[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 80.058855][ T32] audit: type=1800 audit(1570199146.102:25): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 80.081687][ T32] audit: type=1800 audit(1570199146.122:26): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 80.115825][ T32] audit: type=1800 audit(1570199146.162:27): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.52' (ECDSA) to the list of known hosts. 2019/10/04 14:26:00 fuzzer started 2019/10/04 14:26:04 dialing manager at 10.128.0.26:42457 2019/10/04 14:26:05 syscalls: 2412 2019/10/04 14:26:05 code coverage: enabled 2019/10/04 14:26:05 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/04 14:26:05 extra coverage: enabled 2019/10/04 14:26:05 setuid sandbox: enabled 2019/10/04 14:26:05 namespace sandbox: enabled 2019/10/04 14:26:05 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 14:26:05 fault injection: enabled 2019/10/04 14:26:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 14:26:05 net packet injection: enabled 2019/10/04 14:26:05 net device setup: enabled 2019/10/04 14:26:05 concurrency sanitizer: /proc/kcsaninfo does not exist 14:29:41 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0bf7a301ffe8dac0726906da58a5d1ab066f24351eda628769d37cbcb5c0c5d6b03e4c0487a0c5c", @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a746201000000000082ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd8ece5ff1b9d9e2afb67443e955f96c787fc8dc4872b00010000000000"], 0x0, 0xf1}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) syzkaller login: [ 315.599828][T11971] IPVS: ftp: loaded support on port[0] = 21 [ 315.740729][T11971] chnl_net:caif_netlink_parms(): no params data found [ 315.795623][T11971] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.802882][T11971] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.811675][T11971] device bridge_slave_0 entered promiscuous mode [ 315.821009][T11971] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.828297][T11971] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.837058][T11971] device bridge_slave_1 entered promiscuous mode [ 315.868383][T11971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.880896][T11971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.912721][T11971] team0: Port device team_slave_0 added [ 315.921928][T11971] team0: Port device team_slave_1 added [ 316.036384][T11971] device hsr_slave_0 entered promiscuous mode [ 316.292492][T11971] device hsr_slave_1 entered promiscuous mode [ 316.572467][T11971] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.579783][T11971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.587607][T11971] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.594836][T11971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.674803][T11971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.695338][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.707185][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.717620][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.735869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 316.755741][T11971] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.774003][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.784156][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.794767][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.802899][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.852177][T11971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.862723][T11971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.877696][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.887305][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.896450][T11974] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.903742][T11974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.913542][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.923543][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.933407][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.944693][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.954336][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.964074][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.973532][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.983115][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.992914][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.002292][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.017490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.026602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.060702][T11971] 8021q: adding VLAN 0 to HW filter on device batadv0 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 317.171226][T11980] ptrace attach of "/root/syz-executor.0"[11979] was attempted by "/root/syz-executor.0"[11980] 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 317.220616][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.235931][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 317.327958][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 317.426136][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 317.526257][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 317.854577][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 317.930199][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 318.022353][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 318.115208][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 318.204604][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:44 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:44 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:44 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:45 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "884f00", 0x10, 0x2f, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x883e, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96e266", 