000040000100080006006e71000008000800ffffffff0c00070024000000010000000800050003000000080004004e21000008000500030000000800090058000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x79b}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x1100}, 0x40000) unshare(0x8000400) r4 = semget$private(0x0, 0x2000000010a, 0x0) semop(r4, &(0x7f0000000080)=[{0x4, 0x6}, {0x4}], 0x2) semctl$GETZCNT(r4, 0x0, 0xf, 0x0) semctl$GETPID(r4, 0x6, 0xb, &(0x7f0000000400)=""/4096) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x210002, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:51 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20, 0x800) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 732.781282][T12550] usb 5-1: USB disconnect, device number 98 [ 732.793184][T12830] usb 1-1: Using ep0 maxpacket: 16 [ 732.943271][T12830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.954512][T12830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 732.967512][T12830] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 732.976698][T12830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:07:52 executing program 2: eventfd(0x2faa5c09) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timers\x00') fchdir(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) write$P9_RFSYNC(r2, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x17}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 733.121148][T12830] usb 1-1: config 0 descriptor?? 00:07:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r5, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000004a40)=[{0xf8, 0xa9f2c2a1e2e3bee2, 0xfffffffe, "bf456f902bbfca63347b76a659405299199275469da38c6c025c4643a64ee922ca21fea3e7b28fb84bb7922a8fcee12ddf464ee73429eb47e0dc28aa0279000255fa5e32e46bef3080f53b41ba39eb152554cb3a801bfe5c3b9fe088b38259dee1a0601973e4939c54c683ecd46a71def7c86d374e31551aa79257641a7d3cf73b7125fe0e06b7522022c6b954db4693f54d811e484e3e2e6e5fedfba37d9d4b2f6fbd5fe78611654dd8d3efdb12129d1a584374ac5fa7befc25d2cc86be2eab744eaebca22f3acfaee46189aceccefd0dfb183dd89f2e8e5b685108f3c46b485ddd8a"}, {0x1010, 0x118, 0xfffffffb, "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"}, {0xb0, 0x117, 0x9, "98fc54e6bd6fa02bc5c764ef83c020641beb59e1d06f68451251088f06eaaad4745c5d176fa49cfa5a00def47c0ed84c24ca4837e9a80c0969ec262cfb2f5f907d63382a44431aa16ba83b750b3ab988d72417bf6b37ee53fd9c41332502c0cb3ece61ddc917682e9ef57a1ead10bf4cf08cd79d37673ecad5923dff1ebbaf5602249cc5abe301a235064d1a3c837a890bc7e333dad5d52c5f2ab4e05e"}, {0x110, 0x1, 0x1f, "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"}, {0xc0, 0x10b, 0x4, "e37c422202af3f4222c2874ba9c725a0d359538b9e429413cbaf1f231f8a4c19e62413427ac0d0a9dcba9cabe76e805e4714fb98e0f686e04b728891dcbdd3ece3a4deebe5221373650332630010585b4e0fec797a495daece73b4a8c2d44a95dd00722980b5c4887f5a8d07f8b524dc66ea84630292b879be8b1c4f780f41e653f24850b80881ee3dbdc323ee31f89ae7998befdda5162588833f2df4338b9b463841c3c950b5cd38"}], 0x1388}}], 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) getsockopt$inet_buf(r7, 0x0, 0x2e, &(0x7f0000000080)=""/96, &(0x7f0000000000)=0x60) fchdir(r7) r8 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r8, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r9 = syz_open_procfs(r8, &(0x7f0000000140)='net/bnep\x00') fchdir(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r10, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r11, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r12, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) syz_usb_connect(0x4, 0xa, &(0x7f0000002840)=ANY=[@ANYRESOCT=r4, @ANYBLOB="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", @ANYRES16=r2, @ANYRESDEC=r12, @ANYRESOCT=0x0, @ANYRES64=r3, @ANYRES64, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000002740)=ANY=[@ANYRESHEX=r1, @ANYRESHEX], @ANYRESHEX], 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000001380)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r15) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xffffff5d) sendmmsg(r0, &(0x7f0000001f80)=[{{&(0x7f0000000180)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000200)="88d73a7436b940bc26360de22d691b370a57666c3bffa2a28c5b20ebbc555d95001e581f052ba3acff3da354724e80ee243bd733962a40ed6f111cf17066b0338a6dfe5f5190da5cc619ecf7201c6d28844fd13024611124239513e5ed79a6e6726d0eaaff8128edc2c22bd5dd4d4e3f3f0ad48325d8221e7ae5c4d504db98d0906a61495a8f852ee541b9b0fdddf236e9cedf848c923bb5a3275eae2220b2fa9100d5faa104be359cc6789d47f0dc5de0fef23cd505ee45bb9b26c8c1751b74c6de2cf9a98a76d7db58f2e77102582de20df9ae29c4a81ecafec49da6d38dd0b63e78d8eaa1dba3174927d8334ebcb51837", 0xf2}, {&(0x7f0000000300)="52a3d648ea1896c2751225b6fe82f4e35979ee9b29cc945b0ccc229e06ef51d051a331bede1bd01837582e2e103ac921225da0ddca7c4df2cb6c50a0515cd4055f90ef892297f344e6e7442381aaf1019b007ad026fefc431cc2965b70fa3dcf96d0097477af5ba941151cbdfaa1788317445f37e77866773dd4357ef5eeaaf1460059f97fb22bbe3031e724ab05d24c078baad5aad55bfd95fd38c5565a75b21b64b37e05dc595bebf292c210265116ddfac207231bffb585f046d310c114", 0xbf}, {&(0x7f00000003c0)="a64b65141867b3d4c3f7f1e6682419b90a8d7cef9c3277c195db7533db3b93ed3f60823964b2dcdaeb6c52c9fca9eafb76da4f683b8c5615681ddb63314460671279b6b62ea6bb4527a98fd4633b3f0d6bb29197af8057b8f268e1d483c8f9c7a8dd003c6ca92309067f5b63d80a4b46c58aaf14e6a918b67ecc8f10d10ff67de87cb11e71bab0f1a6b997a722490327239283769a2d5db678d0dbdcd0a5742605b34f", 0xa3}, {&(0x7f0000000100)}, {&(0x7f0000000480)="6e96e531f61052f640815addc4c47920742467dc7725bad1bb57d334bcd4d2d553d615f4d695f2ff969cd424793f1f5623fbde9bfc8cf5fbbbf19c45c2aec987a5c4b5ac068d772bcd6b", 0x4a}, {&(0x7f0000000500)="c91377e294404ab228011e571a0809785c6b62b4e2bbc196ea8a6668773bf166b6f313cecb750c41473734ef5252f478cb4751ff3dbe8e6bc0c2d3801a333641a412c3ba4bd7558fe49f9e9d38fd8a5c3f50a768f2d50435029503d9f153fd1e821925269bccaa692985c906d95959249ccb7fd094", 0x75}, {&(0x7f0000000580)="3fd0a201cfe7ae6e0150eb1378", 0xd}], 0x7, &(0x7f00000006c0)=[{0x100, 0xff, 0x0, "6cbd4467fb72eb999432a38951c0776509de454f6674ecda6f0eaa19380f3f826c7653d0bf2a1f63c12f7fe3edf09570ad515ee7b6829a4210d45b5272141df3a831aeee88ffd4c6979b38a5c60029257327b0ab1b5366847c222d8f180a618342d7ceece036fd07c522b9eedf61844524f79f018542d697eca27cc7a63e8be5d171840cc462f7883906d0817f464d91e958a28cac08964383e51aa2f922979e17bed39ec114cdf10cdec4ae508975030da859b371a9d07440d85c748f213436d4d3e19dee338aa7a7c2b837b2104c8524b72a0798a1d9a9e169ed0abbb1f24611170d03f0c3233313"}, {0x110, 0x11, 0x3f9a, "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"}], 0x210}}, {{&(0x7f0000000900)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x180, @mcast2, 0xf0}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000005c0)="37c67b5cb7e618627608f91d25acaef1ded7059ee6f0b2", 0x17}, {&(0x7f0000000980)="aa655c12b32b4a5e665aff7e375b47027f28c8e3d78994c810a81a5a8e61e5ae681342d4a46ad8231b0ca3fb3374375a049f3df2e91911efe6d20b6ad8ddfbad23593447e1f8ea99c218d1d7fcf92d50a7ee73c9b1b71e313af8a18e4c9e1e2012a2935292d8a5a133c06f6eaa5e5fdd08e4616058afb4647b369f0566798c4a956c89eac8c676b907b0d14a7dbc84c48fff7da69856cfeb65ec5b6bf54477f448d4e34790950e9ebe737c97753e071d9d75d88e479e6eaecf434a08fda06507dc931ff434", 0xc5}], 0x2, &(0x7f0000000ac0)}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d00)="e719af6b1a92fe5dbf276584a680b0b69594c8ba61cfe1ffadf408c73bf30c5c792c3f544dcd21d7e2ba6b454c34f94c207fcf742a50cd433eb90ae40ec30f4a61bda8eab321bf13d3fda2eb972789a588daf9aef8901d1b06b722c2f1b711b42c99107c238115d57662c053afc8fb0764f4b190accc3e25709f8e9c13dda2cec09c9e6e0e755367ae525cf2844254558cae78dd10444fdb147e46a4ecc72c0fff53c1243752e13d3fb4700a444ccb5b258e319322d303d18906ac2b656857e239c3eaf01d9e82f448b4274bdd92d143ffe7e0884349d329777c", 0x4b2}, {&(0x7f0000000e00)="bc4285469724b343371817b2bb82016a7262f41bd8b423bb5469fa8751f8e78815f906bff164471e28c239", 0x2b}, {&(0x7f0000000e40)="5c9482ce3ed21d71458481f4a6c31205dbd675edf8c2eda56b338f61b3024805ed673f9795393e24712666999ab43f27e8e06333e19c4217cc6a29498fee4f9b0a6ce243ae6c8342cf5f261720029e9d72ca033f61e97dabc91151a6bb54e28d2873e23bf9", 0x65}], 0x3, &(0x7f0000003900)=[{0x88, 0x113, 0x1000, "3cd0bb828b8561c259c1a6de0f615441c011a3742b0f2d148b5a74bc88de28c21f9276bd8eacfd38ddf6a089eace2c916bf89ceca914d01df7eaec08771db8064b9cd5b158cde1b563a22d9ad6bf6cf556f97a9f5f8ebec67d7ef37359469b3c86849a24778200286b308b1313826a572d432d"}, {0x1010, 0x0, 0x4, "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"}, {0xa0, 0x101, 0x80000000, "f1f573a1098631d7880feea781f1d9feec9e35f966ab0c49fbc6d825c8cea1f71c0a3e1171c6617ee051cdce4333b04afc057910e08f7cb164ebe779d671881fa7555584bbbbb0ebb1988dca36610c610c4ff0a204914d9dfa9a2046e67d0cb75fd14376f73c02a932dd1d0dcabdbbbd5a207303139ae3ce891dd76d15ee86197b81ac5982ee0b7c9f"}], 0x1138}}, {{&(0x7f0000001480)=@can={0x1d, r14}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="2e152c2b2dad5359817466c156f3d981c8e92f39ef69387594326c1e67e68f71a71cb635a93492154bb1a024dcdaf2fb0efe817a171ecc46e7e45ecaf629e134d178045fd8a854a41d80192746aa698072ca52e1ff628324f3c7b5", 0x5b}, {&(0x7f0000001580)="8134060a4bc0973561e8e1c2c1bf80d67f2df063b04207146ba0780d4c7073b55e85278db7200c729c8d09594e4d7a193dc7ee739c", 0x35}], 0x2, &(0x7f0000001600)=[{0x100, 0x105, 0x0, "a06d747fd6db0a8e5ea9a53dea3d6b300372c73690f1f59b3157c89d7581a783443c09cf1834a4d3c8456824f463f3ac0d4e356c5ef4c380ce19b1f7ffc05c11fe7ed2868f621eb4aff7eed6bf7746cb2a52a11819716fcb4b734aee426aa2d1b5b8c15f8d95f04f35368115039a8baecb57c7dedabc063580d7c6a9a3b8d7752619c4d5bd52d5333523dc00a6c42e8867b6b9142bc5fb93d97c82b3adb3f066dcd56d9e541541642346de7605b8e4ada9cbdaf6cb1307ec5c52fe45bf55bf8d3f94b86470fe8285f687d19f9e21625a47d3406fcb54579c1ffd79922ad9887f3548171be2e9bc20489d21db"}, {0x60, 0x29, 0x9, "df86cbdf938b2fb3fcb3bcdb3a32f3fd29f9d78ae0ab258c35efac9b2dc1e09b20d5c05bf0d6750f86983bde27b6a863ad74ba449e4aef7ebffe22378adf69058431c1523982ef87c08d4fef741e9d"}, {0x68, 0x109, 0x10000, "7a0af637d1fb92422633a1f39e7edab8ab26bc6dddab9c817d1cad90d59ec55ee0e4f33ba06232921d8a6c4362559cd070bd04b38718e68d7c499def2415cfffac17b4cbcdce16b937c84ad0f44daa7fcf1626a3"}], 0xfffffffffffffdc7}}, {{&(0x7f0000001980)=@nfc={0x27, 0x1, 0x2, 0x1}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001000)="2edeef1321cf4f20f50b2516b1c9b362af25a475ce1bc6c98698231f44270755dcce5309f6428a130737a466f670dcd5806bd087dbaa053b41d78af986bc84f9d4afc813465a5bf5ab62d6a91006f5f15c067d1dbff20b0848d36c67bf589792c6f8d5009294943f230943c349ff8a1606b13e2ba066b1057ba7c11fd5811f185e658f3ee9971bffea2c36e8abf4a420d2", 0x91}, {&(0x7f0000001a00)="1e6c8860c213543998d787776ecea8cea87416b762a638852e930a77fd09e9a35d69a24ec021556c1dd5977db7c22f3aae30a304a66817047edc1ebe47d6358714f3fd06e506d93598336e7d0ebd399576221dc08c21efe0a6c13cf9f75cc5f641830198821a71acf43c77fbec212fca1403258106b512004d03e68cda57965205938d8b0f9fb39c2c4faf01eb566ac8a776d2fea417a433902cc040c8fae1d1425f5a3b", 0xa4}], 0x2, &(0x7f0000001b00)=[{0x60, 0x115, 0xf059, "1a912e3858e30168affd28df732a78fb417fd0370f63eb05dd1cf87707e7ff3e74495e4b36134ed233a616ea817d0da70d87c216c078fc21e8309812f66750dd0454692ec5246872a9"}, {0x80, 0x4, 0x7, "8ab4d1c4aa54ec5f266bb70d100efda13c448bfaa4dbaa3a94624cfdb4b6fbc0301235af9ff0431ed074cf095c83b16ceb5517457b1353e9e31c6dd0e92c86ea983da1488f00504f052ac62ff526730336732d3817fb18a5922cc01143010810396728194ddda2ff111444"}, {0x98, 0x29, 0x3, "344bc3a2e152ba4d93465de9ba17e6318c5e6c1e9bcf6799df0b8a3b1d4968f2a04d5cdf4f3d316980d95c6e89da7cf11820b52cbdd92d65f70a607435891a5ad8332191930910ee367b1a8c471803ac11357db17e310790c55e5260237ae42a76813997b5de897e1e8a8e58c86a77127cc4a44048012541f1782323dd560e43ae77e56d8b95"}, {0x80, 0x211, 0x7fff, "6593a150288f6758dc91e169a9c45bdc22e00ea9b8f01058c9ba95e102de33404b5e35cbd757b55fcb7c845930cfffc3790c34fc892506a0354e5890ec588890e4fcef5ce1a0e2c0b5186012635a645f067d9de2d1de41d5ad2db37b4bcbb1eea54d780619230a8583"}], 0x1f8}}, {{&(0x7f0000001e40)=@xdp={0x2c, 0x2, r16, 0x1b}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001ec0)="1a4775b2c08a0f61da7ecf2fe4f2a57ad0b833801bfff3b0a2cf9d6ace6addf2f682a4ff9d1d805a3ad6a4935714d4c3567122991e963a9d441d651b5d573fc649a9cbeb215afd7525513ce86fb53f5f53883a99acd76cb8ab085f2760", 0x5d}], 0x1}}], 0x6, 0x40000) r17 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r18) ioctl$NBD_SET_TIMEOUT(r18, 0xab09, 0x1) close(r17) 00:07:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x4000024) mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x1000000, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) timer_create(0x7, &(0x7f0000000080)={0x0, 0x20, 0x1, @thr={&(0x7f0000000040)="da2fc4b1794d17474a04ec94b1938049e276cd6b", &(0x7f0000000140)="842b05f7dc3eb4af478465fdd8fa01ddd9501955c12111bfa556755ecd194ebfeeb6592b2e800213c35ce6ed25de801c5006dbf37d67169c580967578dccde8a57ea6507a53d5e18cb746670224118f0b3fc307f7cb28be529de08c21b7b9ab36ff38766ff6ed6120da621141fd1aee1bf22ef88d127df58ecaae1c1215bc0a65908dad4c08d3b8899bbe30617904bc8029e9248107c0fee3ffd8da7b168bcc16fabc992f16d40a2234db47a9ece4e1dd6f5d3c06f1878e85f944aafbf83a880"}}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000240)={{r4, r5+10000000}, {0x0, 0x1c9c380}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000)=0xc9a, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95)=0x4, 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000180)=0x401) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x6}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x100, 0x0) write$FUSE_LSEEK(r2, &(0x7f00000000c0)={0x18, 0x0, 0x6, {0xc03}}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, 0x0) r3 = getgid() r4 = getgid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r4, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x4, 0x80000000, 0x6}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={r7, 0x8000, 0x8, [0x0, 0xe99d, 0x3ff, 0x99, 0x1f, 0x46fb, 0x0, 0x0]}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) ioctl$PPPIOCGUNIT(r8, 0x80047456, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x124) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000340)=0xfff) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000140)) 00:07:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) [ 733.513359][T12830] usbhid 1-1:0.0: can't add hid device: -71 [ 733.519600][T12830] usbhid: probe of 1-1:0.0 failed with error -71 [ 733.555764][T12830] usb 1-1: USB disconnect, device number 50 00:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:52 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000003c0)) r2 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x6, 0x2) r3 = geteuid() getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r4, r5, r6]) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xa0, 0xfffffffffffffffe, 0x3, {{0x5, 0x2, 0x6, 0x9, 0x3, 0x8, {0x4, 0x0, 0x800, 0x3, 0x5, 0xfffffffffffffff8, 0x22, 0x5b, 0x3958, 0x8, 0x2, r3, r5, 0x1}}, {0x0, 0x12}}}, 0xa0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x602001, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x42801, 0x0) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004081) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_group_source_req(r10, 0x0, 0x2c, &(0x7f0000000240)={0x40, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e21, @loopback}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r11, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r11, 0x40087602, &(0x7f0000000380)=0x8) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x3ff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0x54, 0x30, 0x0, 0x0, 0x0, {}, [{0x40, 0x1, @m_skbedit={0x3c, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}}]}, 0x54}}, 0x0) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}}], 0x11e8) 00:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:53 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv0\x00', 0x200}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000100)={0x100000, 0x1e006, 0x10000, 0x2, 0x6abbbe1a}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) 00:07:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) 00:07:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:53 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xaa90, 0x2000) ioctl$TCGETX(r5, 0x5432, &(0x7f0000000280)) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000080)={0xf82, 0x3d303a6b, 0x1, @stepwise={0x100, 0x80000000, 0xf4b4, 0x3f, 0x1, 0x9}}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0xc00, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000300)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000507fa7a6c710000000000000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)=""/253) 00:07:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x8947, &(0x7f0000001380)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000000600ffff0c0009000800020000000000d6c8a0a05b84a3310703a814b07f0085855e520fc2a63d6513850516dc416ccf613a7cbd5c8d9cafe8a2fb7c127fdf141d458445c9c1a4760cc5632b8c07c54b7eb4e0db77521cea67e239f163ea8332a4f720209cac3b72d0c5c2982432d0fef4f54024c4105a641c4432a5cfb4e1957b447860ff4cb46c60e0"], 0x20}}, 0x0) 00:07:53 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) socket$rds(0x15, 0x5, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:53 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = fanotify_init(0x4, 0x0) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) rt_sigaction(0x0, 0x0, 0x0, 0xfffffffffffffde4, &(0x7f00000001c0)) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000002c0)={0x68, @broadcast, 0x20, 0x0, 'fo\x00', 0x0, 0x10001, 0xfffffffe}, 0xfffffffffffffec0) socket(0x10, 0x80002, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x20000, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000040)={r4, 0x9}) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) fcntl$addseals(r0, 0x409, 0x7) 00:07:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r2 = syz_open_procfs(r1, &(0x7f0000000000)) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0xffffffffffffffda, 0x1, {{0x4, 0x100, 0x2, 0x8000000000000000, 0x7, 0x8001, 0x5, 0xffff}}}, 0x60) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRES64=0x0, @ANYRESDEC=r6]], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r7) [ 734.491990][T24545] bond0: (slave bond_slave_1): Releasing backup interface 00:07:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10412}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) syz_open_dev$dspn(0x0, 0x7, 0x401) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)={'filter\x00'}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 00:07:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) write$FUSE_DIRENT(r1, 0x0, 0x0) getgid() ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 00:07:53 executing program 3: r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x8, "d1557b095aa5367f45d614a9888a7d0c25be655b313633465044185699f04604", 0x1, 0x6, 0x3, 0xf3780c, 0x400}) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r2, 0x400009, 0x3, r4}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000180)={{0x0, 0x9}, 'port1\x00', 0x41, 0x4, 0x4, 0x3, 0x4, 0x6, 0x1, 0x0, 0x1, 0x7}) 00:07:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x60ffffffffff, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="100000000100"/16, 0x10}]) 00:07:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e0000001e000507ed0080647e6394f26731d2000900120111404b480f0001000080020000000300f88000f01700", 0x2e}], 0x1}, 0x0) 00:07:54 executing program 2: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x6, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:54 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:07:54 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/74) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 735.679546][T25085] netlink: 'syz-executor.0': attribute type 274 has an invalid length. [ 735.688478][T25085] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 735.776065][T25130] netlink: 'syz-executor.0': attribute type 274 has an invalid length. [ 735.785084][T25130] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. 