0x0, "fe3f00"}}}}}}}, &(0x7f0000000000)={0xfffffffffffffffe, 0x1}) 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 319.767864][T12066] IPVS: ftp: loaded support on port[0] = 21 14:29:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:29:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 319.987761][T12066] chnl_net:caif_netlink_parms(): no params data found [ 320.076324][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.084078][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.092787][T12066] device bridge_slave_0 entered promiscuous mode [ 320.123591][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.130791][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.139844][T12066] device bridge_slave_1 entered promiscuous mode 14:29:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 320.174564][T12066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.219615][T12066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.253483][T12066] team0: Port device team_slave_0 added [ 320.263002][T12066] team0: Port device team_slave_1 added 14:29:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 320.337008][T12066] device hsr_slave_0 entered promiscuous mode [ 320.393629][T12066] device hsr_slave_1 entered promiscuous mode [ 320.602034][T12066] debugfs: Directory 'hsr0' with parent '/' already present! 14:29:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 320.653475][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.660713][T12066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.668555][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.676004][T12066] bridge0: port 1(bridge_slave_0) entered forwarding state 14:29:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) 14:29:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) [ 320.836138][T12066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.856729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.874206][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.897750][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.925702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 320.954628][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.969725][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.981070][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.990135][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.997402][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.026529][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.036301][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.045449][ T4895] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.052663][ T4895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.108894][T12066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.119818][T12066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.134939][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.145263][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.155311][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.165146][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.174722][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.184544][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.194156][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.203574][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.213145][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.222653][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.257530][T12066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.274483][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.283577][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 14:29:47 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "884f00", 0x10, 0x2f, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x883e, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96e266", 0x0, "fe3f00"}}}}}}}, &(0x7f0000000000)={0xfffffffffffffffe, 0x1}) 14:29:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) 14:29:47 executing program 1: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x310) 14:29:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 14:29:47 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed5ebfd4258d2206adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61c", @ANYRES16=0x0, @ANYPTR64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efcaa3f337d040c459918357548c402cc43b3897cc275fd87f333c960d2bc40dd887", @ANYRESDEC], 0x0, 0xd9}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:29:47 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed5ebfd4258d2206adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4862fc399eaa05000000b6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24540d331edbedf8a03a722ffa87ec2dfec4758b087c23cc9c5e726fea942494855d4bd3388", @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efcaa3f337d040c459918357548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad03000000dfdaf3d0fef215586de3c101e4f8d1b12b1894e2983d0cfcdfbb1118", @ANYRESDEC], 0x0, 0x150}, 0x20) tkill(r0, 0x39) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:29:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 321.677303][T12112] ptrace attach of "/root/syz-executor.1"[12111] was attempted by "/root/syz-executor.1"[12112] 14:29:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) sendto$inet(r2, &(0x7f0000000240)="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", 0x1000, 0x80, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$KDADDIO(r1, 0x400455c8, 0x9) dup2(r0, r1) [ 321.761593][T12116] ptrace attach of "/root/syz-executor.1"[12115] was attempted by "/root/syz-executor.1"[12116] 14:29:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)}], 0x1}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)}], 0x1}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)}], 0x1}, 0x0) 14:29:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) 14:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) 14:29:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) sendto$inet(r2, &(0x7f0000000240)="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", 0x1000, 0x80, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$KDADDIO(r1, 0x400455c8, 0x9) dup2(r0, r1) 14:29:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8dc1e10d8ae0087b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x6767, 0x10000, 0x401, 'queue1\x00', 0x1656}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000140)={0xde, 0x0, "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"}, 0x1008, 0x4000000, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001180)='/dev/null\x00', 0x102180, 0x0) bind$rxrpc(r2, &(0x7f00000011c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x14c94e00, @rand_addr="9fdca2c39bc61e8b075231597b3d14bf", 0x3}}, 0x24) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001200)='/dev/sequencer\x00', 0x202102, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000001240)={0x1a1, 0x400, 0x5}) r4 = syz_open_dev$radio(&(0x7f0000001280)='/dev/radio#\x00', 0x3, 0x2) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000012c0)='/dev/vcsa#\x00', 0x27, 0x101000) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000001300)="deedd24e02e28b23b420caa8768c10837610b254c20be9e0606f3ab8fd9309667665f3d08170af6ad6ec82ca730deec19c7ba92c0654276eff1235a13c1d37985af35538f2338df1cd3bd71d7a7cdd8a305ae6a3eec57d08060eaa53711b984ec4098ba0600904f777700625519f617a59b7502483caeb291e719d66fd658d87b736662711c13ae85b0e4ce2f549451a873eeae732029482") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001440)={0x0, 0x68, &(0x7f00000013c0)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x0, @mcast2, 0xfffffb0d}, @in6={0xa, 0x4e21, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fff}, @in={0x2, 0x4e21, @rand_addr=0x8000}, @in={0x2, 0x4e23, @rand_addr=0x3}]}, &(0x7f0000001480)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000014c0)={r6, 0x27, "54fbb9aac69f7df69be87eb8dc9d05358542296ad95c77b9f550f4a1fe1fe0b5922bbe6ac81068"}, &(0x7f0000001500)=0x2f) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000001540)=""/176) r7 = accept$unix(r4, &(0x7f0000001600)=@abs, &(0x7f0000001680)=0x6e) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000016c0)) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000007a80)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr$security_selinux(r8, &(0x7f0000007ac0)='security.selinux\x00', &(0x7f0000007b00)='system_u:object_r:xconsole_device_t:s0\x00', 0x27, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000007b40)='/dev/vhci\x00', 0x2) r9 = fcntl$dupfd(r5, 0xa0f, r7) ioctl$TCSETX(r9, 0x5433, &(0x7f0000007b80)={0x984f, 0x7ff, [0x80, 0xfbe2, 0x757, 0x1], 0x5}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000007bc0)={0x0, 0x4, 0x20, 0x9, 0x0, 0xff}, &(0x7f0000007c00)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000007c40)={r10, 0x1000, "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"}, &(0x7f0000008c80)=0x1008) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) mq_unlink(&(0x7f0000008cc0)='|\xa0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000008d00)={0x1, 0x6ac8, 0x1, 0x2, 0xaa8}, 0x14) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_GET_MSRS(r11, 0xc008ae88, &(0x7f0000008d40)={0x4, 0x0, [{}, {}, {}, {}]}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) [ 323.941987][ T2289] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 323.942076][T11974] Bluetooth: hci0: command 0xfc11 tx timeout 14:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) [ 324.079977][T11973] Bluetooth: hci0: Frame reassembly failed (-84) 14:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) 14:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) 14:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) [ 324.561169][T12179] IPVS: ftp: loaded support on port[0] = 21 14:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268", 0x43}], 0x1}, 0x0) 14:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268", 0x43}], 0x1}, 0x0) [ 324.794988][T12179] chnl_net:caif_netlink_parms(): no params data found 14:29:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268", 0x43}], 0x1}, 0x0) [ 324.860979][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.868299][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.877133][T12179] device bridge_slave_0 entered promiscuous mode 14:29:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055", 0x48}], 0x1}, 0x0) [ 324.936652][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.944270][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.953132][T12179] device bridge_slave_1 entered promiscuous mode 14:29:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055", 0x48}], 0x1}, 0x0) [ 324.991380][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.019751][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.083845][T12179] team0: Port device team_slave_0 added [ 325.095423][T12179] team0: Port device team_slave_1 added 14:29:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055", 0x48}], 0x1}, 0x0) [ 325.178449][T12179] device hsr_slave_0 entered promiscuous mode [ 325.204040][T12179] device hsr_slave_1 entered promiscuous mode [ 325.322743][T12179] debugfs: Directory 'hsr0' with parent '/' already present! [ 325.372932][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.380238][T12179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.388134][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.395402][T12179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.515571][T12179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.538351][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.549549][T11974] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.559930][T11974] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.573478][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 