00:07:55 executing program 5: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001100)=ANY=[@ANYRES32=0x0, @ANYBLOB="73ac49cfaccc040f71a5581327e679c20c9f5067b44e41ff9083e64e1970b80fd70c1ffb2e800fded558bb8fb83d07a94e0a9963c0a487b25b3d954d8346a13400913a123d90b29b76166600099e1a0a7f7277eff9e716707ffdce5a543bd789b30ca4dc321ba30216f847a72f6b53e090ed48b56e071614b57b0e4b8a02e8b2909a5ca511a8f148b85a8c068c3a5a51754300c949fd9c4147e5be7f675ca4a80000000000000000"], 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x1fe, 0xf0d8, 0x80000000, 0x80000000000000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r1, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f00000000c0)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x400, 0x0, 0x0, 0xff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2], 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f00000000c0)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f00000001c0)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9]}) r3 = getpgrp(0x0) setpriority(0x0, r3, 0xffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9']) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000d00)=ANY=[@ANYBLOB="01000000021200008601000000860d0d2e4f59ef00464fa55e2e841b238edcea88fccdee60e2ba88ce05d32d9f344fc618dd08e44595873e9f0371efe14868090e28841c677fe0170c8a1e9d33e74157e4eaa4c08d1c12fd0758327b158ac937363395e142d12e8b5869924b83448977e68168ffe113698c7bf82def571dcf2e2dbaee9b484edc6482f7d6662281a887c41f1d8441711a23af1c3c875c895ce7170a676b9a90ce2aba143a9c884f72188ca4ed9ce07511a1553edcbe86d3f6764cdc066188221222ca98845570f4a02ca9c5b85eb1926ae7f6accb09dc08161458b3508dab"]) pipe2(&(0x7f0000000540), 0xc0000) socket$pppoe(0x18, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 00:07:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:55 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000000)="a4e273bcd1a6f6db1f5b8badc002a0aaae0365137a73d8c967934cd1db64dbb4734b4c4a3ae0e6796f1a77bacbbdbffe", 0x30) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000012000/0x2000)=nil, 0x6a7, 0x5, 0x10, &(0x7f0000ffa000/0x3000)=nil, 0x8001}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:55 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200), 0xfffffff3) syncfs(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) getegid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) 00:07:55 executing program 3: userfaultfd(0x0) unshare(0x8000400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r3, 0x3}, &(0x7f00000000c0)=0x8) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000100)={0x10001, 0xffffffffffff8000, 0x100, 0x70, 0x3, 0x402}) [ 736.003499][T12550] usb 5-1: new high-speed USB device number 99 using dummy_hcd 00:07:55 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='nlmon0\x00', 0x10) [ 736.243276][T12550] usb 5-1: Using ep0 maxpacket: 8 00:07:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 736.363609][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 736.371940][T12550] usb 5-1: config 0 has no interface number 0 [ 736.378696][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 736.388606][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 736.399721][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:07:55 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x208040) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000080)=0xfffffffe) r2 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)=""/24) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'rose0\x00'}, 0x18) 00:07:55 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0xffffffffffffffe3) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4476, 0x40) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000013000/0x3000)=nil, 0x3000}) 00:07:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6dd"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 736.533967][T25461] IPVS: Unknown mcast interface: rose0 00:07:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcf067b0071") setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) [ 736.583975][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 736.593348][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 736.601566][T12550] usb 5-1: Product: syz [ 736.647360][T12550] usb 5-1: config 0 descriptor?? [ 737.027563][T12550] usb 5-1: USB disconnect, device number 99 [ 737.793108][T12830] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 738.033086][T12830] usb 5-1: Using ep0 maxpacket: 8 [ 738.163295][T12830] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 738.171384][T12830] usb 5-1: config 0 has no interface number 0 [ 738.177806][T12830] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 738.187622][T12830] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 738.198777][T12830] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 738.283461][T12830] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 738.292714][T12830] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 738.301026][T12830] usb 5-1: Product: syz [ 738.315868][T12830] usb 5-1: config 0 descriptor?? [ 738.612426][T12550] usb 5-1: USB disconnect, device number 100 00:07:57 executing program 4: ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000000c0)="16d95d119ead3bf245a1cfd8239521fa170c7c6850c013bba33c18ae65c00e985ea953cef0cc3fe94b1eff29f932ba6b4102ede3c97fa3349e518417a89df6dd3e891b227e7f08192d1369a6556afc398a2e3d4323b5d314907a5aa503"}, 0x20) 00:07:57 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6dd"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:57 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0xfffffbff, 0x1, 0x7}) 00:07:57 executing program 0: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) 00:07:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00\x00\x00!\x98YN\xa3\x96Y7\x00', 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000001c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x94\xdd\x7fxl\xcd\xfc[i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xff\xff\xff\xff\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') read(r0, &(0x7f0000000000)=""/226, 0x3) 00:07:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6dd"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:58 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000013000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000000000/0x400000)=nil, 0x2000}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:07:58 executing program 0: 00:07:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:07:58 executing program 0: 00:07:58 executing program 3: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/psoc/thread-t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x00', 0x2, 0x0) r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 739.243303][T12550] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 739.503183][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 739.634441][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 739.642655][T12550] usb 5-1: config 0 has no interface number 0 [ 739.649048][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 739.658990][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 739.670000][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 739.763400][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 739.772842][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 739.781215][T12550] usb 5-1: Product: syz [ 739.787538][T12550] usb 5-1: config 0 descriptor?? [ 740.176466][T12550] usb 5-1: USB disconnect, device number 101 00:08:00 executing program 0: 00:08:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getpeername(r1, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x2f6) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x8, 0x505000) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:00 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4000, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x112) unshare(0x20000000) splice(0xffffffffffffffff, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x5, 0x3) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) 00:08:00 executing program 5: 00:08:00 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd000000000000"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0xd000) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r2, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r3 = syz_open_procfs(r2, &(0x7f0000000000)) fchdir(r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) close(r0) 00:08:00 executing program 0: 00:08:00 executing program 5: 00:08:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x3) 00:08:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:00 executing program 5: 00:08:00 executing program 0: [ 741.573086][T12550] usb 5-1: new high-speed USB device number 102 using dummy_hcd 00:08:00 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={0xfffffffffffffffe}}, 0x40000) 00:08:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x1d8000}}, &(0x7f0000003ff6)='G\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:00 executing program 5: 00:08:00 executing program 0: [ 741.813147][T12550] usb 5-1: Using ep0 maxpacket: 8 00:08:00 executing program 0: [ 741.934781][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 741.943163][T12550] usb 5-1: config 0 has no interface number 0 [ 741.949370][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 741.959282][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 741.970396][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 742.134510][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 742.143789][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 742.152038][T12550] usb 5-1: Product: syz [ 742.163224][T12550] usb 5-1: config 0 descriptor?? [ 742.545573][T12550] usb 5-1: USB disconnect, device number 102 [ 743.313107][T12550] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 743.553082][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 743.673323][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 743.681379][T12550] usb 5-1: config 0 has no interface number 0 [ 743.687753][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 743.697550][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 743.708659][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 743.793226][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 743.802362][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 743.811238][T12550] usb 5-1: Product: syz [ 743.816750][T12550] usb 5-1: config 0 descriptor?? [ 744.104750][T12830] usb 5-1: USB disconnect, device number 103 00:08:03 executing program 5: 00:08:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2000) ioctl$UFFDIO_UNREGISTER(r3, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 00:08:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcc0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x2c0, 0x81805) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 00:08:03 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x200000, 0x185) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='\x13i\xc9Q\x98\xde\x85\x17\xfc$\"o\xa1\x98\xf1\xe1\x91\x85\xd9\xf8\xc8\xf9\x9fh\x85\x03\x8c\xd4#\x99\x0e\xba\x9f\xbeV\xa5)]n\x8a\x13\x80\x95\xaa\x85\xf6\x98\xa8\xa5\xa1\r\xff\xd0\fa\xb5k\x8a\xec\xc9\v\x00\xdf\'<\au(\xd7\xf4\x88\xd5\xd6\xefz\x95\xa8[\x87\x81\xd1\v\x10\x81\xe0\xf8~}~\xa9\xc5\xdf\xd5\xbe\xf4\xf3S\x17\xb7\xae_\x15\xd4\x7f\xdb0\xeeB\x8f\xf8\xd9`\v\xe2\x85\a\xdb\x95\x0f\xb2\xe9MRK[|@S*\x9b\x96\xb3\xb6CN\xb8_H\x92\xda\xa8\x86s@<\b\xa6\"f~Q') fchdir(r2) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5, 0x1cb}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001780)={r5, @in6={{0xa, 0x4e20, 0xfffffffc, @mcast2}}, 0x9, 0x41c, 0x2, 0x1, 0x5}, &(0x7f0000001840)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001880)=@assoc_value={r6, 0x201}, 0x8) 00:08:03 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) prctl$PR_SET_PTRACER(0x59616d61, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fcntl$getown(r3, 0x9) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="d5ecc3bac94978a4b962bac1d346cc38c8d4527ba319ec4ea00d48de0c1587a5a6484955d3360ae9e0fe26877e439e41a1462705c1b0992df16e7e", 0x3b}, {&(0x7f00000000c0)="36855bc9b539cf208fc3f41e0f4108c0f266e550644e2969c2183f72ef0e7882342251863eb6147fa8a6e86c16a13a06993f686ddc2eef3689b9ad5c8643fa6a71116dfa266bf2e53772d70713aec6a992a64bf4efaf66b30c61cd03266617210bd9b3d906b77f5cba429970130c9e878f", 0x71}, {&(0x7f0000000300)="2ebc1d162fd89533128d497419d0a1f968cc6b2f30440e336cb88159f77dfa09f8db6f23a2527c5d808115300e080a9cf802c2971b744366972c76b45364e4ac39f66de133e96bb8ad3e258dbc4327ecc5dc2a33e28597143624fac59ad991a3f2ca90d21a1611f45283825ae93fced76413f59db6fddf70f5fa4ce73f833731227418436cef614d26475fc2cc2d0256b67490a567f63c3ea33177abf6f36375fb9993ff23ba3ac1f50a5f4e04870598b19f299c7a3d25faed76c6783243344976454b9117f3026100", 0xc9}, {&(0x7f0000000780)="1dcae916722c68358bbe877aaf7e4a85eefb336af37fd8cb53b1763b6016d016ae7389b7d79a7cebe2510e01015a661ccdf33fcd905ec5f3d935f9273502ae9fef84042c26940f8d1e43bdb407f0b0d166a0916b97063a952d6bf61524b24f01a1364117ae88bf4ce31d3fc4d1503246fef3d81fc5fb2b591cfc6b37b7a78c62dca3868eeae7f9e59f2de8a28fe1b8213c229ba877b7e1dbe5156b94dce7e08cf8c9311eacd93aeffa05aa32a1968796f25813d2de9f63a07b58acd302be54ca6737913708fc80790d2b7dc6890fd3882e3a329e050000000000000061e13f6ae7cbdf2730c5e20ca3dd1df482c8291cb074389a0fdf7367f0c3cf36f661163e8f37ae563f23", 0x106}, {&(0x7f0000000500)="cc5c581354b816ea1a4b6dd8f98c4d1ed98c7e9e497c557af7f229e97fd9142fbe10111b33dca4297d2d069b30f0800b4ac4e9a3c29f688e47cf867d68d7c37d93c3ed0500043e0422c3fd7122dc9b3e1e7a7d84a4de6d9ac2a10fc8700848de58f2e15a16cb9946cb9f44f7015a21e2d49bb8d68aec7108047309c3ea5be2a8ed2a31d7143b", 0x86}, {&(0x7f0000000640)="21662be9713e1fb1cdded74457e69bb56d7e43562f1c838c6cb44b07fd28bd3461fb2fd856d1f1dd1c0375e3e71120f449d74c5d41d80af3d32afa1bfcdd427770aab3b6c695a0fcf50cd5a0377f14bebf43007872a82e4be3cb2e75deb36278e42b04af9d90cb5526f77a6584ecbc9ccce5785ba6d943786fd1f2c197fd22b5d26f7704233a6b55a3c06c09f26f13c98b406825e0cbd1550aaef2b78de845dc4518704842a6423115c685acd9449b66bb", 0xb1}, {&(0x7f0000000140)="dce6736fbfc08337c2c322c909c590dcb7db4a", 0x13}], 0x7, 0x0, 0xfffffffffffffef7}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)) 00:08:03 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x60ffffffffff, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="100000000200"/16, 0x10}]) [ 744.411858][T26392] sctp: [Deprecated]: syz-executor.3 (pid 26392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 744.411858][T26392] Use struct sctp_sack_info instead 00:08:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f0000000300)=""/196, 0xc4, 0x0, 0x0, 0x2}}, 0x68) 00:08:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x100010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10002, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x3722, 0x7, 0x9, 0x8001, 0x80, 0x8000}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 744.653046][T12830] usb 5-1: new high-speed USB device number 104 using dummy_hcd 00:08:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000011000/0x4000)=nil, 0x4000}) 00:08:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[0x4, 0xfffff49f, 0x9, 0x10001, 0x2, 0xfffffbff]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x301, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r9, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000001c0)=r9) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x6, 0xd239, 0x6, 0x2, 0x6}) r10 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r10, 0x8004e500, &(0x7f0000000140)=r1) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:03 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16]], 0xfffffe6a) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e0684f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) pipe(&(0x7f0000000040)) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) 00:08:03 executing program 5: mknod(&(0x7f0000000180)='./file1\x00', 0x8, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0x31428f95) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setxattr$security_ima(0x0, &(0x7f0000000100)='security.ima\x00', 0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) [ 744.903954][T12830] usb 5-1: Using ep0 maxpacket: 8 00:08:04 executing program 3: r0 = userfaultfd(0x0) unshare(0x12000200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0xb0b668c115dcd3f4}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2c0, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'bridge_slave_0\x00', 0x200}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:08:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 745.030635][T12830] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 745.038887][T12830] usb 5-1: config 0 has no interface number 0 [ 745.045288][T12830] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 745.055238][T12830] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 745.066624][T12830] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 745.184804][T12830] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 745.195647][T12830] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 745.204408][T12830] usb 5-1: Product: syz [ 745.246030][T12830] usb 5-1: config 0 descriptor?? [ 745.650945][T12550] usb 5-1: USB disconnect, device number 104 [ 746.433082][T12830] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 746.693048][T12830] usb 5-1: Using ep0 maxpacket: 8 [ 746.853120][T12830] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 746.861267][T12830] usb 5-1: config 0 has no interface number 0 [ 746.867603][T12830] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 746.877524][T12830] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 746.888698][T12830] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 746.973340][T12830] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 746.982499][T12830] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 746.990871][T12830] usb 5-1: Product: syz [ 746.996416][T12830] usb 5-1: config 0 descriptor?? [ 747.238716][T12550] usb 5-1: USB disconnect, device number 105 00:08:06 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000ffd07d800000000000000bfa3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd000000000000"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 00:08:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:06 executing program 3: userfaultfd(0x0) unshare(0xc020400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) sendmsg$rds(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/167, 0xa7}], 0x2, &(0x7f0000000580)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x2}, &(0x7f0000000280)=0x1000, &(0x7f00000002c0)=0x21e7, 0x3, 0xfa8, 0x0, 0x4, 0xb, 0x1000}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff7, 0x2f}, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0xfa, 0x5, 0xf1, 0x0, 0x1, 0x18, 0x38823c91}}, @cswp={0x58, 0x114, 0x7, {{0x641f, 0x3b}, &(0x7f0000000380)=0x6, &(0x7f00000003c0), 0x1a, 0x7b8c4975, 0x2, 0x5, 0x8, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x401, 0xfffffff7}, &(0x7f0000000400)=0x6, &(0x7f0000000440), 0x1, 0x95, 0x3, 0x9, 0x44, 0x100000001}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3f, 0x8}, &(0x7f0000000480)=0x8, &(0x7f00000004c0)=0xe48, 0x400, 0x3, 0x0, 0x9, 0x63f243544577c810, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5407, 0x80000001}, &(0x7f0000000500)=0x6, &(0x7f0000000540)=0x7, 0x80, 0x20, 0x9, 0x9, 0x10, 0x8}}], 0x210, 0x28009}, 0x40) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/mixer\x00', 0x200, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000840)={'syzkaller0\x00', 0x57}) 00:08:06 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x2, 0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x8001, 0xed}, {0x8, 0x401}, {0x6, 0x7}, {0x3f, 0xc000}, {0xe7b, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x6, 0x2, 0x88f2934134d87a30, 0xfffffffffffffff8, 0x10}], &(0x7f0000000240)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248, 0x4000, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10}, 0x70) 00:08:06 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16]], 0xfffffe6a) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e0684f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) pipe(&(0x7f0000000040)) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) 00:08:06 executing program 2: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:06 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x20000002}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x208100, 0x0) getpeername$inet6(r6, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) 00:08:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:06 executing program 5: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffff9) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000200)={{0x3, 0x0, @reserved="72b36980470bd16ba3fd8978f5064f1be69571c9670b90419bac3cacdc1353ef"}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) fsetxattr$security_smack_transmute(r3, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005000900fd0000000a0002000000000000000000000000000000000000000000000000000000000002000100000000000000fb070000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) [ 747.763495][T12830] usb 5-1: new high-speed USB device number 106 using dummy_hcd 00:08:06 executing program 3: r0 = userfaultfd(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:08:07 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16]], 0xfffffe6a) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e0684f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) pipe(&(0x7f0000000040)) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) [ 748.013381][T12830] usb 5-1: Using ep0 maxpacket: 8 [ 748.143675][T12830] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 748.151857][T12830] usb 5-1: config 0 has no interface number 0 [ 748.158174][T12830] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 748.168014][T12830] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 748.179082][T12830] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 748.383635][T12830] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 748.393317][T12830] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 748.401508][T12830] usb 5-1: Product: syz [ 748.459223][T12830] usb 5-1: config 0 descriptor?? [ 748.846991][T12550] usb 5-1: USB disconnect, device number 106 [ 749.623133][T12830] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 749.873067][T12830] usb 5-1: Using ep0 maxpacket: 8 [ 750.013552][T12830] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 750.021635][T12830] usb 5-1: config 0 has no interface number 0 [ 750.027967][T12830] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 750.037755][T12830] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 750.048788][T12830] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 750.133260][T12830] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 750.142391][T12830] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 750.150736][T12830] usb 5-1: Product: syz [ 750.156276][T12830] usb 5-1: config 0 descriptor?? [ 750.396874][T12830] usb 5-1: USB disconnect, device number 107 00:08:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x1}) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffffffff4f0a, 0xf0638fc6e997f329) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x0, 0x0, 0xfffffffffffffff0}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2, 0x0) write$P9_RLERROR(r3, &(0x7f0000000140)={0xa, 0x7, 0x2, {0x1, '#'}}, 0xa) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)=""/51) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:09 executing program 3: syz_open_dev$char_usb(0xc, 0xb4, 0x6) r0 = userfaultfd(0x80000) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0)={0x5, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0x1000, 0x81, 0x4, 0x79, 0x9}}, {0x2, 0x4, 0x0, 0x0, @irqchip={0xd586, 0x400}}, {0x7f, 0x3, 0x0, 0x0, @irqchip={0x100, 0x4a9fd346}}, {0x800, 0x3, 0x0, 0x0, @adapter={0x1e92, 0xa3, 0x10000, 0x4}}, {0x80000000, 0x4, 0x0, 0x0, @msi={0x9, 0x9, 0xfff}}]}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/dev_snmp6\x00') fchdir(r3) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='^\x00', 0x2) 00:08:09 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16]], 0xfffffe6a) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e0684f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) pipe(&(0x7f0000000040)) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) 00:08:09 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x14) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x0, [], "47c20c78c8a3e195dd5606f5ca383f12"}) 00:08:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) connect$inet6(r6, &(0x7f0000000400)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@deltfilter={0xbc, 0x28, 0x200, 0x0, 0x0, {0x0, r13, {0x4}, {0x0, 0x59733e073e2ae422}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x8c, 0x2, [@TCA_CGROUP_EMATCHES, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_EMATCHES={0x44, 