325.597470][T12179] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.617267][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.626394][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.633752][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.688600][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.699081][T11974] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.706346][T11974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.716986][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.727142][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.736969][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.752590][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.761337][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.776562][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.826675][T12179] 8021q: adding VLAN 0 to HW filter on device batadv0 14:29:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x4c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x3c, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x100}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x8}, @IFLA_BR_MCAST_MLD_VERSION={0xffffffffffffffd8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x3}]}}}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1ed, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 14:29:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) 14:29:52 executing program 2: creat(0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0), 0x0) unshare(0x60000000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="e7000000670000004de09f7a97c1db5d9261877c706e9dff8ae85831176cfa070e08c2e046405d5c8dbabed3515e3f16fd59cd12a31de602e4a6bdfc644cd8caf74c89bdc61e5ed26c80cdf65213a18d40ac6a7896dfeff79af0a122d8f826b39bd71c67e83358b130b9ba020000000000000060ae4d64ef7e9410bd78d443b98fcf98698852f414734a50308a797e5cbb89b1817329079cfc4c25b9f76d12206c26fdf43ffbfa68bbbd7dd6bcc8a9721217e69bd7eb7b2c887d7fd0a94bf6d45e7c1488cd976f698e3106bdf6586a192a8cea064b7f35f1f3f6c100dda57f02395fb2db215979"], 0xc80) [ 326.092261][ T2289] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 326.202270][ C1] hrtimer: interrupt took 32589 ns 14:29:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) [ 326.284865][T12214] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 326.290549][T12210] IPVS: ftp: loaded support on port[0] = 21 [ 326.293217][T12214] netlink: 'syz-executor.1': attribute type 42 has an invalid length. [ 326.307486][T12214] __nla_validate_parse: 16 callbacks suppressed [ 326.307510][T12214] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 14:29:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) [ 326.685488][T12214] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 326.693815][T12214] netlink: 'syz-executor.1': attribute type 42 has an invalid length. [ 326.702165][T12214] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 14:29:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x4c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x3c, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x100}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x8}, @IFLA_BR_MCAST_MLD_VERSION={0xffffffffffffffd8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x3}]}}}]}, 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x1ed, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 327.053899][T12225] IPVS: ftp: loaded support on port[0] = 21 14:29:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:29:53 executing program 2: creat(0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0), 0x0) unshare(0x60000000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="e7000000670000004de09f7a97c1db5d9261877c706e9dff8ae85831176cfa070e08c2e046405d5c8dbabed3515e3f16fd59cd12a31de602e4a6bdfc644cd8caf74c89bdc61e5ed26c80cdf65213a18d40ac6a7896dfeff79af0a122d8f826b39bd71c67e83358b130b9ba020000000000000060ae4d64ef7e9410bd78d443b98fcf98698852f414734a50308a797e5cbb89b1817329079cfc4c25b9f76d12206c26fdf43ffbfa68bbbd7dd6bcc8a9721217e69bd7eb7b2c887d7fd0a94bf6d45e7c1488cd976f698e3106bdf6586a192a8cea064b7f35f1f3f6c100dda57f02395fb2db215979"], 0xc80) 14:29:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 327.198837][T12229] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 327.207467][T12229] netlink: 'syz-executor.1': attribute type 42 has an invalid length. [ 327.215877][T12229] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.452113][T12240] IPVS: ftp: loaded support on port[0] = 21 [ 327.611821][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.680967][T12233] device bridge_slave_0 left promiscuous mode [ 327.687398][T12233] bridge0: port 1(bridge_slave_0) entered disabled state 14:29:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) 14:29:54 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000731260080d0f9435f5e1000000010902120001000000000904a50000ff47d000a49b9c52abdcb535ff1fffeefe29f4a42af57174e8f1fc2e7530b588fe28aaaa31256ea0e69e7ba2ece232c627119b00bfcb5a553f29d350838d9054eeef36e2cc52b5c2de84eacbc248f317e239d9bdbd14c44afd2073526fff4fb34c66d4ad86e09c1575c36298f55ec77da2cea6d70c3fafc1a4ab398af9c7cbd6773a1ab88a5422fedad5b6df08918d7bd358217da28abfa710130196e0c76cfa123e445f2edc6749ea9c7fcf1d8ef185d2c3ea"], 0x0) 14:29:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) 14:29:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f", 0x4a}], 0x1}, 0x0) 14:29:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) socket$rds(0x15, 0x5, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @remote}}, 0x159) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) dup(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x310) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x8}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f4070009040081000000010100000000000008001d0003000000", 0x24) 14:29:54 executing program 0 (fault-call:4 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 328.445755][T12260] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 328.519631][T12263] FAULT_INJECTION: forcing a failure. [ 328.519631][T12263] name failslab, interval 1, probability 0, space 0, times 1 [ 328.532755][T12263] CPU: 0 PID: 12263 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 328.540701][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.543031][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 328.550812][T12263] Call Trace: [ 328.561736][T12263] dump_stack+0x191/0x1f0 [ 328.566151][T12263] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 328.572105][T12263] should_fail+0xa3f/0xa50 [ 328.576592][T12263] __should_failslab+0x264/0x280 [ 328.581583][T12263] should_failslab+0x29/0x70 [ 328.586236][T12263] kmem_cache_alloc_node+0x103/0xe70 [ 328.591674][T12263] ? __alloc_skb+0x215/0xa10 [ 328.596354][T12263] __alloc_skb+0x215/0xa10 [ 328.600927][T12263] netlink_sendmsg+0x783/0x1330 [ 328.605864][T12263] ? netlink_getsockopt+0x1430/0x1430 [ 328.611276][T12263] ___sys_sendmsg+0x14ff/0x1590 [ 328.616330][T12263] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 328.622499][T12263] ? __fget_light+0x6b1/0x710 [ 328.627235][T12263] ? kmsan_internal_set_origin+0x6a/0xb0 [ 328.632932][T12263] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 328.638881][T12263] __se_sys_sendmsg+0x305/0x460 [ 328.643807][T12263] __x64_sys_sendmsg+0x4a/0x70 [ 328.648617][T12263] do_syscall_64+0xbc/0xf0 [ 328.653130][T12263] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 328.659063][T12263] RIP: 0033:0x459a59 [ 328.663026][T12263] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.682673][T12263] RSP: 002b:00007fd1b6dadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.691160][T12263] RAX: ffffffffffffffda RBX: 00007fd1b6dadc90 RCX: 0000000000459a59 [ 328.699271][T12263] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 328.707299][T12263] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 14:29:54 executing program 0 (fault-call:4 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 328.715315][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1b6dae6d4 [ 328.723328][T12263] R13: 00000000004c7506 R14: 00000000004dd110 R15: 0000000000000006 [ 328.858355][T12267] FAULT_INJECTION: forcing a failure. [ 328.858355][T12267] name failslab, interval 1, probability 0, space 0, times 0 [ 328.871301][T12267] CPU: 0 PID: 12267 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 328.879241][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.889343][T12267] Call Trace: [ 328.892966][T12267] dump_stack+0x191/0x1f0 [ 328.897358][T12267] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 328.903327][T12267] should_fail+0xa3f/0xa50 [ 328.907821][T12267] __should_failslab+0x264/0x280 [ 328.912821][T12267] should_failslab+0x29/0x70 [ 328.917576][T12267] __kmalloc_node_track_caller+0x1cd/0x1320 [ 328.923555][T12267] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 328.929697][T12267] ? kmem_cache_alloc_node+0x1b6/0xe70 [ 328.935238][T12267] ? netlink_sendmsg+0x783/0x1330 [ 328.940340][T12267] ? netlink_sendmsg+0x783/0x1330 [ 328.945436][T12267] __alloc_skb+0x306/0xa10 [ 328.949913][T12267] ? netlink_sendmsg+0x783/0x1330 [ 328.955020][T12267] netlink_sendmsg+0x783/0x1330 [ 328.959952][T12267] ? netlink_getsockopt+0x1430/0x1430 [ 328.965372][T12267] ___sys_sendmsg+0x14ff/0x1590 [ 328.970284][T12267] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 328.976459][T12267] ? __fget_light+0x6b1/0x710 [ 328.981199][T12267] ? kmsan_internal_set_origin+0x6a/0xb0 [ 328.986940][T12267] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 328.992912][T12267] __se_sys_sendmsg+0x305/0x460 [ 328.997865][T12267] __x64_sys_sendmsg+0x4a/0x70 [ 329.002704][T12267] do_syscall_64+0xbc/0xf0 [ 329.007203][T12267] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 329.013156][T12267] RIP: 0033:0x459a59 [ 329.017106][T12267] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.036763][T12267] RSP: 002b:00007fd1b6dadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.045246][T12267] RAX: ffffffffffffffda RBX: 00007fd1b6dadc90 RCX: 0000000000459a59 [ 329.053277][T12267] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 329.061316][T12267] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.069345][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1b6dae6d4 [ 329.077639][T12267] R13: 00000000004c7506 R14: 00000000004dd110 R15: 0000000000000006 14:29:55 executing program 0 (fault-call:4 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 329.141914][ T31] usb 2-1: Using ep0 maxpacket: 8 14:29:55 executing program 2: clone(0x1000000000011, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = gettid() syz_open_procfs(r0, 0x0) waitid(0x1, r0, 0x0, 0x40000000, 0xfffffffffffffffe) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'ip6gre0\x00', 0x2}) [ 329.225149][T12271] FAULT_INJECTION: forcing a failure. [ 329.225149][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 329.238275][T12271] CPU: 1 PID: 12271 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 329.246219][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.256330][T12271] Call Trace: [ 329.259702][T12271] dump_stack+0x191/0x1f0 [ 329.264069][T12271] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 329.269990][T12271] should_fail+0xa3f/0xa50 [ 329.274443][T12271] __should_failslab+0x264/0x280 [ 329.279425][T12271] should_failslab+0x29/0x70 [ 329.284060][T12271] kmem_cache_alloc+0xd6/0xd10 [ 329.288848][T12271] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 329.294773][T12271] ? skb_clone+0x326/0x5d0 [ 329.299213][T12271] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 