0x3, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_CMP={0x1c, 0x6a, {0x9, 0x1, 0x7ff, 0x0, {0x77e1, 0x300, 0x800, 0x0, 0xc, 0x7cf16198984df212, 0x1}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4e2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdb23}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}]}]}}]}, 0xbc}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x20}}, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r14) ioctl$KVM_ENABLE_CAP(r14, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, [0xf99, 0x7, 0x8, 0x100000000]}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', r13}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r15 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000000)={'team0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8}]}}]}, 0x40}}, 0x0) [ 750.571674][T27323] Unknown ioctl 19307 00:08:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 750.619122][T27347] Unknown ioctl 19307 00:08:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:10 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 750.953132][T12830] usb 5-1: new high-speed USB device number 108 using dummy_hcd 00:08:10 executing program 5: syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000004bf5a08440a0f89c6cc00000001000904c8004bef0401000000000000000000"], 0x0) 00:08:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)={0x8, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x8, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @broadcast}}]}, 0x490) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) fchdir(r3) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)={0x20, 0x588051317b2af42e, 0x2, 0x80000000, 0xf83}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) link(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa2081, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000040)={0x2, 0x1ff, 0x59, 0x3f}) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) getpid() sched_setscheduler(0x0, 0x5, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, &(0x7f0000002c80), 0xff) sendfile(r0, r0, 0x0, 0x40fdf) 00:08:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 751.213625][T12830] usb 5-1: Using ep0 maxpacket: 8 00:08:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 751.355624][T12830] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 751.363850][T12830] usb 5-1: config 0 has no interface number 0 [ 751.370048][T12830] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 751.379967][T12830] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 751.391053][T12830] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 751.613588][T12830] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 751.622735][T12830] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 751.631428][T12830] usb 5-1: Product: syz [ 751.651112][T12830] usb 5-1: config 0 descriptor?? [ 752.046307][T12550] usb 5-1: USB disconnect, device number 108 [ 752.823015][T12550] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 753.063119][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 753.183213][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 753.191427][T12550] usb 5-1: config 0 has no interface number 0 [ 753.197842][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 753.207725][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 753.218844][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 753.303289][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 753.312390][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 753.320733][T12550] usb 5-1: Product: syz [ 753.326253][T12550] usb 5-1: config 0 descriptor?? 00:08:12 executing program 3: r0 = userfaultfd(0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x100100) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "499ffcdf2ec775f5c5f40a384b167a500b8a0f85"}, 0x15, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r3 = dup(r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000340)=""/127) prctl$PR_SET_KEEPCAPS(0x8, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) sysinfo(&(0x7f0000000200)=""/199) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) bind$can_raw(r4, &(0x7f0000000540), 0x10) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10800, 0x182) ioctl$VIDIOC_G_EDID(r5, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0x6c46, [], &(0x7f0000000080)=0xc}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000300)=0xfff) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) chown(&(0x7f00000003c0)='./file0\x00', r6, r7) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) 00:08:12 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$TCSBRK(r1, 0x5409, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') fchdir(r2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:12 executing program 0: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b156", 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x118) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000003c0)=""/103) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xffffffffffffffeb) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x3e, 0x0, @thr={&(0x7f0000000080)="f538884ae47925746f5904c06dc4882141937e9dec0017c8817f30c1d38ff34435ea786a3ef7ca4f929cc5c57fe6855aeed54ba98aa3a6d45591ddb152cc055fdcc5b1af1042e10831caebcac4aa6d24ffdb162b2d", &(0x7f0000000100)="9327248887857ae1eb6553c7c5f8beccc8a2d6e6205db2c4722f95a0db1ed49bf53e00150b8dd3272f40a5c6a795183c03ce6bbb5fd3e9109f88f433e1665c9b4663ae7fa7adfbaf713ac9e13de6b67f1eb88a89f3ab7f1eaf82d5ea9341b93c603f4aa41da5bcbc69aaa04c6a7c496342ce0c7dbc4d80a7511befed6a765a1daa78d73b0990c315ad8bbdff2e74747fe8e6ae0de942a405ee259c23f92abdb731b3a11692653b155ef3178a8703002941775a367669"}}, &(0x7f0000000280)) 00:08:12 executing program 5: r0 = gettid() socketpair(0xc, 0x0, 0x2d, &(0x7f0000000040)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x80000000012, r2, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000001c0)=0x7, 0x8000, 0x0) process_vm_writev(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/247, 0xfffffdb2}], 0x100000000000007b, &(0x7f0000000040), 0x23a, 0x0) [ 753.704952][T12550] usb 5-1: USB disconnect, device number 109 00:08:12 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000300)="4cf23f7104b2fc830504725dac762ba348588d0b00b259628ab4710b0b903279b2a8f9d7f1adda9d6c6553c13c08f39db095ef55ae20ad3b22221c1f8a191af12ca01aa9e65119080d5d7f920a39d390baf727a7809afe9fe3496f1eb42faab04b381665831d2b25f124c299434673bcf313bcfcabf9919a73bca521abeb987dbac7c03ed9c80519e99d0f3189ef299fdb0eb753e13e34d7d9c2941de340be02215f2e9a6dcbeb2cdf8860e5740f94c08138f7adb798aa2710dadc1932034473957a59ea2ecb0e0911ce77c52f7b7091771b0949ad71dea78c3b07155d4c994c4bb782b841a6c5661e3622e894c7cc68c75ec64db009368872062a240cace919d371da9d00c4a7a154d53a11725b4f6413bf8f7773af29f0a4601b13171304791dccd3a54a23d318671ad0273d090bdc47ff587e39eb83ae409e6d3ce5b1edece84f32d4a5ddb5852bd6e637e8aeecb37f36ffe06feaceb993debbaa48ebafdf452f1ff70eede68670ce38b0a7afeba1bbb7ddacfd23fb1c291cbfaa823270b6608ff17e6844d0917fee0690d24b974b55e9ec2bf3c84453f7df7a484df5aa005cf08fcbeb688aa5351b567b2263addac805a3eb7b0f574a16b676f3f7012072ee9e47a0daa25225f55716de7f0773c19904bf4fdc7e9b04bd45583f6e0db5f16da66d59d471467606f5ce6ec2c5bef3ce302ce311d31e9a40779ff65ff83adfd71f694c9034036ae12a79d19fc585ddbe4e81edf07af48d1df6458e93229dbb8d7b868b3b7f990be7508e2afed723622f0debf4f4862fb65125fc101250bad11eeeaa204c800dfa3079232f90c94154517964546131ba2ebfde7a574775b439a5bea803936b6dd3be063b6721738ff837d23a20aa6750713be1da4341d9299d49b58fcf59d8c067827cddfcb276d0204b50e59f9f1680f3b49b0e91aaec3dc3eb7093d37d0dd051b176718482218565f784980f66ea086eeea4390aaacd13f812de6b2709a735496ed84fb93a6bbe1385aa9bf2996b3dc6e19a78c1c917852d895a439918e19784a2cd76e22e97ac900025fa4e9709491f389a13b2af81c8df53fccb9aaffc00fe22a05d1305f4b9bc17cecd20e53b5b1344bd43abd4e4381a571739afb9ff83065c94bc740903b315d797c533fd1a262547ee66eb7797236e1ab1c62d9ab9ec4dec730e91d8deb98230e43c5b2983097f015a9e30db79e315c52c16641908d30e04faefecb297d9c7f935361bb2bc5c1134d919537b26edacc40b7884437e7fb78b0b09184d4db5719da234c8badc870106f0b8c2ad9f63b9707e258b7d559babc99ad3f740979fbdfaea5002bd4cc664306c21b9703200ca94177ba6fd4d71783d2655e0ba956ecfb0f08b684a04c45e652e83d2ebaa211ea3762903376afdbcb5e82b4a0d6162da17758637615d358f641c16c4d7d998098190f0e6b722ae7e3b8e1535155c5b91e5f7e846a9074716b4999454152666a75a5e6ea7c33860506b5b9bc3b348a5d21f1767152d5404414bb4d32a81bef521bc44f099a544912c1b155d28b1358bf29f4695d800b9542cc58c6a6d8912be90a29931cc8f2ceeeaa97b2c3df56056a163461a07de0d96f0044988820f505266427fc1729a4bc84362c204172a9e881cbaafff6c0a7234d0dc881c1c68071ed45f47c28048c7d7b77b291f488ceff4b532d4d286bd37835b8a43f11a6cf4d0457ca2eee46e2a1f846a6cd3432dff2a389dcf37250d4dbeac5a176996bae433b7853fbfe5410b6c46da432a3548bbcb6d6f8916c819b75db158c37ad5364b244e4baa48034432afe606d6a199e65d3e908e19a057d0bf919d227499c00229556e70501ff1eedf50b6ef0453cebfd339ec51f651081300ff42ebe41d65da38752f2c63b180f7c5d9a60fc29602c22e4ff646b79388a2ee64c9c72ec70ca97915dfef6ae044d500b777cd22a0706242ced55f6fb91608eb4032a7ed2601222e7baeb99df6d3066214f285c0bd9186c2652afd08b3bf8cc0710f31c8ae7baf4e0da2ce81dc9a26f7c02044ea19f4fb218a4eb99ca2eb045247d9111959fbc26f04b9e14939eb8e90458855792fa4b146bcc97ab2bda0a0ca3c545e83bf4e691bacee4315547aa38d044ab8632fb6e47055d05ab9087ac2c80c72369305d7d5ab743beb9514931db563264c2bbbba6cd6081e389cad064f0b96df52279012cbe728d3a809bf9da44137cec37755545570f8055efbb969f6b23db5e572d63e78e1f2dd627bf9887310bdb42b162f2bc73d138da4b39a13dd2c543dc325876edc5b38d086369d4aab516c9f58dc63dc68050afad7d7b18a4b1d176c106177b596c9e92934cd177c4f683bac8e43b1da49c8009ac621b224270ba460a659eb3f507be4216eeea159031ded8c248ef05fb13b40ace86359dd537a2485adae58a306b9b22ce8ea693118f23cf1543e574f5c19116800fb5018f924814ad1ddfc3ef404acff493b2558ec690d9e16639be9edf138679e42825fedd75ee1d2d47f98be0244b5181c3a5142997f889c56db92c7c961a710be1bd2cba110ed6a3d4627ae3d1b85c126801c306f8f004b266abe11f61fc6a3df2fcdeb62ee91e62d0e0f3888287d451ee0fa7462f817f910a81ffa434e616679431340d0c21578a5eb6676eb8b5e38edb6de458c125a1364be6ecc1bebc6e9278d6e093cee8f14f29c6505bd747b4bf6c99f699bd3077063303788d0b53b1f86d62a7d4eab2790aba98c12bff72dfd77a1aaea00b1b3223d5bae6e9f722ad90177444768e7b4baec9a9ad9c61b2f17c9a72fde0bf2f1a84d1fbbe5d58e119ca101711d5825e4df7a3f797ed7c7cb05f7ce577b0d17060b8f6f8201592eaa07fdfbb1185d783f67c5df4b38fa9406e87bdda856adf8a3cbebc87aba4851fd51ba073ea3897291a1f5529e01cb8342f049a9aa62112966679ae1f86d6b0796387ec721e66dc3ee840b74d4d9bee562dbf75ad25aefaca6f516e4f2808e5982374e98a2c281d42faaffe87ecb6f7f3af77b0d61c8a4f70e41335f573c7f0ac4fbe6f306e9dc6c6582a4768a55f4ee93d0a8c532b0400bb2076a46f2d6fec3d2760460c051a651b97947a2a9187bae18b6190e493b3a02d63dbfd670c9264c9ce0988a7ed63e3e74d8aaab3709a76ff961764c2295b40740911ec9039fe4c1f307c853f24cf57802532002b584cfffc3dfb41e50da5805b328905588417e728decb81bf6621f6dbd5ff7cfbffee57b9d99a956fecf06ea9dcd5824908778a77d6a425830237a33a652248ecf336c7539e8baec2031e07bc7cff845aeb71333843e4062a3cfe45cfb4463d8d5fd1a6a50d25dd6b48af40cda511ff462c5122583a55d5648aab9d07f7b75afa3f5c443719f719fdb3c420970858691af482c168ff8124dd803d991614c885b0e955804cbeb7b02247679dcb78bed62888075ba9273ff75b0959ed2f1e0167a7f7bff7c09f157ffd4224abe4ac922669ded67dc1491fa2c4f1afe507b7b29264d5c558585899777d00be99951d997187753f56e5920efe5555e84441c322e83cfc1135f0ce9d167bc8e20fce86683578b86390b1f49b6df9c9f8580955fd11c674738ac70058d6205f614d290fabba63d5f7010549f10ed9e66b7bba58968f2fe56a2a8be461171363c156cdbf371df74a4c27e12dbe92b097856c45a420e72c3857fde397b0d98ddb0e6eb688ab3e6da2f2cc5714ecd0fef120333739f306a2d5d5a180eff8205acf6a35c9c6b43f069ec47c2952ca7b04364afd3ab66d724927bcb6f07d9a2bdb0ea2d3ff9fb2d81c9799cee3c4ab39ce8913a6860c200c13c4765d89689ced2d09f4244c808c409fa0ed482b35789fac256f7796949b2a0310c6ca1d4909e5cf5f3110c92aeda8162cc6719806b7d9e60ac774e1cf650216e6c41893e02e521959669364b8679215acd85e6d6114a91b963e0d9762f082d70063451c13858ff1ad6a25bbd553642e68e94d48d08900c39443489ab3aa6f3afe5cf6971cbeb3283526ef74dc3526c92e21795b0869a04be2cb418bffcf6276344a4855ec6fa3a05627e0aeceb9796b342f80dcaf19604fafd1ea44b605973e5c0abc95e1ba4cbdff6fca101cbc4c0f1a604d7835157b329272949afc0fa1324d66281ab4f18c7e123e076a3a4ac86dba6ae50ad483c458c944628835dd4037ee4e4ecc09a216726dd9e15b980b762874e6de97df3df177c8a70c1c03db768febf52462125f66437046068ffefdb61e95d23fc9ae7dd775fcf8573581b09e816bad13304fb6da214da892fd90a58d9a2e327d4fc3d7895b733685b166101f99c594a8ed72e101fb403212aa39896a61ad7e349e3bc65a71918271dd6e77b839e3b13195e247f611722de866243531d46a553288a61b0409007968b2a7c47212da641247f81ee5793de299d7e435382ad9d4fc3cf14a596da8be21369be07fedeecef681258539cfa0fd0ae9e060697d355d100696e08423296b1a12a69bec317944ec31d95c38eef3e94053d209f6fb8e654745c947b224037e83ab9b116700c5b84e7cbbbe01af6737fafb23743af33aba9563a8da91079291011b4eaebe4bfe1677be800f98c0d20e70c2c032d21544681e772c9d53ac9e7d80bcfd7146ddcb5cc2bd63ca48d628c0f7e6f869cd362b2a90e7db79756344e42eaf1d9cc942007bbbd5dcb0f4835f9783064db6bfb0771dcfee56129d375ac7d8b745539c7b38779b7d982185b9a2b25bacbb168de5005549385dcc2e00e8e71fa7cb365c18a882e912b6f8346d7fa3ee212a39da1efb28d1835ca12a7ba73b7a0cc8770c388e1ef11fb2713c06d7ce6a0699f00ed8d72c17c70a3648de02f987be945fab67ca2bf43cc54a18b95a18eff657dd650a52f2aff4ab79a81bba4565401334803b35c6cb23b57cf8185be41d4255048cab204684fd962bfdb171417ca0f0cab286fdf750871df59880775ca12dd79abdd8ac4b8eacd40b422b4376996cd271751f7b7c72c378b90b75da95e7cb07c5df0148b057a7312823122a8b492db438a1bb7469f69a89e1ebe33d263fc6ba93c53e28df039b13de28cd3a5ba386e1c4369bb59b7fe23dcc660d8d5157d7a4fb62225d783149eb6f9772a209e7ed5d59a7e992138598ff27fd7ba97be4a04d58c07a5b15c2acea3053a7940565444139d39fb3941654646e9c7abdc9e5a39622d8b9b6c2bd2ce61ce2dd99599bd88e5239f28a08c20a1f0047cb0beb6fbbf3d62405bcfcb49a47d9532932c2db97bac9f03f6e753aa80380f2d5fe441d59755b5f5a0031f3bc7e0eea90c68d2ab932d4f27b6a16c7aa72dfebaeae7c3b6d115a37e7e40dfde7779218c1fb917f57c9b3cc271d988d67f90cea461483ca6b76c96cf384c2b23c1b2add1ef45e4172ec6ec694b9873d036542c78a4a25867ca1ff2bec6609cdaf752af98e844e418e6568efc354909d939aac9efacbab2e73c9b3d98b03c4129c7f9169048b1e1e5548fbd93d8f2025a5143445b04399e0d0571a8fc31422fb6112649b325fd82af24d169ac0e606eb9f6deec3a33f270ba30af0fa4abd73726c670195e73296713af722ae11215240454e6bc6959fe4f646ef0c373a57d3411fd64d0120b21b933ae24feedc98960f6b927c36c2cd10e3f5c184e8fb683ff897493e0c9a117840e5d08193ed78f151b63dba15c25f2093b4a941bdc99781edd1e0cbadfea8363adfbcbcc1f213d83ac331805b62daeb87c7352ebe2f29cd8d28e19128948b89c3edaff70492ca5fe667b", 0x1000, 0x4024004, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) 00:08:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x89031, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r4 = dup2(r3, r1) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000000)=0x4018) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:13 executing program 5: r0 = socket$inet6(0xa, 0x100000000000001, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001180)=""/4096, &(0x7f0000000040)=0x1b18) [ 754.173265][T12550] usb 5-1: new high-speed USB device number 110 using dummy_hcd 00:08:13 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x9, 0x7, 0x4, 0x20410008, {}, {0x4, 0x2, 0x40, 0x8, 0x9, 0x2, "3757f82b"}, 0x1af, 0x1, @fd, 0x4}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)=0x458) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x1, @mcast2, 0xc00000}, @in={0x2, 0x4e20, @remote}], 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f00000000c0)) 00:08:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:13 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x3b) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 754.413893][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 754.533468][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 754.541672][T12550] usb 5-1: config 0 has no interface number 0 [ 754.548324][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 754.558877][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 754.570857][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 00:08:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:13 executing program 3: userfaultfd(0x0) unshare(0x8000400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, 0x0) 00:08:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dp\x00', 0x80001, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) unshare(0x20400) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000000000)=""/174) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000180)={{0x0, 0x0, @reserved="0bd1d97d723bdeca23ce8e3729ac6256e5f6a7fe20c2d6a9387c4b7bf569dd63"}}) fchdir(r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x8, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x1}, {0x8, 0x2, 0xbf, 0x6}, {0xfff, 0x20, 0x3f}, {0x101, 0x3, 0x51, 0x1c}, {0x2, 0x34, 0xa5, 0x7}]}, 0x10) [ 754.763548][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 754.773613][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 754.781791][T12550] usb 5-1: Product: syz 00:08:13 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @local}}, 0x9, 0x3ff, 0x10000, 0xfff, 0x44}, &(0x7f0000000080)=0x98) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 754.935875][T12550] usb 5-1: config 0 descriptor?? [ 755.181394][T12830] usb 5-1: USB disconnect, device number 110 [ 755.963123][T12550] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 756.203031][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 756.323284][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 756.331388][T12550] usb 5-1: config 0 has no interface number 0 [ 756.337793][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 756.347601][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 756.358767][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 756.443240][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 756.452450][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 756.460831][T12550] usb 5-1: Product: syz [ 756.466468][T12550] usb 5-1: config 0 descriptor?? [ 756.706360][T12550] usb 5-1: USB disconnect, device number 111 00:08:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:15 executing program 5: io_setup(0x2, &(0x7f0000000200)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1009}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) sendmmsg$sock(r3, &(0x7f0000002400)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x3, 0x2, 0x3, 0x2, {0xa, 0x4e24, 0x2, @remote, 0x3}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="bfcc57fa037e11824e880b0b57c9c933046c", 0x12}, {&(0x7f0000000580)="8a88cefd618cd961a182802a41137f61f3add8d944126e94c12067797e98d31c9a3c784911171a7453994db4d7422fccd2ab4205685ae8ffcf6f6fe6bc8090b44a19f69207ed6d566c74", 0x4a}], 0x2}}, {{&(0x7f0000000680)=@ipx={0x4, 0x8, 0x8000000, "ba05b1e87316", 0x81}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000700)="26a02db3f2d5b88528b8d14f008f6a38ff2140395b0ff8db9399e4299a83ff86fa03cf59a702eda2aa9a9092e097a7d58b792735c578bc56674804c7a176d2f43a2f00105d4f0461ff20479958f2485dfa2bef986f1b90f8c2390c0090f7525c2f6d9887805296526e5ef7e9d49f33f67bac935d040f6158cf23f99518d7024cc93004f86d61c0e029555b66551df8258f67e386db8942033ee250df37caa577f27cecdc1f61de43f1d15d52ae5860f2e8bc2176924d1bf0b83076253dca3190ef865b14b875ff3268862697089fba68167dd5798fb33aa973c39e96821ae4df94406c010f81", 0xe6}, {&(0x7f0000000800)="c7a71324ff0e8e149acbeb09ced374d0aff68371263f0043432c7b4581223945339978a07c74e361f8ba87c7535fd6c60c6dec0a35c41d", 0x37}, {&(0x7f0000000840)="08bb46b45e08119c559d3312d0127768b32097028c7d0402bfcd1ec4ac11c6f9c403da81f2c906d22940cea6185cf3563c1db506b9c11be8d46acac37f2a5dd06a06c18c7f2175d6e2130a7171764342a8462345e49a371fbfd0ae5ebc8ce2452513de771f124fe917f54505", 0x6c}, {&(0x7f00000008c0)="44ed743673068eb476f7a74af9e94cd9090446701eadc3de40acbf119509f601ad49a9d9622eaf3d9af290fff4ffe0dcc687818deea1814bba66fd0427fe412274432b2fd2e88161a03857d4f6b56b948f58c717bf46003c8cd19bee5d9d291fc93afe710d0ab8d84a273d66138ef00848a4c54ee1410992d05efcf0bf131cdd7fa4c556993dad99cde72c78bea3b033a4fd8c2fae47d6957cdcd2c7b654d1458d639ac23322b475864311a27279b9f9d2", 0xb1}, {&(0x7f0000000980)="4b2684d3f4006e39d9ca5dfa391086a8e639", 0x12}, {&(0x7f00000009c0)="9af48fb5ccb989a74911d63a2e71926be863d503c3a16a962c79fe9d1f18059e716513916c74459ce9ab33c5f07f2a", 0x2f}, {&(0x7f0000000a00)="7884e935b3180a9dcf35de6716178b8ec8393ffaacc1a13c78977327d54dceeaefa7f4143b71781fd669e0e6d0dfd0a4126dc5768f882e9c402bd08ca7266f91c3f66fac743acb96e2e6bdc47ae0d23d0051f12f461be1", 0x57}, {&(0x7f0000000a80)="fb3eddc7f65650fa861c4f1b6ae10a1b", 0x10}, {&(0x7f0000000ac0)="1cc49c41664f1a15fbe89bddb5fedb162bf87f9d59fc4b117edaf1e03f99727fb70e282e80af9a78f2381ac48901c3d330d586e7e0d52086ad33b1c7d8210a742cfef7b6a64a953d469de4cb196aea5b88", 0x51}, {&(0x7f0000000b40)="31871485e5dc8213861bd57b576627ae3a1c0e8a767e92a9e22c6cade2d01768", 0x20}], 0xa, &(0x7f0000000c40)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}, {{&(0x7f0000000c80)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000d00)="0d7252732d5ca531b45a3ca578e4a3e3ddf9bc80adbf43f581e9971d1b2495b02e781be51fc2ffe53a3f575a34e1963351e8de56433258", 0x37}, {&(0x7f0000000d40)="b899ae6fd151e5a57839ab568a56bdb2f3da1583e308b838ce51e224c608ab67f61eef7f8252f1994eaa0d01f80cae92d61843cbfca27333901717f29eb0b4d56e405039465f255461da00b7dedc68fedcd5324a5d51c75fa5c2fe0b653c7608bbf8749d3ad91299ff68e081c0e52ce5b512502cc2d10ebc1d68ecad0a62640c87a97c9c4c6ab0df754b700dd95e9646c8ec5454d0695f78450ef2d5d1433482c61156af22905c29aa", 0xa9}, {&(0x7f0000000e00)="8faea6da5457e7c256fa8e2f3bd52be68fc53a940f49d50b234a68719d9e4ab88395b6bc523dd47cc442c5710d14a650111ab8f86cdf17f19d9db69039cfccd34417e98258d0f6e68290ea3ffec4cc58d66915d434", 0x55}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)="9afab49171a4ebfaf80d8e9c71103ce7111e77d6cb6e8ff52e18066b81f829a4a1e30217d2a3f0d2abbe6ea2d9b4366afc371ddfec690f2339209f5282c5a963157008ae8b1973fd83bf5ee7444e81d19d733844e19eafbb39a3ee43f7c1ecd9f6fbe5eecf980c62e6997feee349ae13dd30e24e9d463bc6ff23b664415c08edef600a78e8ebe82a5a62d7a402b89b851ac080666d352b7a5be20a53a46ee665481422c4f1b0e86f2d02646a53fa330e361b8a6afdc80f66b40382d8965ccfecc749005e2ca963f50f1af629ab2ca9f89c2265776bc2f7c2b4b308", 0xdb}, {&(0x7f0000000fc0)="01896255d82e113a6da3623b8d119f0623", 0x11}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="51f8309c70f4e52ec0ba7b3e820d1c42658e3a2328033d84517a2b773ead2c037146bcbc5865c904942812660d4f45432beac13b4acf9d6c5bed670e31bda2e86ffa01ff3656d254f7bada02663a90ea834fce9190f0210f741eb79ed31763ef34acc41cbb5a6834776214b4b0880967caa1206dbdafc2334146ecbc34d4da9380dc4e02247ddadf3072d3357a21d7d34b89d3b39e1c941678d6d0a0", 0x9c}, {&(0x7f00000020c0)="3ea94f03f790f044934de20811c6d477e86b153231ff272242282697f44336e9c01aa7745a71966d1bbc95ba91d0d8741f86bceb175b487454513bd80ce39db48903c8d8e62e0455e68a46be95ba4868059a464c6678d0fec6059c4aad0bbce05b7265a0f80b730cfd627dc899b31dc7845e988d154bbcd656dca197d52dc6a2a6cbc2891e171b4a1e760b67ddf4dddcd2985730226e1437403864e4caeefa12c8fa3a2bf5af9d39fa16c03ae8fdaaaf01a820dcecbf76ddc18a0e1e3850a0d66e6928af354c11f42a232dfb7233d431e75b9c83de02064ba60e3e131d615f0bade568", 0xe3}, {&(0x7f00000021c0)="cc92f0656702bf2494a796a411f51c2fd6ec4d7c635fa0f8078b297b2c1657ad9ecbc2b785e3144129886fe33a7cd5ca03354d25d3d97d450f6dbd9debe1fdab8c87ef0004e7b6912bf15d41621880311ef79fbadef793be8113503c768404fa73037176efc4c51d008b35285ccd645b3a84003b1b3f211904391d919eb28e68ebc5f947e113753c7736cf811d1a047684f82990acdc330f32ee83205351661b58dc945fdbed286a4c167a1574e6cc783cd3ec0ddc3ee14ded24ec934a84c472cccd8fc9a137bdca4cf7f17a5a76974eb5762d89a696417a6b4600f9d8bd4de1a5a49d7b054ca0456ce23bfda34bd739899645a54ea5391f60d8", 0xfa}], 0xa, &(0x7f0000002380)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xc4}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3e64}}], 0x78}}], 0x3, 0x800) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r8, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) signalfd(r8, &(0x7f0000000080)={0x100000000}, 0x8) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_GET_SREGS(r9, 0x8138ae83, &(0x7f00000002c0)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x82, &(0x7f0000000040), 0x8) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x65}]) r11 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r11) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r11, 0xc0a85322, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f00000001c0)=0x3, 0x4) 00:08:15 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x705, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fa511863bde81ae}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ARP_IP_TARGET={0x10, 0x8, [@rand_addr=0x1ff, @rand_addr, @empty]}]}}}]}, 0xffffff93}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{}, {}, {}, {}, {}]}) 00:08:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x5, 0xe77, {0x56, 0x2, 0x35, {0x7, 0x1f}, {0x200, 0x6}, @ramp={0xaf, 0x800, {0x5, 0x0, 0x40, 0x1ff}}}, {0x0, 0x400, 0xfffd, {0x7, 0x71}, {0xd7}, @const={0x80, {0x8001, 0x9, 0x1, 0xec33}}}}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:15 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x5, 0x4, 0x1, 0x7, 0x6, 0x200, 0xffffffff, 0xd659, 0x4, 0x3, 0x3, 0x20, 0x40, 0x5, 0x4, 0x23}}) 00:08:15 executing program 4: syz_usb_connect(0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0) close(0xffffffffffffffff) r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x6}, {0x4}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000040)=""/117) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x0, 0x0, 0x146}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x100000000000008d, &(0x7f0000000600)}}], 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x23b5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x5, 0xff, 0x100}, &(0x7f00000001c0)=0x5ee, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x1}}, 0x10) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r3, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r4 = getpgrp(r3) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x3bd8, r4}) 00:08:16 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009ccd5e08cb060300be5c000000010902240001000020000904340102096de70009058acfe2368f7df1940000dca5a1a80a711cb100000080a576046436e6dc2c235ad8df403c2cf8cdf7b7be90e3d597772a2b977522380aafaad6ce954746fc74159cffeef34e6aabe108652328ff1f93b520a8527ff596318d3e716a4eb0c6bac741fba0ece0c0a0fc4cdda455875667973b24d1a8a1452dc15800adc21774350d66cb3602f30000000000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) statx(r1, &(0x7f0000000000)='./file0\x00', 0x1000, 0x2, &(0x7f0000000040)) 00:08:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYBLOB="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"], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYBLOB="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"], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000013000/0x2000)=nil, 0x2000}) 00:08:16 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xad2722136e71f88a, 0x4010, r2, 0x0) bind(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @broadcast}, 0x80) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) fcntl$getown(r3, 0x9) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x1) recvmsg$kcm(r4, &(0x7f0000001600)={&(0x7f0000000100)=@x25={0x9, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/161, 0xa1}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/118, 0x76}], 0x6, &(0x7f0000000600)=""/4096, 0x1000}, 0x40000120) 00:08:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYBLOB="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"], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 757.403392][T12550] usb 1-1: new high-speed USB device number 51 using dummy_hcd 00:08:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x25}, @FRA_FLOW={0x8}]}, 0x30}}, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c, 0x80000) 00:08:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000000)) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20c800) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 757.632499][T28563] netlink: 'syz-executor.5': attribute type 22 has an invalid length. [ 757.653507][T12550] usb 1-1: Using ep0 maxpacket: 8 00:08:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000000)="2c6825c0200b2ecfc2135f845b7026ab36a53a22f3d84e876d0d91c492f1452d0b920435ab5f7c0f6928b657f65196c4f37ae869a43e56547d1b4e674dd1832012e1e11f3abd755723cdd9d8150e4b5be70eea0bd3874c", 0x57) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 757.706140][T28563] netlink: 'syz-executor.5': attribute type 22 has an invalid length. [ 757.783335][T12550] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 757.791568][T12550] usb 1-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 757.802087][T12550] usb 1-1: config 0 has no interface number 0 [ 757.808420][T12550] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 143, changing to 11 [ 757.819861][T12550] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1762, setting to 1024 [ 757.831230][T12550] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.844332][T12550] usb 1-1: config 0 interface 52 has no altsetting 0 [ 757.851157][T12550] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=5c.be [ 757.860486][T12550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.877707][T28684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.004290][T12550] usb 1-1: config 0 descriptor?? [ 758.046088][T12550] hub 1-1:0.52: ignoring external hub [ 758.265404][T12550] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input36 [ 758.583556][T12550] usb 1-1: USB disconnect, device number 51 [ 759.233163][T12550] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 759.473099][T12550] usb 1-1: Using ep0 maxpacket: 8 [ 759.593378][T12550] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 759.601600][T12550] usb 1-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 759.613811][T12550] usb 1-1: config 0 has no interface number 0 [ 759.620030][T12550] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 143, changing to 11 [ 759.631567][T12550] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1762, setting to 1024 [ 759.643015][T12550] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.656093][T12550] usb 1-1: config 0 interface 52 has no altsetting 0 [ 759.663062][T12550] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=5c.be [ 759.672169][T12550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.681980][T12550] usb 1-1: config 0 descriptor?? [ 759.724637][T12550] hub 1-1:0.52: ignoring external hub [ 759.944997][T12550] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input37 [ 760.023336][T12550] usb 1-1: Failed to suspend device, error -71 [ 760.030791][T12550] usb 1-1: USB disconnect, device number 52 00:08:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:19 executing program 3: r0 = userfaultfd(0x0) unshare(0x8200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) write$nbd(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="6744669800000000020001000400000093a051605684d628782aca9684bb16c8ed7e4ef63c5ce5079a2454716b5abbfc7e2e199c9536220c23bf1262a64ce5a78343b525117fb55b7a03aa232ac9986519a5c320ad9343352eb683e5eb3213b01b141a7a10243d3d4c42bf3ca5943bdc5a478b6710a0911fd893d15d7b5380ca97474d7313b6c8f63a53a81c5c2dd11ca997b1cecbae3313f6123abf49e082acb645bb932434bd89b73a7798ff9147e7d508b95afd7714ad164287977052c49dd0ba51dc9c914b82b285e4203d538914eb3df4bb5f8b6061b5c6321faaaf47b9094d086ca83ae659fd6da701e162bcb423ae1c548ef5a16636773f6656fda5bb2e74dc62e49cd08cae3b5b2681187c203e31b35eaf5f7fa9b6880467a87b9cd10cfb7607e72f024af2f024690de2747dd3193141e15fbca64e31ba743d0b8dd0a757b7681170e43afc630402aeece5284423788910baa48c81743c1cc04968bcaf8f71f94bf0ede84919fab989154331ab1242b10d895a9b0175a0d1f8a07c6ba1"], 0x78) 00:08:19 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) r4 = fsmount(r3, 0x639976c578bc6df7, 0x4) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x180}}}}}]}, 0xff86}}, 0x12000000) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r14, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'caif0\x00', r14}) r16 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r16) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r22, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r22, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000f6ff9528000000aa99145f4439436fb9843ebeee7d6cbd", @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r23 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r24 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x402800, 0x0) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket$nl_route(0x10, 0x3, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r28, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r30}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r27, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r30, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r26, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r30, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r25, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r30}}, 0x20}}, 0x0) r31 = syz_open_dev$radio(&(0x7f00000007c0)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000002040)={@initdev, @initdev, 0x0}, &(0x7f0000002080)=0xc) sendmsg$nl_route(r6, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002140)=@newlink={0x1fc, 0x10, 0x705, 0x0, 0x2, {}, [@IFLA_XDP={0x1dc, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x18, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2008}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xba8c73f00003d8c0, 0x9, 0x3, 0x12, 0xffffffffffffffff}, @map_val={0x18, 0x4fa6048747da909d, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xa, 0x1, 0x0, r2}, @ldst={0x1, 0xc4f8d8c0c04f3454, 0x1, 0x7, 0x5, 0x80, 0x1}, @map={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x6d5f, 0x5f, &(0x7f00000001c0)=""/95, 0x41100, 0x1, [], r15, 0x0, r16, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xf, 0x1ff, 0x400}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0x10, 0x4, &(0x7f00000004c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x3, 0x0, 0xe, 0x9, 0x6, 0xffffffffffffffe8, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xd, 0x7, 0x3, 0x18, 0x10}, @jmp={0x5, 0x1, 0xd, 0x9, 0x7, 0x8, 0x1}], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x5, &(0x7f0000000540)=""/5, 0x41100, 0x1, [], r22, 0x3d0d0c84fcaf3911, r23, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x9, 0x7, 0x30}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0x17, 0x8, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x692d}, [@jmp={0x5, 0x1, 0x9, 0x0, 0x0, 0x100, 0xfffffffffffffff0}, @generic={0x4, 0x8, 0x9, 0x75, 0x7}, @map={0x18, 0x6, 0x1, 0x0, r24}, @exit]}, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x65, &(0x7f00000006c0)=""/101, 0x61900, 0x4, [], r30, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xe, 0x7, 0x80000}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0xb, 0x2, &(0x7f0000000800)=@raw=[@map={0x18, 0x6, 0x1, 0x0, r31}], &(0x7f0000000840)='syzkaller\x00', 0xffffffff, 0x42, &(0x7f0000000880)=""/66, 0x40e00, 0x1, [], r32, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000020c0)={0x1, 0x2}, 0xfffffffffffffd7f, 0x10, &(0x7f0000002100)={0x0, 0x8, 0x1f, 0x7}, 0x10}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8055}, 0x0) 00:08:19 executing program 4: syz_usb_connect(0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0x0, 0x3ff]) linkat(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x1800) 00:08:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r0, 0x7004) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000507ca8500000000000000030000", @ANYRES32=0x0, @ANYBLOB="fffe000000000000080020000600000025001200080001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) [ 760.841456][T28732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 760.852458][T28733] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 00:08:20 executing program 3: r0 = userfaultfd(0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xbf, 0x800) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0xa, 0x1a, 0x2, 0x7, 0x9, 0x8, 0x0, 0xcc, 0x1}}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r4, 0x0) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r5, r6, r7]) write$P9_RGETATTR(r2, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x102, {0x22, 0x0, 0x8}, 0x9d3514b9563620f5, r4, r6, 0x392, 0x2, 0x10001, 0x6, 0x5, 0x1, 0xff, 0x1, 0x7, 0x20, 0x400, 0x2, 0x80000001, 0x8, 0x7}}, 0xa0) 00:08:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) write$FUSE_POLL(r3, &(0x7f0000000180)={0x18, 0x0, 0x7, {0x5}}, 0x18) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000000)={0x7, 0x80000001, 0x7, 0x0, 0x0, [{r1, 0x0, 0x8}, {r4, 0x0, 0xfffffffffffffff8}, {r5, 0x0, 0xfffffffffffffffe}, {r6, 0x0, 0xd40}, {r7, 0x0, 0x93}, {r0, 0x0, 0x2}, {r1, 0x0, 0x5}]}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) write$P9_RATTACH(r8, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x40, 0x0, 0x7}}, 0x14) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:20 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffc, 0x9, @local}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x9}, 0x1c) r2 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000440)={0x8001007, 0x3, 0x1}) syz_emit_ethernet(0x83, &(0x7f0000000200)={@local, @random="bfba1f3617fe", [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) r3 = semget$private(0x0, 0x2000000010a, 0x0) semop(r3, &(0x7f0000000080)=[{0x4, 0x6}, {0x4}], 0x2) semctl$GETZCNT(r3, 0x0, 0xf, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f00000001c0)=0xe8) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x80880, 0x0) write$P9_RVERSION(r11, &(0x7f0000000380)={0x13, 0x65, 0xffff, 0x10000, 0x6, '9P2000'}, 0x13) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r9, r10, r12]) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x9, r5, r7, r8, r12, 0x6, 0x7}, 0x400, 0x3ff}) 00:08:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 761.266644][T28979] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7e20000ff29301afaf5d483e7597c9fbadf40b3efffc00f"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0x44e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe64}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0xc000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000340)={0x4, 0xfff, 0x9}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20ncci\x00', 0x188f38e7fb8e0015, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f00000001c0)={0xc, &(0x7f00000003c0)="ee0f4f15e7dcc9510f9f514f5d22c8976deea90ae481d9217e26dd7af36eab9497fbc19574db2cd3471fd08d0b531e042b88e495dfbf6532f56b37c640a754d6aa500398f52c2026ee2c467e5199a50f51d33c5190bb7ae15386787c1bc38f4ea8b43bf8e8698fa19d9f0f640df3fc84c38cd7041bfabc2314225146b6be1bdb06c07196dc365b00abe00ed761bb5ab3744b269d29d7a4d4f7de0ead4c11bc71dcac414c4db1f94c1bd1b04893a3c93d365b2f497770e2431a1d866d2949d1a75dc266232a7562afda6c"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x600000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20000804}, 0x21) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x30, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="d3fb653f184df25843b5baea4fa5ebef"}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 00:08:20 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x5a1, 0x8}, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x20010, r0, 0x1) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:20 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x3, 0x6, 0x9ac4, 0x400}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x1000) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:08:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) madvise(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x9) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0xb, 0x4, 0x1, 0x21, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_sec_ctx={0x17, 0x18, 0x5, 0x8, 0xab, "d92b781a4fc1da3d7a1711785cb894ab9a1576ccb4412331419d8689860a2c8faf061c1810aadc144280634eab354e41aa95e442da2c97eecc2f747648e912887de4d91eabf88cd06838f8e576a9182c45360d6461a97bbe38d687e7c67754a8015523149c9f9f3eafc396d66f678ce86560a1cdbcfe171785f77422e15913328018bb886ed50c323d6ae8005f12f4a9361d3f07209cc1406fb94c8ac3f8359c51fb6362521427ae73c796"}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0x3, {0x6, 0x33, 0xa6, 0x5, 0x0, 0x7, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1}}]}, 0x108}}, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fchmod(r0, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 00:08:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, &(0x7f0000000140)=""/224, 0xe0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x401, 0x9, 0x7fff, 0x9, 0x5, 0x101}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f00000002c0)="030400000300600000000000fff57b016d2763bd56373780398d537500e50600591f301ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000000d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) 00:08:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0x2}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:21 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000f, 0x110, 0xffffffffffffffff, 0x8000000000000) r0 = userfaultfd(0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xd4, 0x400) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000140)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = socket(0x8, 0x1, 0xaa) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x40, @remote, 0x3f}}}, 0x84) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@remote, @local, 0x1, 0x3, [@multicast2, @multicast1, @local]}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="2ffef0276f43a4dff98556e6f20aff3ce18f9590e6ddd50996b8121faae40290cc59a45f4eaebf6a0f82052b0e5fc9139fad90d43cc6c35f9173ce30ac854d72a4c473380f64ab251449c4e266e5d13712dddad8c6d14f2e2769b2d1b44d6d308d61bf70de5e6f87ea119a0072f408677004e763", 0x74}, {&(0x7f0000000140)="b3646eb07f62c48c35f5d9b1eb9d90ac7c54d8123875f422947d3fa08d43766724a4d01d78974490ee58253afc5b1b61692aa46b40fecce1124b3d4c4d87605844d791cfcee050fb792944b23a85671efd4b0fc14219299be66da68b6837dac852420911e9374e37d5e4243c9d56521e48c73037c26c5d7cf485186b3426ed55efc9d3d7a08987e6ced6852b6465a1204470e195e63d00a99c732c56d98b9be85013c3e5169264860ef12b55cd545bae59a34ef3280fb16a18e5dfdbe9388b3e9f91a2ebd28cd2a34e97766989", 0xcd}, {&(0x7f00000002c0)="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", 0x6bb}], 0x3}}], 0x2, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) 00:08:21 executing program 3: unshare(0x2020000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/119) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) io_setup(0x9, &(0x7f00000003c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r5, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) io_setup(0x9, &(0x7f0000000440)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) r9 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r9) r10 = syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000001800)={0x0, 0x6, "124916668990d43e057763b5fe81c2db479736c5de093f63c719ed451330f9f1", 0x1, 0x4, 0x8, 0x1000, 0x8, 0xffffffe0, 0x8, 0x5, [0xffff, 0x1a, 0x4, 0x9]}) fchdir(r10) io_submit(r6, 0x3, &(0x7f00000016c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x4, 0x5, r7, &(0x7f0000000480)="65b345170e90f11d664709d2df950cc4adf16dd11e4f8cf5626cdd556f4b34908898dce3fa169741a6dcfe032c7b5e345e7298b3a99ef95c9a7a09541e11fa42c9f7", 0x42, 0x0, 0x0, 0x0, r8}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0xfff8, r9, &(0x7f0000001700)="20e22ec6ef7966ad8aa780fcc23a62257d0c44f8068c9d4c42b0aeab6b2f7b7b5af6491019a96a6f1a21230c11149b655bb0d2787d59b3a929323ac95bbb2ee0441fc88266627a3fe51cf40c91fba6efebf055a9d05d59804c13b93c7ad605973dceb1c7bbae587ba118c68b58e9fe69b7f0530aba0bbc96cf3ee918f8aa4f7ac507b2bd9d2aca3a8d7befe527ba070454d48e4f2720cebe22ea55e7579d5a2d0161502e556fb802dc424bcf58baf228df8cc232230aae481f6aa33d1c824841c6f3e3db50d7", 0xc6, 0x20, 0x0, 0x0, r8}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3, 0xff, r0, &(0x7f0000000680)="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", 0x1000, 0x8, 0x0, 0x3, r10}]) io_pgetevents(r4, 0x100, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000000), &(0x7f0000000300)={&(0x7f00000002c0)={0x7}, 0x8}) membarrier(0x40, 0x0) fchdir(r1) r11 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x9, 0x600000) ioctl$LOOP_GET_STATUS64(r11, 0x4c05, &(0x7f0000000140)) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x24}, 0xae4}, 0x1c) 00:08:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:21 executing program 2: munlockall() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, r0, 0x5) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:21 executing program 2: mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x13000)=nil, 0x13000}) 00:08:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 762.313496][T12830] usb 5-1: new high-speed USB device number 112 using dummy_hcd 00:08:21 