329.305308][T12271] skb_clone+0x326/0x5d0 [ 329.309591][T12271] netlink_deliver_tap+0x804/0xeb0 [ 329.314775][T12271] netlink_unicast+0xe17/0x1050 [ 329.319669][T12271] netlink_sendmsg+0x110f/0x1330 [ 329.324656][T12271] ? netlink_getsockopt+0x1430/0x1430 [ 329.330062][T12271] ___sys_sendmsg+0x14ff/0x1590 [ 329.334939][T12271] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 329.341068][T12271] ? __fget_light+0x6b1/0x710 [ 329.345777][T12271] ? kmsan_internal_set_origin+0x6a/0xb0 [ 329.351441][T12271] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 329.357363][T12271] __se_sys_sendmsg+0x305/0x460 [ 329.362268][T12271] __x64_sys_sendmsg+0x4a/0x70 [ 329.367053][T12271] do_syscall_64+0xbc/0xf0 [ 329.371513][T12271] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 329.377427][T12271] RIP: 0033:0x459a59 [ 329.381373][T12271] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.401083][T12271] RSP: 002b:00007fd1b6dadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.409519][T12271] RAX: ffffffffffffffda RBX: 00007fd1b6dadc90 RCX: 0000000000459a59 [ 329.417959][T12271] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 329.425943][T12271] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.434220][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1b6dae6d4 [ 329.442226][T12271] R13: 00000000004c7506 R14: 00000000004dd110 R15: 0000000000000006 [ 329.462607][ T31] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 329.470939][ T31] usb 2-1: config 0 has no interface number 0 [ 329.477270][ T31] usb 2-1: New USB device found, idVendor=0f0d, idProduct=3594, bcdDevice=e1.f5 [ 329.486484][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.532669][ T31] usb 2-1: config 0 descriptor?? 14:29:55 executing program 0 (fault-call:4 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 329.729698][T12280] FAULT_INJECTION: forcing a failure. [ 329.729698][T12280] name failslab, interval 1, probability 0, space 0, times 0 [ 329.743203][T12280] CPU: 0 PID: 12280 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 329.751143][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.761237][T12280] Call Trace: [ 329.764577][T12280] dump_stack+0x191/0x1f0 [ 329.768944][T12280] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 329.774865][T12280] should_fail+0xa3f/0xa50 [ 329.779316][T12280] __should_failslab+0x264/0x280 [ 329.784285][T12280] should_failslab+0x29/0x70 [ 329.788908][T12280] kmem_cache_alloc_node+0x103/0xe70 [ 329.794231][T12280] ? __alloc_skb+0x215/0xa10 [ 329.798923][T12280] ? rtnetlink_rcv_msg+0x121c/0x1580 [ 329.804274][T12280] __alloc_skb+0x215/0xa10 [ 329.808736][T12280] netlink_ack+0x579/0x1240 [ 329.813293][T12280] netlink_rcv_skb+0x316/0x620 [ 329.818099][T12280] ? rtnetlink_bind+0x120/0x120 [ 329.822995][T12280] rtnetlink_rcv+0x50/0x60 [ 329.827457][T12280] netlink_unicast+0xf6c/0x1050 [ 329.832355][T12280] netlink_sendmsg+0x110f/0x1330 [ 329.837359][T12280] ? netlink_getsockopt+0x1430/0x1430 [ 329.842753][T12280] ___sys_sendmsg+0x14ff/0x1590 [ 329.847634][T12280] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 329.853772][T12280] ? __fget_light+0x6b1/0x710 [ 329.858479][T12280] ? kmsan_internal_set_origin+0x6a/0xb0 [ 329.864150][T12280] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 329.870076][T12280] __se_sys_sendmsg+0x305/0x460 [ 329.874972][T12280] __x64_sys_sendmsg+0x4a/0x70 [ 329.880191][T12280] do_syscall_64+0xbc/0xf0 [ 329.884644][T12280] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 329.890559][T12280] RIP: 0033:0x459a59 [ 329.894505][T12280] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.914137][T12280] RSP: 002b:00007fd1b6dadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.922588][T12280] RAX: ffffffffffffffda RBX: 00007fd1b6dadc90 RCX: 0000000000459a59 [ 329.930589][T12280] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 329.938753][T12280] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.946927][T12280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1b6dae6d4 [ 329.954919][T12280] R13: 00000000004c7506 R14: 00000000004dd110 R15: 0000000000000006 [ 329.971107][ T4895] usb 2-1: USB disconnect, device number 2 14:29:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) pidfd_open(r2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="d94d8a8f07070099978f7fbb2323538816c728852f84d9de5aa4c797d3e042e81d8b8d62e34130c11df4d799c2e4448136b58c3f82c343c79b93afb9fbe352c91b5dc2fba0564209af8f95292031ecabbe7cd3eaba24371608ec011e9380624308c570683c79ae0c31d5179bd5c687515468fa5f8a702410721f678958e96fc905b570ea7cb88e8690db2abc5483ee8bf7db68c33d7a4f40cbe8cdf9be31f5efa354f1e3e0ce6749521570eee367f448c76a33305c5a65e5bf", @ANYRES32=0x0], 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x111000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000740)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r5}, &(0x7f00000000c0)=0x20) r7 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x7fd0000000, 0x200200) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x23010c0}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0xc0, r8, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2299}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x404644d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r5, 0xd845, 0x6}, 0xc) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f00000008c0)="6bfe3f6cd7ceedea824969c87780ac963230758a385a1beefa89bea53d17ba2417c69353dde3223cd65a2be701eda966df13677d1ac815553d3beaab87f855d1adb74aa690f586f72ec3dcb56c87299d50bba2f4dbc0a0fbc9203c4c0781ba49ec26263f8480fbb6f534913fa3ab301d2a8d87698ae94e8b5c168d01a26f100ebc2c4b1beab1febec0a73bee05cf716eb749ea2d5e489c1a64d38da65f228242b743d57b1be17b53bc351e2b9da3743aa2ef24105ff834bdaa9e2db71ea44c5f2cfa35d415a4b302f74b4d46d627df5819d81a6f449b4f2dba4d01f94d47fd438a4fc4e331eee5725d79051c70") r9 = socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000880)=@usbdevfs_driver={0x6, 0x8, &(0x7f0000000780)="66657a317e24e70512f4529d61a18da79272343d7d287f091ef46827a8050f7bd7e824da4875f4b84037e3dcd6ea00801eb996096a8bc9c0e6a5bd170c0dca6fb804ed18e7622bc17d5ad93b91b0808cde85078223f54f72840feb38623bf84d5e9b0e73aa7ab2c8c4ff2e83dab76e14337881a947fcbcdb8540b60009b9925edd021b6e293ea652922cc95ce426dc5d8bdbb7c0696ea78adba9f72ac19e991010302f2dbcf610b3532ed038426e81ba28b44886671d2b68abfd0daed64f441877"}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000612400"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000090001006e6574656d0010004c0002000000000000000000000000000000000000000000000000000c00080000000000000000000c0007000000000c000b00000000000000000c000300000000000000000000000100687462000000020000000500000000000000050000000000000002000300000000000000000000000000000000000000000005000000000000000500000000000000020003000000000000000000000000000000000000000000050000000000000002000300"/218], 0xcc}}, 0x0) 14:29:56 executing program 0 (fault-call:4 fault-nth:4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 330.205316][T12287] FAULT_INJECTION: forcing a failure. [ 330.205316][T12287] name failslab, interval 1, probability 0, space 0, times 0 [ 330.218208][T12287] CPU: 0 PID: 12287 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 330.226149][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.236767][T12287] Call Trace: [ 330.240129][T12287] dump_stack+0x191/0x1f0 [ 330.244527][T12287] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 330.250492][T12287] should_fail+0xa3f/0xa50 [ 330.254984][T12287] __should_failslab+0x264/0x280 [ 330.259990][T12287] should_failslab+0x29/0x70 [ 330.264651][T12287] __kmalloc_node_track_caller+0x1cd/0x1320 [ 330.270613][T12287] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 330.276749][T12287] ? kmem_cache_alloc_node+0x1b6/0xe70 [ 330.282265][T12287] ? netlink_ack+0x579/0x1240 [ 330.287022][T12287] ? netlink_ack+0x579/0x1240 [ 330.291756][T12287] __alloc_skb+0x306/0xa10 [ 330.296231][T12287] ? netlink_ack+0x579/0x1240 [ 330.300980][T12287] netlink_ack+0x579/0x1240 [ 330.305578][T12287] netlink_rcv_skb+0x316/0x620 [ 330.310402][T12287] ? rtnetlink_bind+0x120/0x120 [ 330.315329][T12287] rtnetlink_rcv+0x50/0x60 [ 330.319809][T12287] netlink_unicast+0xf6c/0x1050 [ 330.324750][T12287] netlink_sendmsg+0x110f/0x1330 [ 330.329778][T12287] ? netlink_getsockopt+0x1430/0x1430 [ 330.335201][T12287] ___sys_sendmsg+0x14ff/0x1590 [ 330.340109][T12287] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 330.346262][T12287] ? __fget_light+0x6b1/0x710 [ 330.351001][T12287] ? kmsan_internal_set_origin+0x6a/0xb0 [ 330.356701][T12287] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 330.362652][T12287] __se_sys_sendmsg+0x305/0x460 [ 330.367581][T12287] __x64_sys_sendmsg+0x4a/0x70 [ 330.372405][T12287] do_syscall_64+0xbc/0xf0 [ 330.376889][T12287] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 330.382820][T12287] RIP: 0033:0x459a59 [ 330.386772][T12287] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.406440][T12287] RSP: 002b:00007fd1b6dadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.414918][T12287] RAX: ffffffffffffffda RBX: 00007fd1b6dadc90 RCX: 0000000000459a59 [ 330.423050][T12287] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 330.431071][T12287] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.439087][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1b6dae6d4 [ 330.447206][T12287] R13: 00000000004c7506 R14: 00000000004dd110 R15: 0000000000000006 14:29:56 executing program 0 (fault-call:4 fault-nth:5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 330.548256][T12290] FAULT_INJECTION: forcing a failure. [ 330.548256][T12290] name failslab, interval 1, probability 0, space 0, times 0 [ 330.561044][T12290] CPU: 1 PID: 12290 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 330.568982][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.579085][T12290] Call Trace: [ 330.582455][T12290] dump_stack+0x191/0x1f0 [ 330.586846][T12290] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 330.592796][T12290] should_fail+0xa3f/0xa50 [ 330.597297][T12290] __should_failslab+0x264/0x280 [ 330.602293][T12290] should_failslab+0x29/0x70 [ 330.606933][T12290] kmem_cache_alloc+0xd6/0xd10 [ 330.611737][T12290] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 330.617690][T12290] ? skb_clone+0x326/0x5d0 [ 330.622161][T12290] skb_clone+0x326/0x5d0 [ 330.626549][T12290] netlink_deliver_tap+0x804/0xeb0 [ 330.631720][T12290] netlink_unicast+0x9bd/0x1050 [ 330.636629][T12290] netlink_ack+0x1101/0x1240 [ 330.641273][T12290] netlink_rcv_skb+0x316/0x620 [ 330.646063][T12290] ? rtnetlink_bind+0x120/0x120 [ 330.650947][T12290] rtnetlink_rcv+0x50/0x60 [ 330.655845][T12290] netlink_unicast+0xf6c/0x1050 [ 330.661188][T12290] netlink_sendmsg+0x110f/0x1330 [ 330.666185][T12290] ? netlink_getsockopt+0x1430/0x1430 [ 330.671578][T12290] ___sys_sendmsg+0x14ff/0x1590 [ 330.676454][T12290] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 330.682588][T12290] ? __fget_light+0x6b1/0x710 [ 330.687288][T12290] ? kmsan_internal_set_origin+0x6a/0xb0 [ 330.692950][T12290] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 330.698870][T12290] __se_sys_sendmsg+0x305/0x460 [ 330.703763][T12290] __x64_sys_sendmsg+0x4a/0x70 [ 330.708554][T12290] do_syscall_64+0xbc/0xf0 [ 330.713003][T12290] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 330.718904][T12290] RIP: 0033:0x459a59 [ 330.722821][T12290] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.742440][T12290] RSP: 002b:00007fd1b6dadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.751481][T12290] RAX: ffffffffffffffda RBX: 00007fd1b6dadc90 RCX: 0000000000459a59 [ 330.759466][T12290] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 330.767457][T12290] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.775446][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1b6dae6d4 [ 330.783434][T12290] R13: 00000000004c7506 R14: 00000000004dd110 R15: 0000000000000006 [ 330.942316][ T4895] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 331.202200][ T4895] usb 2-1: Using ep0 maxpacket: 8 [ 331.323291][ T4895] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 331.331640][ T4895] usb 2-1: config 0 has no interface number 0 [ 331.338287][ T4895] usb 2-1: New USB device found, idVendor=0f0d, idProduct=3594, bcdDevice=e1.f5 [ 331.347446][ T4895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.359981][ T4895] usb 2-1: config 0 descriptor?? 