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0xffb8}}]}, 0x138}}, 0x0) 00:08:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r2, &(0x7f0000000200)="d3a54eabd2c66874d93b07", 0xb, 0x7ff}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0xd13, r0, &(0x7f0000000280)="877e48f3b64cb764d6f80ff900e8518097bf62b4c53767bca0254fce6a8f2e84c0f6292aaa94cd7d0fdc0a0f8393c5a63f4169fd053d98e3a3cc81de56e14a8a8fae0cdfc67482f1b0adea73951bb50c09ed9f9f1af7212036927c97bb29732c3723d1889ddd2125c7adae713202b83918e14ef6d82a7010e265f5cceda64517d157c4c2899ff851c7ce436f7217f239251932203dfdedd0f276476557222fb8590b24ffc086c1862edcba082f5dcf9e38099756a7bf7d0e2f66cb479dd16d9612c2bfd08f4e7492204d7c5e8dd17bbe39d94681162adaed74f3b77195dd6eb51537915e208803c604", 0xe9, 0x100, 0x0, 0x1, r3}]) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r5, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x18, 0xfffffffd}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r7, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) pread64(r7, &(0x7f0000000080)=""/32, 0x20, 0x49) write(r4, &(0x7f0000000040)="200000001a000100000000000000a00080000f00000000800000000000002000", 0x20) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)={0x1, 0x0, [{0x1001, 0x47, &(0x7f0000000100)=""/71}]}) [ 762.553457][T12830] usb 5-1: Using ep0 maxpacket: 8 [ 762.564899][T29475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 762.589961][T29521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 762.681429][T12830] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 762.690028][T12830] usb 5-1: config 0 has no interface number 0 [ 762.696493][T12830] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 762.706454][T12830] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 762.717916][T12830] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 762.883493][T12830] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 762.892658][T12830] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 762.901067][T12830] usb 5-1: Product: syz [ 762.909076][T12830] usb 5-1: config 0 descriptor?? [ 763.306106][T12830] usb 5-1: USB disconnect, device number 112 00:08:23 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x89, 0x7, @buffer={0x0, 0xa4, &(0x7f0000000100)=""/164}, &(0x7f00000001c0)="624c47bfd5b61a9399298656a262dd16d007f82cb66fcde739c2efdfa004e07d6b3004dfb975712fd54bcf9fe84d0789deb645c46f883524891f94c38f5e405ffc02ab02d9013807f69c1057744d340524d40d4ca1bdd7c4067c4466f81e439701b014ad22bd295ab2b8c930cb0ee85b3a590789b29da8c925a2948eee1e31bfe7f5bcec1073bbeaea", &(0x7f0000000280)=""/59, 0x2, 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x100, 0x14) fanotify_mark(r0, 0x80, 0x40000002, r2, &(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') 00:08:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r1 = gettid() lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4002, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000180)=""/11, 0xb, 0x7c6, &(0x7f0000000240)={r3, r4+10000000}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000140)='./file0\x00') tkill(r1, 0x1000000000016) 00:08:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$peek(0x1, r1, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0xfffffffffffffff2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000140)=""/211) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r5 = dup3(r4, r0, 0x80000) ioctl$PPPIOCDISCONN(r5, 0x7439) 00:08:23 executing program 3: userfaultfd(0x0) unshare(0x8000400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000000)={0x3, 0xfffffffc, 0x1, 0x8eb, 0x7, 0x9c8}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) ioctl$UFFDIO_UNREGISTER(r4, 0xc020aa04, 0x0) 00:08:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r5 = dup(r4) ioctl$RTC_WIE_ON(r5, 0x700f) 00:08:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000140021010000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r3, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) sched_rr_get_interval(r3, &(0x7f0000000000)) 00:08:23 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x406000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/183) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002740)='/dev/snapshot\x00', 0x123001, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)={0x1}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffffffffffffffb3) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) [ 764.685081][T12550] usb 5-1: new high-speed USB device number 113 using dummy_hcd 00:08:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000140021010000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x1) r0 = userfaultfd(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:23 executing program 3: r0 = userfaultfd(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0xb0, 0x8, 0xff}) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 764.993145][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 765.153577][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 765.161863][T12550] usb 5-1: config 0 has no interface number 0 [ 765.168215][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 765.178085][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 765.189201][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 765.293601][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 765.303711][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 765.311849][T12550] usb 5-1: Product: syz [ 765.318255][T12550] usb 5-1: config 0 descriptor?? [ 765.726575][T12550] usb 5-1: USB disconnect, device number 113 [ 766.493049][T12550] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 766.733162][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 766.853243][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 766.861290][T12550] usb 5-1: config 0 has no interface number 0 [ 766.867867][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 766.877770][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 766.888870][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 766.973240][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 766.982707][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 766.991133][T12550] usb 5-1: Product: syz [ 766.996705][T12550] usb 5-1: config 0 descriptor?? [ 767.237364][T12550] usb 5-1: USB disconnect, device number 114 00:08:26 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c250f30882050300eef70010000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d6940700000000000000edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000ffd07d800000000000000cea3734a255a9022e06d9f881e568f37834854a6b657de46947c5b750c5992eb9b42efbe6484e9fb8fe73537d3d7c426b0c3f0945e3f7cce0e12202925759a6f880f546deb7dda3f1842978c7f155bd21abe210b5e3a7e31a5f09c2acd0f72caa045ebbc25303b003cc989f8a0117ee866bb0c729aa607b3f2115a8c9c43f5426c48ef40cf171a1ce6254d2a46272cd361af71c92db01a91fe8f532368812b0f383b5d2c33f1ad6bfe32db5301f593d265c68faf66cbd5d7022b6fd411c9700c4ae172e57ac6d94e2949067fff31318f11203b89c09ecbdd000000000000"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x50000000, 0x820840) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0x81, 0x4, 0x9}) close(r0) 00:08:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) write(r0, &(0x7f0000000140)="6ea811cb52e36f5a56a9074044fa81253b302a05c4caae1e89abed9b5303c153330e73909bd5da7a70400ebebf600b3825e0b4dab12f5d4158da1619bcc7184f089ca1deb75bb8b5cc2b61ffd894b243ff5808339f84eb1ebf3f921a155dfba2d95c2cd3cf560962910cd244d73a9c2dc7a82305d630587aa631f7e2ac775e777eedf97e6f658b02834051705283d2b8ac015e4700000000000000e089a143b87b", 0xa1) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 00:08:26 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x18) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0x2, 0x33d, 0x401, 0x6, 0x1}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x0, @empty, 0x4e23, 0x4, 'wrr\x00', 0x1, 0x9, 0x7b}, {@remote, 0x4e23, 0x0, 0x4, 0x64, 0x7ff}}, 0x44) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x9c, "303191facc87672db9ca8d1df1c91acfeea3e83a872eac5e236d43e942e3d261eedb016bed875f55de6fac60377588e14e64153cc9745b01d02ec496b49b989548aae44cd912c3ca28d67708c2c980f83c12082b512e798f8771fe5c735dc4bf12945ddebc6d36a48abf2707d9a0c62cb9104682ae6f5b4b588c1e302b613757bfa88b48a76528ac4f3d9a6e2f5a7728a8ef46ae62324fc4e27e24cd"}, &(0x7f0000000240)=0xa4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) waitid(0x2, r2, 0x0, 0x2000000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x1080, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xd5, 0x8000, 0x4b, 'queue0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x901482, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000480)={0x7, 0x5, 0x0, [{0x324, 0xf9, 0x7, 0x6, 0x3f, 0x7f, 0x8}, {0x8000, 0x7, 0x1cb187b7, 0x4, 0x80, 0xfa, 0x2}, {0xb320, 0x1f, 0x7f, 0x9, 0x2, 0xda, 0x6}, {0x1000, 0x5e6, 0x80000001, 0x3, 0x0, 0x20, 0x1}, {0x7ff, 0x1, 0x2ae0000000000000, 0x8, 0x0, 0x81, 0xfc}]}) r4 = syz_open_dev$vbi(&(0x7f0000000600)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000007c0)={0x7, @win={{0x10001, 0xfffffffb, 0x1, 0x4}, 0x6, 0x2, &(0x7f00000006c0)={{0x1, 0x8, 0x5, 0x7}, &(0x7f0000000680)={{0x59, 0x5, 0x0, 0x3}, &(0x7f0000000640)={{0x1, 0x9c, 0x1ff, 0x80}}}}, 0x3, &(0x7f0000000700)="700db12fcd073d54094698fbf2daf26d47eb976709fa5c4ed29dc2db73f263a0078d416dc40d13a0144808cb3f6812830b9ac945fe5ff781dd06d3dd83dd8d6b3291b4890f15981fff42eca7da1177b79d961e540c8734637c5153eec0a334bfd0f8144cebff92bef9898505fd301410473f6293b2a8f40a90d6b7411017c820632869dfc1093e02f3067f827751962d48b2dad0016dcc0e57ea5bfdfd808212f0007f85398a", 0xde}}) r5 = syz_open_dev$radio(&(0x7f00000008c0)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000a00)=0xe8) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000a40)={r6, @multicast1, @multicast1}, 0xc) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000a80)={0x28, 0x2, 0x0, {0x3, 0x9, 0xffffffffffffffff}}, 0x28) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)={0xe, 0x7f, 0x6, 0xfff, 0x140, r7, 0xee, [], 0x0, r5, 0x4, 0x5}, 0x3c) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/uhid\x00', 0xc99618bc2f65f04c, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000c00)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_IRQ_BUSID(r8, 0xc0106403, &(0x7f0000000c40)={0x9, 0x2, 0x800, 0x4}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x6001020}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004801) eventfd2(0x400, 0x5afa8b1d28922b47) r10 = socket$inet6(0xa, 0x4, 0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/vga_arbiter\x00', 0x98400, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r11, 0xc0945662, &(0x7f0000000e80)={0xffffffff, 0x0, [], {0x0, @reserved}}) 00:08:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000140021010000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:26 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5, 0x1cb}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000a80)=@assoc_value={r5, 0x8}, 0x8) prctl$PR_SET_UNALIGN(0x6, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000a80800005806000040010000580600005806000018050000d8070000d8070000d8070000d8070000d807000006000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/96], @ANYBLOB="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"], 0x908) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000ac0)=0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) ioctl$KVM_ENABLE_CAP(r6, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x0, 0x4, 0x8001, 0x7fffffff]}) 00:08:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x396, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x5, 0x0, 0xa01}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 00:08:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x7fff, 0x8, 0xd82d, 0x6, 0x20, 0xaf}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:26 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x4a, 0xf8, 0x10, 0x763, 0x2001, 0x9270, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x0, 0x0, 0xff, 0xf8, 0x39}}]}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, &(0x7f0000000040)=0xa1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0', "50e8ff56bee54fad84ae48911101945426e4a09a901d766b8d33f089d0c2a2274fd2dead0c2046a618657a1a35d73f8682856b78bbcafbfd30aa0c926721c82cad0f2ec2eeef821ca762f93d4b2eb8fcff419ca77c95af2e875c18dbaf4bd1c786824c80517fcc8541238d61d0d9a9823c1370356767a022b04ad7669e3a4f573224650a83fddfb78f5ffa93e0f83b6a77dc8a1b7708b8cb4524b3d9d8e38aa894d0ee97ccd020160b2e567606e37c842b7c68ca634bff7e721391dbf54886cf0559ae"}, 0xc7) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x8000) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1a5c00000000) 00:08:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 767.783605][T12550] usb 5-1: new high-speed USB device number 115 using dummy_hcd 00:08:26 executing program 2: mbind(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x8, 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x400000)=nil, 0x400000}, 0x4}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:26 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x203, r0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) [ 767.985100][T12830] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 768.023764][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 768.143261][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 768.151531][T12550] usb 5-1: config 0 has no interface number 0 [ 768.159361][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 768.169409][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 768.180595][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 768.244501][T12828] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 768.253500][T12830] usb 1-1: Using ep0 maxpacket: 16 [ 768.273412][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 768.282634][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 768.290996][T12550] usb 5-1: Product: syz [ 768.296557][T12550] usb 5-1: config 0 descriptor?? [ 768.373275][T12830] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 768.381391][T12830] usb 1-1: config 0 has no interface number 0 [ 768.387806][T12830] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=92.70 [ 768.397053][T12830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.408398][T12830] usb 1-1: config 0 descriptor?? [ 768.483649][T12828] usb 6-1: Using ep0 maxpacket: 8 [ 768.613345][T12828] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 768.621808][T12828] usb 6-1: config 0 has no interface number 0 [ 768.628138][T12828] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 768.638031][T12828] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 768.649167][T12828] usb 6-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 768.662298][T12828] usb 6-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 768.672488][T12828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.684415][T12828] usb 6-1: config 0 descriptor?? [ 768.708718][T12830] usb 1-1: USB disconnect, device number 53 [ 768.719681][T12550] usb 5-1: USB disconnect, device number 115 [ 768.930443][ T30] usb 6-1: USB disconnect, device number 41 [ 769.453009][T12550] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 769.483256][T12830] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 769.693230][T12550] usb 1-1: Using ep0 maxpacket: 16 [ 769.723076][T12830] usb 5-1: Using ep0 maxpacket: 8 [ 769.733165][T12828] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 769.813171][T12550] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 769.821243][T12550] usb 1-1: config 0 has no interface number 0 [ 769.827625][T12550] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=92.70 [ 769.836984][T12550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.847910][T12550] usb 1-1: config 0 descriptor?? [ 769.854690][T12830] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 769.862798][T12830] usb 5-1: config 0 has no interface number 0 [ 769.869134][T12830] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 769.878995][T12830] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 769.890047][T12830] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 769.994810][T12830] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 770.004346][T12830] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 770.012493][T12830] usb 5-1: Product: syz [ 770.019613][T12830] usb 5-1: config 0 descriptor?? [ 770.025272][T12828] usb 6-1: Using ep0 maxpacket: 8 [ 770.128690][T12550] usb 1-1: USB disconnect, device number 54 [ 770.165353][T12828] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 770.173579][T12828] usb 6-1: config 0 has no interface number 0 [ 770.179906][T12828] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 770.190123][T12828] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 770.201925][T12828] usb 6-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 770.215606][T12828] usb 6-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 770.225375][T12828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.254393][T12828] usb 6-1: config 0 descriptor?? [ 770.267512][T12830] usb 5-1: USB disconnect, device number 116 00:08:29 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4100c1, 0x40) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x3a, 0x5, "49d51d4693bf05a765fa2c79ab943b18e8c61a27e429c54b7ebb36f70b1460f039237e45db1426fc9b42eea260aef3557c0a"}, &(0x7f0000000100), 0x1600) close(r0) 00:08:29 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) write$eventfd(r1, &(0x7f0000000040)=0x4, 0x8) 00:08:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:29 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95)=0x8, 0xfffffffffffffe91) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000002000020256105a440000102030109025c0002010000680904000001020d000005240600df05240000000d240f0100000000000000000002241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302feff000000"], 0x0) 00:08:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a00", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:29 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl(r0, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80080, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r9, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x34, 0x52, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040000) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:29 executing program 5: socket$nl_route(0x10, 0x3, 0x0) [ 770.749646][ T30] usb 6-1: USB disconnect, device number 42 [ 770.884917][T12550] usb 5-1: new high-speed USB device number 117 using dummy_hcd 00:08:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a00", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:30 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000300)='environ\x00') exit(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x33b7) fchdir(r2) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000)={{0x7, 0x81}, 0x9572b47ed267d61d}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 00:08:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a00", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 771.123280][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 771.133041][ T3380] usb 1-1: new high-speed USB device number 55 using dummy_hcd 00:08:30 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x8, 0x3, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0xffff, 0x2001, 0x10001, 0x200]}) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r2, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r4 = fcntl$getown(r3, 0x9) r5 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x7e, 0x40) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000001980)={0x0, 0x1000, "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"}, &(0x7f0000000400)=0x1008) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000500)={r7, 0xb0, &(0x7f0000000440)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x8}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x7, @rand_addr="66abd8ddf1081b3bcc1535b083875305", 0x3}, @in6={0xa, 0x4e20, 0x7f, @empty, 0x1}, @in6={0xa, 0x4e21, 0xa7, @mcast1, 0x8000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000540)=0x10) r8 = getpgrp(r4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r10 = syz_open_procfs(r9, &(0x7f00000002c0)='i\x02\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r11, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000640), 0x13d}}, {{&(0x7f00000072c0)=@caif=@util={0x25, "cc90a168021a60d7fb71a4b7b4e7ba4d"}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fchdir(r11) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r10, 0x0, 0xc, &(0x7f0000000080)='/dev/nullb0\x00', 0xffffffffffffffff}, 0x30) r12 = getpid() r13 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r13) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r15, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r17, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r18, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r19, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYRES16=r15, @ANYPTR=&(0x7f00000029c0)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYRES32=r16, @ANYRESHEX, @ANYRES16, @ANYRESHEX=r8, @ANYRES16=r2, @ANYRESOCT=r4, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="208000000000000000b0e890", @ANYRESOCT=r17, @ANYRES16, @ANYRES16=r18, @ANYRESHEX=r2], @ANYRES64], @ANYBLOB="9fe0d2558bd23b7f35202a068d15a728c9ca932bcca5a344a58253bbac8a6a164ecdd21860", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRES16], @ANYRES16=r11, @ANYPTR, @ANYRES16], &(0x7f000095dffc)=0x7) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f00000005c0)=@assoc_value={0x0, 0xd31}, &(0x7f0000000580)=0xda) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x10000}, &(0x7f0000000340)=0xc) r20 = syz_open_procfs(r12, &(0x7f0000000100)='z\v\xba\x16\xaa\"\xc3#dt\xda\xd0m.0\xce!!\xf2\xb3\x06-h\xaf\x88\xbf\xe6L\xb5Jx+\xdf\xe7E[\x16\xe5\xa3\x15H\x181\xc0\xbb\xb1\xd6YE\xa1\xb4\x12p#P\xef%\xd4\xb7f\xee\xc1@\x81\x1aN\x81t\xaa\x86\xf2\x82\xe2\xc8Q\xb3\xb0\x16*\xc9\xaaDA\xed\x9fd\xa6MA*\xbdJs\xeb\x1fwA}\xc3\xf1kI\xf1\x17z[\x10\x01\x06\xe2Vpa\\\xb2x*\x01\xb1\x82\xfe\xf8rL\xbf\x0f\xd7\x99\x02\xafO-,\xaa\bSG;\xcc\xd4\xd4\xea\xc4\xc6\xf2\x1f\xde\xc6|\xc4\xfay\x13\xf3\x19@\xd1\xbc\xdb\x90\xd4\x88\x02W\x05\x97\xa2\xbdO`L\xadg\xa7\xc6\v\xa32\xe6\xc1\x9e\x1br\xc9xFF\xdc3\xb4\x83\xcb\xc7\x8f7\xc1\xc3S\xff\xff\xff\xffj\xbdS\xe5\xed[\vU\x96C\x03\xdd\xf5\xb6\x85\x86\xe1\xac\xf8\xfc\x8e\xae\x1b\xf7\xc9y3sjG\xa12I\xa7\xc6\x05<\xf9\xf3\xa71\xb2dp\xa6\xfd\x19\x05>\xca\\R\xca\xa7\xads\xc3\xba\xbe\b\x9f\xac2R\xb2i%\xaa{\xe5\xa0\x01\x9f\x99\xa5\xdcY\xaa\xfd,\x1d\x90\xfd\xb7Z\x10\xce\xc1 \x13\x13\xab\xe0ja\xd6\xab=\x15A\x13F4\xcc\xc1\x1f\x1c\xfb\x97\xa4\xeb\x82\x9f\x98\xc6\x9c\xe3\x89\xde\xda\"\'g\xfb\x00\xd9\xfa\xc0b>K{\xa1-=\xfa\x00'/354) socket$isdn(0x22, 0x3, 0x22) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x40000, 0x0) fchdir(r20) ioctl$sock_inet_udp_SIOCOUTQ(r20, 0x5411, &(0x7f0000000000)) [ 771.243752][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 771.252074][T12550] usb 5-1: config 0 has no interface number 0 [ 771.258513][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 771.268520][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 771.279665][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 771.395416][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 771.404905][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 771.413580][T12550] usb 5-1: Product: syz [ 771.418705][ T3380] usb 1-1: Using ep0 maxpacket: 32 [ 771.426386][T12550] usb 5-1: config 0 descriptor?? [ 771.544266][ T3380] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 771.553506][ T3380] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.563960][ T3380] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 771.573306][ T3380] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.743339][ T3380] usb 1-1: New USB device found, idVendor=6125, idProduct=a405, bcdDevice= 0.40 [ 771.752612][ T3380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.762679][ T3380] usb 1-1: Product: syz [ 771.767477][ T3380] usb 1-1: Manufacturer: syz [ 771.772143][ T3380] usb 1-1: SerialNumber: syz [ 771.807059][T12830] usb 5-1: USB disconnect, device number 117 [ 771.815612][ T3380] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 771.822386][ T3380] cdc_ncm 1-1:1.0: bind() failure [ 772.016685][ T3380] usb 1-1: USB disconnect, device number 55 [ 772.583175][ T3380] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 772.803482][T12830] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 772.823059][ T3380] usb 5-1: Using ep0 maxpacket: 8 [ 772.943355][ T3380] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 772.951537][ T3380] usb 5-1: config 0 has no interface number 0 [ 772.958378][ T3380] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 772.968767][ T3380] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 772.980386][ T3380] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 773.053094][T12830] usb 1-1: Using ep0 maxpacket: 32 [ 773.073454][ T3380] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 773.082684][ T3380] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 773.091021][ T3380] usb 5-1: Product: syz [ 773.096609][ T3380] usb 5-1: config 0 descriptor?? [ 773.188578][T12830] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 773.197843][T12830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.208191][T12830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 773.217641][T12830] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 773.382566][T12828] usb 5-1: USB disconnect, device number 118 [ 773.390195][T12830] usb 1-1: New USB device found, idVendor=6125, idProduct=a405, bcdDevice= 0.40 [ 773.399663][T12830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.407842][T12830] usb 1-1: Product: syz [ 773.412049][T12830] usb 1-1: Manufacturer: syz [ 773.416836][T12830] usb 1-1: SerialNumber: syz [ 773.464749][T12830] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 773.471517][T12830] cdc_ncm 1-1:1.0: bind() failure 00:08:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) syz_usb_connect(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64], @ANYRESOCT, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES64]], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r2) 00:08:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a0000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000000)=""/41, 0x29}, &(0x7f0000000080), 0x20}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x1ff, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4e7, 0x30, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 00:08:32 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1e1e) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000000)={0x3f, {{0xa, 0x4e24, 0x5, @local, 0xffffffff}}}, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 773.679800][T12828] usb 1-1: USB disconnect, device number 56 00:08:32 executing program 3: r0 = userfaultfd(0x101000) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) pause() ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x8b63dc08840bfd0, [], "c47a51078c4d49e31b76631b7ead04e7"}) 00:08:32 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @rand_addr=0xc15}, @in6={0xa, 0x4e23, 0x400, @mcast1, 0x2}], 0x6c) 00:08:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a0000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xc5}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000200)=0x6e) fchdir(r3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @mcast2}, 0x1c) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x402400, 0x0) ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000000180)=0x1000) [ 773.923210][ T3380] usb 6-1: new high-speed USB device number 43 using dummy_hcd 00:08:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a0000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000000c0)) fcntl$notify(r0, 0x402, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r2, &(0x7f0000000080)="1c0000005e001f0214f9f4ff08b3a1fe000000010100400040030000", 0x1c) 00:08:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) io_setup(0x9, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)='\'', 0x1}]) r4 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x4, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x3, r4, &(0x7f0000000180)="4a6d25b05c839be1a1ed52a6ae5e39ed6a6d1ba4b5195af1db8dfc6f26544384a9d53c0df39e824a6f809cf06f063b21db413dc556520cb773ac6d5fc155b537cd973e7270f66a84c87059400140f612f90736af26dc4715f093a718377957f584c5113b571e5c749f8054cc43857868876bb3400556378f96f2dd4f9088", 0x7e, 0x6, 0x0, 0x1, r5}, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x10051, r6, 0x80000000) r7 = userfaultfd(0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) r9 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r9, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) ptrace$poke(0x4, r9, &(0x7f00000000c0), 0xfffffffffffffffe) fchdir(r8) r10 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x542fcb6f, 0xaa200) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x30}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 774.244193][T30821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 774.283557][ T3380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.294725][ T3380] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 774.308330][ T3380] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.40 [ 774.317577][ T3380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.381930][ T3380] usb 6-1: config 0 descriptor?? 00:08:33 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) write$P9_RRENAMEAT(r1, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) 00:08:33 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x7530}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 774.866233][ T3380] elo 0003:04E7:0030.000F: unknown main item tag 0x0 [ 774.884408][ T3380] elo 0003:04E7:0030.000F: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input0 [ 775.067799][ T3380] usb 6-1: USB disconnect, device number 43 [ 775.074447][T12550] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 775.313083][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 775.433182][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 775.441407][T12550] usb 5-1: config 0 has no interface number 0 [ 775.447892][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 775.457699][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 775.468842][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 775.553301][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 775.562397][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 775.570776][T12550] usb 5-1: Product: syz [ 775.578821][T12550] usb 5-1: config 0 descriptor?? 00:08:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4602}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) 00:08:34 executing program 3: unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) 00:08:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:34 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) fchdir(r2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xa, 0x4) [ 775.688246][T30939] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000040)="0f20e06635000001000f22e0660f71d300dadec4c3c5cf600b010500002e660f388209677d00640f1a070f01df65670fc79b00580000", 0x36}], 0x1, 0x0, 0x0, 0xffffffffffffff15) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000a00)=ANY=[@ANYBLOB="05000000000000007bf1551f07000000bd164466000000001f000000ce3c00009f0100000000000000000000000000000b40000007100000020000007c0700000100000006000000ff030000000000000000000000000000070000000000d69d6e"]) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r10, 0x0) setresuid(r7, r8, r10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:08:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x7) fchdir(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) [ 775.986284][T12550] usb 5-1: USB disconnect, device number 119 [ 776.171047][T31074] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:35 executing program 3: r0 = userfaultfd(0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x406000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/113) unshare(0x40000) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:08:35 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0xf7d9a74487f12a09, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) [ 776.631123][T31372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 776.773244][T12550] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 777.013108][T12550] usb 5-1: Using ep0 maxpacket: 8 [ 777.133196][T12550] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 777.141439][T12550] usb 5-1: config 0 has no interface number 0 [ 777.148031][T12550] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 777.157937][T12550] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 777.169041][T12550] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 777.273490][T12550] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 777.282778][T12550] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 777.291165][T12550] usb 5-1: Product: syz [ 777.317401][T12550] usb 5-1: config 0 descriptor?? [ 777.556862][T12550] usb 5-1: USB disconnect, device number 120 00:08:36 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/534], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 00:08:36 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) 00:08:36 executing program 5: r0 = syz_open_dev$mouse(&(0x7f00000053c0)='/dev/input/mouse#\x00', 0x251, 0x8400) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000005400)=0x9, &(0x7f0000005440)=0x4) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)="390000001300090468000700ff3f0300020000007a75976429b9f6bf1a00060010050f000000021000080000a002d60d1571a4000000000000", 0x39}], 0x1) 00:08:36 executing program 3: r0 = userfaultfd(0x0) unshare(0x24040400) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:08:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) 00:08:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x8457a90586394051, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) readv(r5, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000300)={r6, 0x3}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000100)={r6, 0x3}) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4e, 0x2}, @rumble}) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 777.879381][T31382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) 00:08:37 executing program 0: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)='\x00', 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x5) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) mprotect(&(0x7f000047e000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f00005d2000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000089d000/0x4000)=nil) 00:08:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='em1user\x00', 0x8) r1 = userfaultfd(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) set_tid_address(&(0x7f0000000080)) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x480000, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r12, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @remote, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000340)=0xe8) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r20}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r20, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r20, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r20}}, 0x20}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r26}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r26, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r22, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r26, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r21, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r26}}, 0x20}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14, 0x800) r28 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r28) getsockopt$inet_IP_IPSEC_POLICY(r28, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x25c, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r12}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r20}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x80, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xd5}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r27}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r29}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 00:08:37 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x40000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x100, 0x4, 0x2, 0x0}, &(0x7f0000000080)=0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x1, 0x0) move_mount(r3, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x3}, 0x8) [ 778.153425][T12828] usb 5-1: new high-speed USB device number 121 using dummy_hcd 00:08:37 executing program 5: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x8, 0x2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007bdf86401aeb0128e8280000000109021b00010000000009048000016e95db00090584050000000000"], 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vsock\x00', 0xc80, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000029c0)=""/28, 0x1b}, {&(0x7f0000000680)=""/43, 0x1a6}, {&(0x7f0000001740)=""/109, 0x6d}], 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6e, &(0x7f0000000740)="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", 0x1000) syz_usb_connect$cdc_ncm(0x2, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0x7f, 0x0, 0xff, 0x1}, 0x3d, &(0x7f0000000200)={0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0xe, 0x0, 0x2, 0x5, 0x6f, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xb, 0x4, 0x5e}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "10a7e19eb6c0f85e86b5d5e47ef680d1"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x56, 0x8, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x28, 0x8, 0x4, 0x9}]}, 0x8, [{0x79, &(0x7f0000000240)=@string={0x79, 0x3, "417f44190cd36a4876810208fd0d8a53aecbb279b00b6935cfa2867abfb06a79c44e0ab69d74dec739b0810be7813951a9543683f8f0b54cbd9674b57035952ea69182235d3f61f4ec52547c529b95ed74f670a365e59058c093399241ee28fb0cf3164c79cafa369ef9b65a2e0a864fe98c137ee91217"}}, {0xee, &(0x7f00000002c0)=@string={0xee, 0x3, "b65afed47b0a3133056db61287e1063e3715cacb49518932b4d9828cca5a3c5b7d8866eb39b11d5cf37d4ca9f857775be6cd6e097507ee8b392338d2f21ecd1d73f45e936350a243b191e5bc294b85ac69292ff26526c9718c4eb7a0dbe26c3250542773263637f114fa43e627de51f0d507a24d2ada57b1536b93d4dac1e0e9ce9be88ff23f77cf7f5c387c61d232d503368ae91752ba6e5529fe3bacf09b135ecb02aff5792c382369eeb9330d92318bda789272d70e2c69a6fb1f45ae24080fcd78c982df42a0f40c548b4292d2a63e67be26f5b05c7d57c4b1c0dc4c211334540172a8e3d30fee7c3033"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x104d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40a}}, {0x2, &(0x7f0000000480)=@string={0x2}}, {0xa6, &(0x7f00000004c0)=@string={0xa6, 0x3, "4c959736166dd7ac5c71424176ccb3e7ad727fbb12616db8fec7eb569e5c8f8b921aeca4ee0729f7bed93d7fc4969c4fe825efc10c72e08206a1e90e18c8dcd7b794f34d5e01a4713ebdb11b73b4719c2b1745246603bf7d8f9e16a7a06a6a0f5cf7733ae4a4afbeb0abcee731a85b36393817b656258bf1268e930e77b4b200f08dd3d8eff091b0399f50eb9dfd845540b672e2a36c13ed436efae0b36169268d184c85"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41a}}]}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002980)=[{&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/83, 0x53}, {&(0x7f0000001900)=""/100, 0x64}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x4) 00:08:37 executing program 0: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)='\x00', 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x5) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) mprotect(&(0x7f000047e000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f00005d2000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000089d000/0x4000)=nil) [ 778.424189][T12828] usb 5-1: Using ep0 maxpacket: 8 [ 778.543749][T12828] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 778.551949][T12828] usb 5-1: config 0 has no interface number 0 [ 778.558277][T12828] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 778.568131][T12828] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 778.579265][T12828] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 778.623360][T12550] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 778.663712][T12828] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 778.673008][T12828] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 778.681281][T12828] usb 5-1: Product: syz [ 778.693193][T12828] usb 5-1: config 0 descriptor?? [ 778.983358][T12550] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 778.991795][T12550] usb 6-1: config 0 has no interface number 0 [ 778.998121][T12550] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 779.009520][T12550] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=28.e8 [ 779.018904][T12550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.031324][T12550] usb 6-1: config 0 descriptor?? [ 779.098431][T12550] usb 5-1: USB disconnect, device number 121 [ 779.277499][T12828] usb 6-1: USB disconnect, device number 44 [ 779.873136][T12828] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 780.113165][T12828] usb 5-1: Using ep0 maxpacket: 8 [ 780.244037][T12828] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 780.252333][T12828] usb 5-1: config 0 has no interface number 0 [ 780.258642][T12828] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 780.268445][T12828] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 780.279611][T12828] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 780.363372][T12828] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 780.372642][T12828] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 780.385240][T12828] usb 5-1: Product: syz [ 780.390690][T12828] usb 5-1: config 0 descriptor?? [ 780.681363][T12550] usb 5-1: USB disconnect, device number 122 00:08:39 executing program 0: syz_emit_ethernet(0x92, &(0x7f0000000000)={@local, @broadcast, [{[], {0x8100, 0x3, 0x0, 0x2}}], {@ipv6={0x86dd, {0xe, 0x6, 'v$Q', 0x58, 0x21, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8b85c6", 0x0, 0x29, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x1f}, [], "199b98955ebdb2a72dd50695e130d1284587e9eed454beaeb0a21fcb44d176e6fb8ef4ccef68dfb2"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80000, 0x0) 00:08:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00'}) 00:08:39 executing program 3: r0 = userfaultfd(0x800) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:08:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = userfaultfd(0x80000) dup2(r0, r2) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:39 executing program 5: syz_emit_ethernet(0xfffffffffffffe7b, &(0x7f0000000000)={@local, @dev, [], {@generic={0x6003, "6edcdf26c3d4f61e74227be048b52475b3825fad07c4"}}}, 0x0) 00:08:40 executing program 4: r0 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x3fffffd, r0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) clone3(&(0x7f0000001400)={0x2200000, &(0x7f0000000000), &(0x7f0000000300)=0x0, &(0x7f0000000340), 0x21, 0x0, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/94}, 0x40) r2 = getpid() r3 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x200000000bf, @time={0x77359400}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x4058534c, &(0x7f0000000280)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0xc0bc5310, &(0x7f0000000380)={0x1100, 0x0, {0x1, 0x3, 0x0, 0x0, 0x1}}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000015) r4 = syz_open_procfs(r1, &(0x7f0000000000)) fchdir(r4) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000080)={{0x2, @addr=0x3ce}, "84f7d10289c1f4f124119172aa19bbc5848aba1d9209e7d433e1b6f31d9cb6e1", 0x2}) syz_usb_connect(0xea0acc1f817ab927, 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200a00, 0x0) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000001440)=""/96) [ 780.978913][T31936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:40 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x10001, @mcast1}, {0xa, 0x0, 0x0, @empty, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0xfffffffffffffe47) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) 00:08:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:40 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x406000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/63) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'na\nh\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x2, 0x2e0, [0x20000740, 0x0, 0x0, 0x20000770, 0x200009f0], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x358) 00:08:40 executing program 3: r0 = userfaultfd(0x0) r1 = dup(r0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)="40fd279213604edb8c813e9f3f770c235ac1caf4da5bf789a82dcb8409a3cc205b22a511e272a74d8c938b2b2ff954d589adf0272a7403021078ab3570f9e9b67f7ebf67d8aa2232c8bcf8f3608ca2554a84a55520f85b15193611f1ede705b84b4bdf9d630383d55df713238f6db8ad0250501488cbad92f7ff3c4b1e97fe02f6fe9ab48ad91d9b3ae5ad417d7553bd2bc7222a671c1702827d11073b8f5fc0522817612893624e2de290c97ffd64d4") ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x4779, 0x4, 0x1b, 0x20, 0x24000000, 0x20, 0x2}) unshare(0x20000) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:08:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00'}) 00:08:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffeff, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@dev, @in=@multicast1}, {0x200000}}}, 0xb8}}, 0x0) [ 781.460725][T32166] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 781.519778][T32172] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 781.556983][T32192] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 00:08:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}}, 0x5, 0x40, 0x2, 0x2f3, 0x10000}, &(0x7f0000000140)=0x98) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) fchdir(r1) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x0, 0x2, 0x0, {0x8, 0xdd0f, 0x3, 0xa7e}}) 00:08:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) 00:08:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00'}) 00:08:41 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) umount2(&(0x7f0000000000)='./file0\x00', 0x2) [ 781.928384][T32387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:43 executing program 4: syz_usb_connect(0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) fchdir(r1) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000300)={0x955, "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"}) 00:08:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000980)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffee) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r7, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fchmod(r7, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000100000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f00000002800210400"/20, @ANYRES32=r6, @ANYBLOB="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"], 0xf0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x64, &(0x7f0000000600)=ANY=[@ANYBLOB="b700000009edffffbfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000004e040000000000005e400300000000006504000001ed000067000000170000001e44000000000000630a00fe000000006e00000000000000b7000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138aac1cb8521ca03a8e43dd5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d3572e674047e29faf75ddd1aa96960bca97ab13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cabf0d378fce8c5c81b7037181fc2f18f781aaa6e2957d7e38cc1badddd7ec6667e699f24e41697ee7ea23c4b29a8b6cc9a1f5a7bb2b1ed81d2cf370ee4a2a00ebeb476ea3caae05f13832292cb949b3aab2ab1e042ff2164d80c60559bb18ab1c156b97e5889685a96949e4cb4f8f67b8bb8dfff8f4b25243888e8b0020e733a63784ccc214d930cbb7e090d63fcd7071b53ac29df656f8ae6d6e18c1eacf5bf870768d5217e9bb7a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cb5229fd67c7133a9f05954cde298a35ea6d715ba80aee6335eb811a085ca14a7989f9777f605eaa7b05765afd3efee86f05debc1838a8bf6dc84ae9ff3f9e033fc95445ba8baf360a1b329a8924f3efca4139f52aa3f6b25a1a1e6add0a856a603724e7eba717adb540fec62757cc8982b62c6c8c7070d"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x6, [], r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x20000, 0x1}, 0x10}, 0x70) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f00000009c0)='sit0\x00') mknod(&(0x7f0000000a00)='./file0/file0\x00', 0xe181, 0x2) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc0082c25}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@getnetconf={0x14, 0x52, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r10 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r10) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000c00)={0x8, 0x0, [{0x100, 0x9ec1b9269fdc3090, 0x0, 0x0, @sint={0x2, 0x2}}, {0x3ff, 0x3, 0x0, 0x0, @msi={0xffffff15, 0x5, 0x7fff}}, {0x7f, 0x3, 0x0, 0x0, @adapter={0x9585, 0x1f, 0x7, 0x6, 0x200}}, {0xffe000, 0x4, 0x0, 0x0, @irqchip={0x800, 0xf54}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x94, 0x5}}, {0x80, 0x3, 0x0, 0x0, @sint={0x1, 0x4}}, {0x2, 0x1, 0x0, 0x0, @adapter={0x0, 0x45d1, 0x7f, 0x9, 0x3}}, {0x6, 0x0, 0x0, 0x0, @sint={0x8, 0x2}}]}) ioctl$EVIOCGSND(r10, 0x8040451a, &(0x7f00000005c0)=""/42) 00:08:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/devo#\x00', 0x0, 0x2) syz_open_pts(0xffffffffffffffff, 0x40a000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 00:08:43 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x400, 0x8000) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000000100)={'syzkaller0\x00', @ifru_hwaddr=@dev={[], 0x10}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6b960000", @ANYRES16=r3, @ANYBLOB="000429bd7000fddbdf250600000008000600090000000c000100080004004e20000070000300080003000000000014000600ff020000000000000000000000000001080004000600000008000300010000001400060000000000000000000000000000000000080007004e24000014000600ff0200000000000000000000000000010800010000000000080008000900000040000100080006006e71000008000800ffffffff0c00070024000000010000000800050003000000080004004e21000008000500030000000800090058000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x11100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc4, r3, 0x200, 0x70bd26, 0x6, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xc23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x27}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1eb0250df06a902d}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = dup(r0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000040)='\x00', 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r5) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ff3000/0xc000)=nil, 0xc000}) r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) write$P9_RWALK(r6, &(0x7f0000000180)={0x4a, 0x6f, 0x2, {0x5, [{0x4, 0x3, 0x3}, {0x9eea875b707708c2, 0x4, 0x7}, {0x80, 0x1, 0x7}, {0x1a, 0x1, 0x7}, {0xaadb9f848e3b8ed5, 0x3, 0x1}]}}, 0x4a) 00:08:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) init_module(&(0x7f0000000000)='[$\x00', 0x3, &(0x7f0000000040)='\x00') 00:08:43 executing program 1 (fault-call:9 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 784.880019][T32502] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.5'. [ 784.899376][T32511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 784.953369][T32511] FAULT_INJECTION: forcing a failure. [ 784.953369][T32511] name failslab, interval 1, probability 0, space 0, times 0 [ 784.966459][T32511] CPU: 0 PID: 32511 Comm: syz-executor.1 Not tainted 5.4.0-rc2+ #0 [ 784.974490][T32511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.976265][T32511] Call Trace: [ 784.976265][T32511] dump_stack+0x191/0x1f0 [ 784.976265][T32511] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 784.993387][T32511] should_fail+0xa3f/0xa50 [ 784.993387][T32511] __should_failslab+0x264/0x280 [ 784.993387][T32511] should_failslab+0x29/0x70 [ 784.993387][T32511] kmem_cache_alloc_node+0x103/0xe70 [ 784.993387][T32511] ? br_get_link_af_size_filtered+0xac/0x910 [ 785.023072][T32511] ? __alloc_skb+0x215/0xa10 [ 785.023072][T32511] __alloc_skb+0x215/0xa10 [ 785.023072][T32511] rtmsg_ifinfo_build_skb+0x150/0x400 [ 785.023072][T32511] rtmsg_ifinfo+0x112/0x260 [ 785.023072][T32511] __dev_notify_flags+0x114/0x830 [ 785.023072][T32511] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 785.023072][T32511] dev_change_flags+0x1d6/0x260 [ 785.023072][T32511] devinet_ioctl+0x12f2/0x2a10 [ 785.023072][T32511] inet_ioctl+0x602/0x840 [ 785.023072][T32511] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 785.023072][T32511] ? tomoyo_init_request_info+0x40a/0x470 [ 785.023072][T32511] ? inet_shutdown+0x5f0/0x5f0 [ 785.023072][T32511] ? inet_shutdown+0x5f0/0x5f0 [ 785.023072][T32511] sock_do_ioctl+0x108/0x5e0 [ 785.023072][T32511] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 785.023072][T32511] sock_ioctl+0x981/0xf90 [ 785.023072][T32511] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 785.023072][T32511] ? sock_poll+0x450/0x450 [ 785.023072][T32511] do_vfs_ioctl+0xea8/0x2c50 [ 785.023072][T32511] ? security_file_ioctl+0x1bd/0x200 [ 785.023072][T32511] __se_sys_ioctl+0x1da/0x270 [ 785.023072][T32511] __x64_sys_ioctl+0x4a/0x70 [ 785.023072][T32511] do_syscall_64+0xb6/0x160 [ 785.023072][T32511] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 785.023072][T32511] RIP: 0033:0x459a59 [ 785.023072][T32511] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 785.023072][T32511] RSP: 002b:00007fe7cfa7fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.023072][T32511] RAX: ffffffffffffffda RBX: 00007fe7cfa7fc90 RCX: 0000000000459a59 [ 785.023072][T32511] RDX: 0000000020000080 RSI: 0000000000008914 RDI: 0000000000000006 00:08:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b1, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18ffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f5650731dfaf04004000000000004b15a9fdd6c1610c621c85fe3e348527b0f3750aad0ccebab7574c992693682e661a4c25866458a27f4b01202edce5a81542a5fd4d7f61884d3e1c1670e08e7c658b7edde3a9a116"], 0x18}}, 0x0) close(r0) [ 785.023072][T32511] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 785.023072][T32511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7cfa806d4 [ 785.023072][T32511] R13: 00000000004c5a90 R14: 00000000004da6b0 R15: 0000000000000009 00:08:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_pts(r0, 0x4000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) read$FUSE(r3, &(0x7f0000000140), 0x1000) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/sco\x00') ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000040)={0x6, 0x9}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r6, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) fremovexattr(r6, &(0x7f0000000080)=@known='system.sockprotoname\x00') ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:44 executing program 1 (fault-call:9 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="080008000000000014000200000000000000000000000000000012011400010000f7000000000000421342b5f0e481b6e7a293d188450000ffffac1e0001140006000000000009000000000000000000000076bb23e958a1f8eff7e2b5dff276e78ad848566e41a76a6fa1bc2c2564bbe4157c02b26432a0e3330f57f63bbc42a79be52e962198569731002fa01bbaea2acf8e7dbca7646dd281b6ddf0c100ba7a89b6da747ea2c4cf6db45fb24cd4dcf49ff7ff02bf394b3d39339aa273c70b310cb26c64076166c60b46f68bc1f99e96f7503b8cb8f1af3d5141ae80ab6588e0381284999ea5476f79e8f1ede1441829a62fea031460431e519e689fb464350bcc9caeb1ea98f203f8292fbf30cd74b6fa87c9784164fa5331a737a220cdf14486be14005cb3a105949dad0bf9cfc5611209de2095f1"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:44 executing program 3: getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000240)=0x8) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x7fff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000001c0)=r0, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0x0, 0x7ff, 0x0, "75e7e6b9608268aa54ca0adb73bbb86925443e215f7c9dfe6261af159f8e34e496b3310f39a26f77d746d7f88b0e670db7d8559d5d39dc59caee7b647fdcc6e2bd722080e60e1ab389d694e275fdf33a"}, 0xd8) 00:08:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x6, 0x1000, 0x2, 0x3, 0x6}, &(0x7f0000000000)=0x98) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r5 = dup3(r4, r0, 0x40000) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r6) ioctl$UI_DEV_DESTROY(r6, 0x5502) 00:08:44 executing program 5: r0 = socket$inet(0x10, 0x2, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r2, r3, r4]) getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, r4]) setfsgid(r5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffec7, &(0x7f0000000000)=[{&(0x7f0000000140)="24000000010407031dfffd946fa2830020200a0009000100041d85680c9a7ea20400ff7e2800000011e7892c987ee5e015e915929090d1ffffba010000000009b356da5a80d18be34c8546c8", 0x4c}], 0x1}, 0x0) [ 785.580408][T32731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:44 executing program 4: syz_usb_connect(0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 00:08:44 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x10000) r0 = userfaultfd(0xc00) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5, 0x1cb}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={r5, @in={{0x2, 0x4e22, @rand_addr=0x82}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 00:08:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) fchdir(0xffffffffffffffff) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x8) 00:08:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'veth0_to_bon\x00', 0x3002}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x20200, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x303) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000c00)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r5, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0)=0x10) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2000, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "cead077df6f8869a", "b30a0a0e1742bd57e33e9dac3b24eef415576ce20b6fb6edbb1d1af29555615d", '_)MV', "4f7b50a5121e6bb6"}, 0xfffffffffffffd4d) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1010306) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r8) write$binfmt_aout(r3, &(0x7f00000003c0)={{0xcc, 0x20, 0xf7, 0x18b, 0x363, 0x9, 0x320}, "134fe5cb2c7e7dcae995ddd6b332d05abd26b886cc", [[], [], [], [], [], [], [], []]}, 0x835) ioctl$DRM_IOCTL_CONTROL(r8, 0x40086414, &(0x7f0000000000)={0x2, 0x9}) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000240)={0x1, 0x3, 0x1000, 0xe7, &(0x7f00000000c0)="3b48b4c40314e8f260e5c4cb179a923ffc10c1178f31ed8f5342ed448a3f77c39133191b1f632723f00a0cbc12365d71f295bce384a5beaaae96c0972cb286b5307e8aa9b0b451e03207319c292d5e52b9e6081b3b58f6fb2b3fcc61cba370849e9023ac8bd986c4353df602d30e7f1f7730d2a204b004a69aa9fb1e68ef43351f53347da0c2de475259ba65d1acc9147726a9d8dd41f114eea3ce71b16309c16ef274e4662b7b9f4e0ba5fd8a9ceef800fdd7ab16c846cec6833d98514ad17975c9f8e8c1618e901553ff7a854f75fde3469c73d28c7db1450988d632c11cbbfee2e082ae7a26", 0x6b, 0x0, &(0x7f00000001c0)="bcc0d42dcdd9c8f7bd09b21310e73a09efa17ea47da642e639f5a8810797b5f061820898e1dac46ad4b03757af0408cdf7d3d2934d76f7b549a2e1fe863e2c6e0c2495ed78ac1e87d08239866df65d17f7cf04a211ae42ffaa56aadfde3a371916b8995e5d25d8ac5928e8"}) close(r0) 00:08:44 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000280)={0x3, 0x9, 0x9, 0x4, [], [], [], 0x7f, 0x7ff, 0x9, 0x8, "20bd4d26125d464e567d8befffaf9b4e"}) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x0, 0x1, 0x0, "f37dfe5b37edc321881258b33a24336b94f143df7205a5bd87eec643f3a89bc8868d0bc83e96b267916d330bc07f86d0b459563216bd88fac164beb8508022ac9a3ddb1a32e7e29281189935841afe45"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x80c00, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000040)={0x2, 0x6a}, 0x2) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r3, 0x4, 0x42800) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 00:08:45 executing program 3: r0 = userfaultfd(0x0) unshare(0x48000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 786.003505][ T488] IPVS: ftp: loaded support on port[0] = 21 [ 786.006734][ T487] sctp: [Deprecated]: syz-executor.2 (pid 487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 786.006734][ T487] Use struct sctp_sack_info instead [ 786.021984][ T485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:45 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) r0 = userfaultfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) pwrite64(r1, &(0x7f0000000080)="ec", 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) ioctl$UFFDIO_UNREGISTER(r3, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000014000/0x2000)=nil, 0x2000}) 00:08:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setuid(0xee01) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80200, 0x0) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0xfffffea8) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x202000) sendto$inet(r4, &(0x7f0000000440)="60ab91bee5681f2cfefd81bb78fc36e100d15764a5c1e145278bc1aa3f8032483df70b79ed0d9d4fb809002b4bf982d9cceaa2af93b3aeb799dcfd2a689d20a8e4a528d206e3e61077bac90ad94a8fddfb683e87952f788e5e145a8505f04142a54c37ff8ab6aa4a460c5060f3eba1ca1f44c58688825e7b5d6eb110ce481190d935f8e84131700f59094eeae4d84e77218e0ec30d6be2138de786e3a1d997d66104c6cf1eae1899c32c6e784afbe0600c147f63f254035416cc86be372b2af4ca48366f5bfb18d6a1efacb23b90910563438fbbd08dae48788f93e8924f06b946371de6608fb76db7e7978cecc35367f9131b5dba5ae75a7d", 0x6dc1bd9f, 0xc0, 0x0, 0x142800) 00:08:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x502}, "6f6fa8af87d6b98b", "5dcd9c67ad27a02987167d492b0532fb434e092eca577c2c407865250ce62c3a", "edb3a049", "502e1a8925823c11"}, 0x38) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[]}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000280), &(0x7f00000002c0)=0x30) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="66b9ce09000066b80000000066ba000000800f30baf80c66b841fa618d66efbafc0cec660f3881850000baf80c66b8021b038366efbafc0ceccef30f1efb0f07260f01ca0f01c50f20d6", 0x4a}], 0x1, 0x1, &(0x7f0000000200)=[@dstype0={0x6, 0x1}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:45 executing program 0: socketpair$unix(0x1, 0x1000000000008, 0x0, &(0x7f0000000080)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1, 0x8, 0x8000, 0x6}, 0x8) fchdir(0xffffffffffffffff) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffffffff, 0x10840) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x1) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000202000f1f000002002808000800040004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:08:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") mknod(&(0x7f0000000140)='./file0\x00', 0x80000000000c6, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:08:45 executing program 3: r0 = userfaultfd(0x0) unshare(0x30000) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000100)) fchdir(r1) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x8, @sliced={0x1, [0x8, 0xf061, 0x7fff, 0x4, 0x20, 0x7, 0x3ff, 0x34b1, 0x3, 0x4, 0xbac, 0xffff, 0x4, 0x7ea2, 0x0, 0x81, 0x101, 0xfffc, 0x3, 0x2, 0x100, 0x20, 0x101, 0x800, 0xfffd, 0x3f16, 0x7fff, 0x9, 0xfb6, 0xffff, 0xffff, 0x101, 0x401, 0x3f, 0x40, 0x0, 0xb, 0x4c4, 0x101, 0x7, 0x7, 0x5, 0xfffa, 0x4, 0x6, 0x401, 0x8000, 0x9], 0x9}}) [ 786.630277][ T809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 786.680602][ T813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:08:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) syz_usb_connect(0x0, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="6b444ee97c81645248d1f3976b6cce96f7292adf184193c5cfece180363f167fffb834159fe604980b4736f21782ef0549c71f7f2ba646cdd7966b15ecff2f33b6afeca378689644e40215f3ec601e44f9544a7ca9808d08caa65d43298ad8", @ANYRES32=r0], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 00:08:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c2248d6d4ca370184341aea449a0ce90a000000", @ANYRES32=r5, @ANYBLOB="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"], 0x5c}}, 0x0) getsockname$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:46 executing program 0: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x49, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x3, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x36100, 0x0) epoll_create1(0x80000) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) 00:08:46 executing program 3: r0 = userfaultfd(0x40800) unshare(0x8000400) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) 00:08:46 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="14ed3e7881c075e79a4262ce617642610602ca5190a1f70e173e908b7341787c2061d9f10d59e3252d59c8d9afe5cee871", 0x31}, {&(0x7f0000000180)="731f7e986f100a03a7306802765ea12ccc435a0e34bd92cac246cc61c170bbf6660b173680f68325963f1548d91019e00cf96f91077e773d15d79492d7f587a637a835ae1cda0e63fa341dc9bdf76e2a7a3116448c6cd8336cdd11e8ed9267cd478ae8b528c93d59ce092dee8fe68a0cdb6e851b30251e4520bde99d1432760997d9c2e9342f941269acffd47871fd14b2b2f576d7fafcccf7fac0bb29d34d90f62211b40efa1578208a2031d8d529424797961fc5b7f6a9ab36017a7cbe4b52ac01d0bc9fc21ed7e260eae1fc4a3abb634bf5565626b49df9af11765d83a4597654e1c59a2d49a0dd990d6a63deac31cfd30ac8", 0xf4}, {&(0x7f00000002c0)="654c81b6f2e8419e583a2ead9006b310c3c25007c5beebe32e9b2015e632073d59851192ab9b0bfd66f346e5d5a85193f51cfe66d5618db2734fe7fcbc112aee228fbd54de6ae8", 0x47}], 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="113078ac02cea40e7834a1516d58301d", 0x10) dup2(r2, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='exofs\x00', 0x4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) 00:08:46 executing program 0: unshare(0x400) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x101, &(0x7f0000ffb000/0x4000)=nil, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) r1 = socket(0x5, 0x3, 0xfc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r1, &(0x7f0000000580)="240000001e001f0214f9f4ff080000000000000000000000000000000400000000000000", 0x24) fchdir(r0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x2) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200400, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x20000000, 0x3, 0x2}) 00:08:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000000001a90000a000000000000000000001af991aa34c4b3357fd1637f5ce07d4c3104b24addf42acf272bb7a7c668e83510286a541b9c9fa8ecbf", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:46 executing program 0: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{}, {0x7, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 00:08:46 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x2, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mknod(&(0x7f0000000240)='./bus\x00', 0x8, 0x0) execve(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r0 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001840)={{0x2, 0x0, 0x0, 0x3b, '\x00', 0x6}, 0x5, 0x0, 0x0, r0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x1, 0x10001, 0x7ff]}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='stack\x00') getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 00:08:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x0) r7 = pkey_alloc(0x0, 0x0) pkey_free(r7) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:47 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x48, 0x21, 0x20, 0x17ef, 0x7203, 0xc682, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x0, 0x87, 0x81, 0x4e}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x261, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x9, 0x1, 0xf7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0xfc14c2cda2d7805c, 0x9f, {0x9f, 0x9, "cb91dafbabd67486747c474c873309b46213d6f6408903b6d5908ee4ca80de9dd1c64a5cb917e865024e9e50ce5c23f959e6e4d81b9d7ec2d8fc677cab512ddf1633d177042abff63d17ee31c2c5a02d655149318c3ac706387209ca87d1e00e02e519914eb3a2205bef685e2c551cc18b1566d10721e19cdd2722f32ab0f0b1e546d54259210605e36317980847aa20f52a522b3accd03bac795110ec"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x40, 0x12, 0x2d, "a623cc49bcda27ae51452435bf0ec5f29ee85e5daea95f7294906103257d16049d0af54006400b0b9052601548"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xce}, &(0x7f0000000280)={0x20, 0x0, 0x1a, {0x18, "53a9932344c84b5a620e1d5c0087bf87abe00e9582d5e6d8"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x6}}) 00:08:47 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xbdb, 0x40000) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x0, 0x3, 0x5, {0x20, 0x2}, {0x6, 0x1}, @cond=[{0x9, 0x0, 0x3, 0x520a, 0xff, 0xf61d}, {0x6, 0x401, 0x8b48, 0x3, 0x8, 0x41c0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 00:08:47 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x6920, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r2, 0x0) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) setgroups(0x3, &(0x7f0000000180)=[r3, r4, r5]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000240)={0x83, 0x7d, 0x1, {{0x0, 0x52, 0x5, 0x1, {0x20, 0x1, 0x7}, 0x80000000, 0x2, 0x36c8, 0x1ff, 0xd, 'security.evm\x00', 0x5, '\'eth1', 0xd, 'security.evm\x00'}, 0x1c, '+$&+cpusetposix_acl_access$\x00', r2, r5, r6}}, 0x83) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="03030600000000000019bd948f2d00ee4b26b5fc170ad7d25bca89194130bc63651f7b53a343f72e71ae0000432a1bd69b28f6a607bdf87c5ff81ee03a5fbf5909ddb8dbed73b982ec8c6e724da35843d311dc2140d27a8ddf04c990b1a0782bf26684392580db1b09998b333ddd244d6883c0cd5780d303aee95810cac7b036c3114f8bc99682ca696fd73cf7519dc2f279df1c00"], 0x23, 0x2) r7 = userfaultfd(0x0) unshare(0x8000400) openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x2000, 0x0) ioctl$UFFDIO_UNREGISTER(r7, 0xc020aa04, 0x0) [ 788.405797][ T1380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 788.644578][T12550] usb 6-1: new high-speed USB device number 45 using dummy_hcd 00:08:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000300)=""/73) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xffff, 0x40) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r4, 0x0, 0x1, [0x75]}, &(0x7f0000000280)=0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') r5 = creat(&(0x7f0000000040)='./file0\x00', 0x142) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000000c0)={{0x6, 0xe0}, 'port1\x00', 0x0, 0x1b1008, 0x5, 0x400, 0x1000, 0x4, 0x0, 0x0, 0x4, 0x2}) [ 788.703402][ T3380] usb 5-1: new high-speed USB device number 123 using dummy_hcd 00:08:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x802, 0x8) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x35}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r7, @ANYBLOB="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"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 788.767962][ T1589] debugfs: File '1588' in directory 'proc' already present! [ 788.877001][ T1593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 788.887791][T12550] usb 6-1: Using ep0 maxpacket: 32 [ 788.889903][ T1589] debugfs: File '1588' in directory 'proc' already present! [ 788.943398][ T3380] usb 5-1: Using ep0 maxpacket: 8 00:08:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000001140)='\'', 0x1}], 0x28c, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) sendmsg$nl_netfilter(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x6, 0x1, 0x4, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x9}, [@typed={0xc, 0x5b, @u64=0x48}, @nested={0x4, 0x55}, @typed={0x8, 0x93, @uid=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) socketpair(0x0, 0x5, 0x0, &(0x7f000000dff8)) writev(0xffffffffffffffff, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) connect$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0xc) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000006c0)={"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"}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') lseek(r4, 0xdbc, 0x0) sendfile(r0, r0, 0x0, 0x200000d) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50bd0b94a4956448cd4144cb88abeba582dc0a71367dc57a20001f62408fdffc7ef067966df29d18a575068d2df00000000000000000000001000", "81c7d401e1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x20004001}) 00:08:48 executing program 3: r0 = userfaultfd(0x0) unshare(0x8000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r2) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5, 0x1cb}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={r5, 0xffff72e1, 0x7, 0x6, 0x39, 0x1ca0, 0xf801, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x2152, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0x9, 0x0, 0x2e, 0x7f, 0x6}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r6, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, 0x0) [ 789.013527][T12550] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 789.021818][T12550] usb 6-1: config 0 has no interface number 0 [ 789.028705][T12550] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c6.82 [ 789.037953][T12550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.083603][ T3380] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 789.091864][ T3380] usb 5-1: config 0 has no interface number 0 [ 789.098379][ T3380] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 789.108525][ T3380] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid maxpacket 135, setting to 64 [ 789.119790][ T3380] usb 5-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 789.187531][T12550] usb 6-1: config 0 descriptor?? [ 789.277205][ T1666] loop_set_status: loop0 () has still dirty pages (nrpages=32) 00:08:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001400210100000000000010000a000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 789.323535][ T3380] usb 5-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 789.333185][ T3380] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 789.343135][ T3380] usb 5-1: Product: syz [ 789.447982][ T3380] usb 5-1: config 0 descriptor?? [ 789.504519][ T3380] usb 5-1: invalid MIDI in EP 0 [ 789.511795][ T3380] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 789.704074][ T3380] usb 5-1: USB disconnect, device number 123 [ 789.883885][T12550] asix 6-1:0.84 (unnamed net_device) (uninitialized): invalid hw address, using random 00:08:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) mq_getsetattr(r2, &(0x7f00000000c0)={0x5, 0xffffffffffffff4e, 0xffffffff, 0x5, 0xff, 0x0, 0x8001, 0xfffffffffffffffd}, &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, &(0x7f0000000680)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000006c0)={r5, 0x8}, &(0x7f0000000700)=0x8) r6 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r7) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f00000001c0)={r8, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="655729f276ae769976268772f6e016a1f5ef86cc2c6a856d7f52d635476a7f94e5beb627934b9346f2f02c5860631dfccee0e448e25ad6b95081c8c9b27c187752475fb81167cf01b9e1956997c0cbd4536e3fe7d726149296aa13a58ba2b0dad0b6e4a83d8625814f0bcedd430f97cd2ea0312f263ff9b93998c3326b918277e25a52df82e989808814f3bb4be0e2cce6334cb43e", 0x95}], 0x1}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) syz_open_dev$dspn(&(0x7f0000000740)='/dev/dsp#\x00', 0x8000, 0x2080) r10 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r10) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0xfffffffffffffeb8, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[]}}, 0x10000001) r11 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r11) r12 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r12) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) fchmod(r13, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0xb8be, 0x64, 0x1, 0x5, 0x4}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000540)={r14, 0x48, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0x0, @rand_addr="0053387026918f8a558f9b69f91aa2f5", 0x81}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0xff, @loopback}]}, &(0x7f0000000580)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:08:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000001140)='\'', 0x1}], 0x28c, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) sendmsg$nl_netfilter(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x6, 0x1, 0x4, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x9}, [@typed={0xc, 0x5b, @u64=0x48}, @nested={0x4, 0x55}, @typed={0x8, 0x93, @uid=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) socketpair(0x0, 0x5, 0x0, &(0x7f000000dff8)) writev(0xffffffffffffffff, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) connect$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0xc) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000006c0)={"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"}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') lseek(r4, 0xdbc, 0x0) sendfile(r0, r0, 0x0, 0x200000d) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50bd0b94a4956448cd4144cb88abeba582dc0a71367dc57a20001f62408fdffc7ef067966df29d18a575068d2df00000000000000000000001000", "81c7d401e1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x20004001}) 00:08:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x1f) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r5, 0xeb, '\x00r%', "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"}}, 0x110) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x1c}, 0x3f}, {0xa, 0x4e22, 0x3, @local, 0xc3}, r5, 0x1000}}, 0x48) r6 = socket(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r9, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r11, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) sendmmsg(r12, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r13) r14 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r14) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x40000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRESHEX=r9, @ANYRESHEX, @ANYBLOB="748de0fe94117721b885b384d9bf8289ca962398b2c4fe6a0c329e48d102890defd038ba67a139f58f8935f728b8791a6691cc45df7983b982ba486f81e983bb9ee5cb16eca4bcd6e6796bd3927b991166452794a36691375e241109685a47335da4e7a4d96df9d7d3e5df653d01a4027dca0a144f8cc268d9de1238904bff1540e03a85136fc3a40b5715493c5b1ff576b8fc054791eba67857c882eba0d2734ae96d52dc0cb4cede738c8fdf2a9e427399013a3ad12bac0583c10c23d73be3375c58d5b348e3e639418dd4", @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESHEX=r11, @ANYRESHEX, @ANYRES16, @ANYRES32=r2, @ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r12, @ANYRES16, @ANYRES32=r0], @ANYRESHEX=r13, @ANYRESHEX, @ANYRESOCT=r14], @ANYRES32=r8, @ANYBLOB="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"], 0x3}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) 00:08:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000001140)='\'', 0x1}], 0x28c, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r3) sendmsg$nl_netfilter(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x6, 0x1, 0x4, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x9}, [@typed={0xc, 0x5b, @u64=0x48}, @nested={0x4, 0x55}, @typed={0x8, 0x93, @uid=r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) socketpair(0x0, 0x5, 0x0, &(0x7f000000dff8)) writev(0xffffffffffffffff, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) connect$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0xc) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000006c0)={"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"}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') lseek(r4, 0xdbc, 0x0) sendfile(r0, r0, 0x0, 0x200000d) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50bd0b94a4956448cd4144cb88abeba582dc0a71367dc57a20001f62408fdffc7ef067966df29d18a575068d2df00000000000000000000001000", "81c7d401e1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x20004001}) [ 790.493092][T12828] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 790.734168][ T1381] ===================================================== [ 790.741157][ T1381] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0xa9/0xb0 [ 790.743065][ T2044] loop_set_status: loop0 () has still dirty pages (nrpages=32) [ 790.742929][ T1381] CPU: 1 PID: 1381 Comm: syz-executor.5 Not tainted 5.4.0-rc2+ #0 [ 790.742929][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.742929][ T1381] Call Trace: [ 790.742929][ T1381] dump_stack+0x191/0x1f0 [ 790.742929][ T1381] kmsan_report+0x14e/0x2c0 [ 790.742929][ T1381] kmsan_internal_check_memory+0x187/0x4c0 [ 790.742929][ T1381] ? kmsan_get_metadata+0x39/0x350 [ 790.762859][ T1381] kmsan_copy_to_user+0xa9/0xb0 [ 790.762859][ T1381] _copy_to_user+0x16b/0x1f0 [ 790.762859][ T1381] fuzzer_ioctl+0x25a9/0x5860 [ 790.762859][ T1381] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 790.762859][ T1381] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 790.762859][ T1381] ? next_event+0x6a0/0x6a0 [ 790.762859][ T1381] full_proxy_unlocked_ioctl+0x222/0x330 [ 790.762859][ T1381] ? full_proxy_poll+0x2d0/0x2d0 [ 790.762859][ T1381] do_vfs_ioctl+0xea8/0x2c50 [ 790.762859][ T1381] ? security_file_ioctl+0x1bd/0x200 [ 790.762859][ T1381] __se_sys_ioctl+0x1da/0x270 [ 790.762859][ T1381] __x64_sys_ioctl+0x4a/0x70 [ 790.762859][ T1381] do_syscall_64+0xb6/0x160 [ 790.762859][ T1381] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 790.762859][ T1381] RIP: 0033:0x4598c7 [ 790.762859][ T1381] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 790.762859][ T1381] RSP: 002b:00007fac4a6ab3e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.762859][ T1381] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598c7 [ 790.762859][ T1381] RDX: 00007fac4a6ab830 RSI: 0000000080085502 RDI: 0000000000000003 [ 790.762859][ T1381] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 790.762859][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac4a6ac6d4 [ 790.762859][ T1381] R13: 00000000004c93f4 R14: 00000000004e09b0 R15: 00000000ffffffff [ 790.762859][ T1381] [ 790.762859][ T1381] Uninit was stored to memory at: [ 790.762859][ T1381] kmsan_internal_chain_origin+0xbd/0x170 [ 790.762859][ T1381] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 790.762859][ T1381] kmsan_memcpy_metadata+0xb/0x10 [ 790.762859][ T1381] __msan_memcpy+0x56/0x70 [ 790.762859][ T1381] gadget_setup+0x498/0xb60 [ 790.762859][ T1381] dummy_timer+0x1fba/0x6770 [ 790.762859][ T1381] call_timer_fn+0x232/0x530 [ 790.762859][ T1381] __run_timers+0xd60/0x1270 [ 790.762859][ T1381] run_timer_softirq+0x2d/0x50 [ 790.762859][ T1381] __do_softirq+0x4a1/0x83a [ 790.762859][ T1381] irq_exit+0x230/0x280 [ 790.762859][ T1381] exiting_irq+0xe/0x10 [ 790.762859][ T1381] smp_apic_timer_interrupt+0x48/0x70 [ 790.762859][ T1381] apic_timer_interrupt+0x2e/0x40 [ 790.762859][ T1381] kmsan_get_shadow_origin_ptr+0x19f/0x4b0 [ 790.762859][ T1381] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 790.762859][ T1381] syscall_return_slowpath+0x48/0x610 [ 790.762859][ T1381] do_syscall_64+0xdc/0x160 [ 790.762859][ T1381] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 790.762859][ T1381] [ 790.762859][ T1381] Uninit was stored to memory at: [ 790.762859][ T1381] kmsan_internal_chain_origin+0xbd/0x170 [ 790.762859][ T1381] __msan_chain_origin+0x6b/0xe0 [ 790.762859][ T1381] dummy_timer+0x2d76/0x6770 [ 790.762859][ T1381] call_timer_fn+0x232/0x530 [ 790.762859][ T1381] __run_timers+0xd60/0x1270 [ 790.762859][ T1381] run_timer_softirq+0x2d/0x50 [ 790.762859][ T1381] __do_softirq+0x4a1/0x83a [ 790.762859][ T1381] irq_exit+0x230/0x280 [ 790.762859][ T1381] exiting_irq+0xe/0x10 [ 790.762859][ T1381] smp_apic_timer_interrupt+0x48/0x70 [ 790.762859][ T1381] apic_timer_interrupt+0x2e/0x40 [ 790.762859][ T1381] kmsan_get_shadow_origin_ptr+0x19f/0x4b0 [ 790.762859][ T1381] __msan_metadata_ptr_for_load_8+0x10/0x20 [ 790.762859][ T1381] syscall_return_slowpath+0x48/0x610 [ 790.762859][ T1381] do_syscall_64+0xdc/0x160 [ 790.762859][ T1381] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 790.762859][ T1381] [ 790.762859][ T1381] Uninit was stored to memory at: [ 790.762859][ T1381] kmsan_internal_chain_origin+0xbd/0x170 [ 790.762859][ T1381] __msan_chain_origin+0x6b/0xe0 [ 790.762859][ T1381] usb_control_msg+0x61b/0x7f0 [ 790.762859][ T1381] usbnet_write_cmd+0x386/0x430 [ 790.762859][ T1381] asix_write_cmd+0x155/0x270 [ 790.762859][ T1381] ax88772a_hw_reset+0x1ab/0x1030 [ 790.762859][ T1381] ax88772_bind+0x67a/0x11f0 [ 790.762859][ T1381] usbnet_probe+0x10d3/0x39d0 [ 790.762859][ T1381] usb_probe_interface+0xd19/0x1310 [ 790.762859][ T1381] really_probe+0xd91/0x1f90 [ 790.762859][ T1381] driver_probe_device+0x1ba/0x510 [ 790.762859][ T1381] __device_attach_driver+0x5b8/0x790 [ 790.762859][ T1381] bus_for_each_drv+0x28e/0x3b0 [ 790.762859][ T1381] __device_attach+0x489/0x750 [ 790.762859][ T1381] device_initial_probe+0x4a/0x60 [ 790.762859][ T1381] bus_probe_device+0x131/0x390 [ 790.762859][ T1381] device_add+0x25b5/0x2df0 [ 790.762859][ T1381] usb_set_configuration+0x309f/0x3710 [ 790.762859][ T1381] generic_probe+0xe7/0x280 [ 790.762859][ T1381] usb_probe_device+0x146/0x200 [ 790.762859][ T1381] really_probe+0xd91/0x1f90 [ 790.762859][ T1381] driver_probe_device+0x1ba/0x510 [ 790.762859][ T1381] __device_attach_driver+0x5b8/0x790 [ 790.762859][ T1381] bus_for_each_drv+0x28e/0x3b0 [ 790.762859][ T1381] __device_attach+0x489/0x750 [ 790.762859][ T1381] device_initial_probe+0x4a/0x60 [ 790.762859][ T1381] bus_probe_device+0x131/0x390 [ 790.762859][ T1381] device_add+0x25b5/0x2df0 [ 790.762859][ T1381] usb_new_device+0x23e5/0x2fb0 [ 790.762859][ T1381] hub_event+0x581d/0x72f0 [ 790.762859][ T1381] process_one_work+0x1572/0x1ef0 [ 790.762859][ T1381] worker_thread+0x111b/0x2460 [ 790.762859][ T1381] kthread+0x4b5/0x4f0 [ 790.762859][ T1381] ret_from_fork+0x35/0x40 [ 790.762859][ T1381] [ 790.762859][ T1381] Uninit was stored to memory at: [ 790.762859][ T1381] kmsan_internal_chain_origin+0xbd/0x170 [ 790.762859][ T1381] __msan_chain_origin+0x6b/0xe0 [ 790.762859][ T1381] ax88772_bind+0xa12/0x11f0 [ 790.762859][ T1381] usbnet_probe+0x10d3/0x39d0 [ 790.762859][ T1381] usb_probe_interface+0xd19/0x1310 [ 790.762859][ T1381] really_probe+0xd91/0x1f90 [ 790.762859][ T1381] driver_probe_device+0x1ba/0x510 [ 790.762859][ T1381] __device_attach_driver+0x5b8/0x790 [ 790.762859][ T1381] bus_for_each_drv+0x28e/0x3b0 [ 790.762859][ T1381] __device_attach+0x489/0x750 [ 790.762859][ T1381] device_initial_probe+0x4a/0x60 [ 790.762859][ T1381] bus_probe_device+0x131/0x390 [ 790.762859][ T1381] device_add+0x25b5/0x2df0 [ 790.762859][ T1381] usb_set_configuration+0x309f/0x3710 [ 790.762859][ T1381] generic_probe+0xe7/0x280 [ 790.762859][ T1381] usb_probe_device+0x146/0x200 [ 790.762859][ T1381] really_probe+0xd91/0x1f90 [ 790.762859][ T1381] driver_probe_device+0x1ba/0x510 [ 790.762859][ T1381] __device_attach_driver+0x5b8/0x790 [ 791.418041][ T1381] bus_for_each_drv+0x28e/0x3b0 [ 791.418041][ T1381] __device_attach+0x489/0x750 [ 791.418041][ T1381] device_initial_probe+0x4a/0x60 [ 791.418041][ T1381] bus_probe_device+0x131/0x390 [ 791.418041][ T1381] device_add+0x25b5/0x2df0 [ 791.418041][ T1381] usb_new_device+0x23e5/0x2fb0 [ 791.418041][ T1381] hub_event+0x581d/0x72f0 [ 791.418041][ T1381] process_one_work+0x1572/0x1ef0 [ 791.418041][ T1381] worker_thread+0x111b/0x2460 [ 791.418041][ T1381] kthread+0x4b5/0x4f0 [ 791.418041][ T1381] ret_from_fork+0x35/0x40 [ 791.418041][ T1381] [ 791.418041][ T1381] Local variable description: ----buf.i@asix_get_phy_addr [ 791.418041][ T1381] Variable was created at: [ 791.418041][ T1381] asix_get_phy_addr+0x4d/0x280 [ 791.418041][ T1381] asix_get_phy_addr+0x4d/0x280 [ 791.418041][ T1381] [ 791.418041][ T1381] Byte 10 of 16 is uninitialized [ 791.418041][ T1381] Memory access of size 16 starts at ffff8880912122e0 [ 791.418041][ T1381] Data copied to user address 00007fac4a6ab830 [ 791.418041][ T1381] ===================================================== [ 791.418041][ T1381] Disabling lock debugging due to kernel taint [ 791.418041][ T1381] Kernel panic - not syncing: panic_on_warn set ... [ 791.418041][ T1381] CPU: 1 PID: 1381 Comm: syz-executor.5 Tainted: G B 5.4.0-rc2+ #0 [ 791.418041][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.418041][ T1381] Call Trace: [ 791.418041][ T1381] dump_stack+0x191/0x1f0 [ 791.418041][ T1381] panic+0x3c9/0xc1e [ 791.418041][ T1381] kmsan_report+0x2b6/0x2c0 [ 791.418041][ T1381] kmsan_internal_check_memory+0x187/0x4c0 [ 791.418041][ T1381] ? kmsan_get_metadata+0x39/0x350 [ 791.418041][ T1381] kmsan_copy_to_user+0xa9/0xb0 [ 791.418041][ T1381] _copy_to_user+0x16b/0x1f0 [ 791.418041][ T1381] fuzzer_ioctl+0x25a9/0x5860 [ 791.418041][ T1381] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 791.418041][ T1381] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 791.418041][ T1381] ? next_event+0x6a0/0x6a0 [ 791.418041][ T1381] full_proxy_unlocked_ioctl+0x222/0x330 [ 791.418041][ T1381] ? full_proxy_poll+0x2d0/0x2d0 [ 791.418041][ T1381] do_vfs_ioctl+0xea8/0x2c50 [ 791.418041][ T1381] ? security_file_ioctl+0x1bd/0x200 [ 791.418041][ T1381] __se_sys_ioctl+0x1da/0x270 [ 791.418041][ T1381] __x64_sys_ioctl+0x4a/0x70 [ 791.418041][ T1381] do_syscall_64+0xb6/0x160 [ 791.418041][ T1381] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 791.418041][ T1381] RIP: 0033:0x4598c7 [ 791.418041][ T1381] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 791.418041][ T1381] RSP: 002b:00007fac4a6ab3e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.418041][ T1381] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598c7 [ 791.418041][ T1381] RDX: 00007fac4a6ab830 RSI: 0000000080085502 RDI: 0000000000000003 [ 791.418041][ T1381] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 791.418041][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac4a6ac6d4 [ 791.418041][ T1381] R13: 00000000004c93f4 R14: 00000000004e09b0 R15: 00000000ffffffff [ 791.418041][ T1381] Kernel Offset: disabled [ 791.418041][ T1381] Rebooting in 86400 seconds..