14:29:57 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/202, 0xca) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) finit_module(r2, &(0x7f0000000080)='/dev/capi20\x00', 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0xa, 0x10000032, 0xffffffffffffffff, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 14:29:57 executing program 0 (fault-call:4 fault-nth:6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:29:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x16c525598341affd, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x800}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1, r2}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000001c0)={0x4, &(0x7f0000000140), 0x2, r4, 0x2}) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000280)={0x11, 0x1, &(0x7f0000000200)="31a7faab7880a2d6d0e2dfe8d746c36069828ffd27abca1ce3dd75e290fb2c7f201096480d0a7fe9219493b72ccb8d077c33a2d2d918f5108150df02a701133e41a35586ca079dba585dc3a58d215879890d831140b12a5d8153bc1a50546f", {0x562f, 0x9, 0x34324948, 0xc5a743035bf24d70, 0xd5, 0x4, 0x4, 0x9}}) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000000380)={r6, 0x11}) socket$isdn(0x22, 0x3, 0x24) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000400)={{0x5, 0x9}, 'port0\x00', 0x30, 0x20000, 0x7c347b70, 0x5, 0xca, 0x91, 0x5, 0x0, 0x96156c6e02dd9eee, 0xffffff9a}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000004c0)) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x5, 0xf6327f6a8afecde3) ioctl$SCSI_IOCTL_PROBE_HOST(r8, 0x5385, &(0x7f0000000580)={0x1000, ""/4096}) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r9, 0xc0385650, &(0x7f0000001600)={{0x3, @name="e2a6eabb4d2924797c0106c2a9937b5c23d9e5c1da1cdd5c503cb537dead5c26"}, 0x8, 0x0, 0x1}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) readv(r10, &(0x7f0000001940)=[{&(0x7f0000001640)=""/181, 0xb5}, {&(0x7f0000001700)=""/57, 0x39}, {&(0x7f0000001740)=""/172, 0xac}, {&(0x7f0000001800)=""/116, 0x74}, {&(0x7f0000001880)=""/128, 0x80}, {&(0x7f0000001900)=""/42, 0x2a}], 0x6) ioctl$NBD_CLEAR_QUE(r3, 0xab05) clock_getres(0x6, &(0x7f00000019c0)) r11 = open$dir(&(0x7f0000001a00)='./file0/file0\x00', 0x400000, 0x40) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001a40)=[r11, r8, 0xffffffffffffffff], 0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/hwrng\x00', 0x0, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/audio\x00', 0x400, 0x0) r13 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) 14:29:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "fd33e029eeee8f70f9f7072aa0d9a34cb9693c9d156147e6c23b31cb42195208c8910647adfaf8b2f55394ecf4a2189df66f9e52cfb8c1a49a6af92a7695086a580b200b7e84f468c7dc0541178032889d99983dc4a733c1ffffff86ae4e8247b183e74e898f9f9c4826d70a4caf9f5af65faabb5eadaf00"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) sendto$rxrpc(r5, &(0x7f00000000c0)="79927bbc1fd4b15766a17c113b201b346aff8984c7dfe9a7c8472c6720ea4b2a05f579ec00ad4ccf54cf21cb16028284536ebefe9445ba308e4797704fafd8b3dcba5303ee246a5fedeecce14d1418f1075abbf5f6e1bb45a4b3c675952eb5688948da9007f00cc2f1160c40cd9c7796d590de2d252d8e9031b831af4f", 0x7d, 0x0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) [ 331.516924][ T4895] usb 2-1: USB disconnect, device number 3 [ 331.636851][T12301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 14:29:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x41, &(0x7f0000000040)=""/76, &(0x7f00000000c0)=0x4c) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) socket$inet(0x10, 0x3, 0x0) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000100)={0xc025, 0x3}) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) fallocate(r5, 0x0, 0x4, 0x89) 14:29:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) acct(&(0x7f0000000000)='./file0\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x38, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r1, r2, 0x0, 0x1) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x2, 0x2}) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x3, @broadcast, 'ip6gretap0\x00'}}) [ 331.970256][T12312] IPVS: ftp: loaded support on port[0] = 21 14:29:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "fd33e029eeee8f70f9f7072aa0d9a34cb9693c9d156147e6c23b31cb42195208c8910647adfaf8b2f55394ecf4a2189df66f9e52cfb8c1a49a6af92a7695086a580b200b7e84f468c7dc0541178032889d99983dc4a733c1ffffff86ae4e8247b183e74e898f9f9c4826d70a4caf9f5af65faabb5eadaf00"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) sendto$rxrpc(r5, &(0x7f00000000c0)="79927bbc1fd4b15766a17c113b201b346aff8984c7dfe9a7c8472c6720ea4b2a05f579ec00ad4ccf54cf21cb16028284536ebefe9445ba308e4797704fafd8b3dcba5303ee246a5fedeecce14d1418f1075abbf5f6e1bb45a4b3c675952eb5688948da9007f00cc2f1160c40cd9c7796d590de2d252d8e9031b831af4f", 0x7d, 0x0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) 14:29:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400540, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)="e481caf51a0e9177156e18658d9f555a1aae1b7af52e6a3140950d8f3202a4c551ec9c2734157ca2207036072d18ecea40cc121417c2eed7f869f48d36f3a1fe0c81b80914e207335122df706978010439a6301e6db6cc2eb4636f56e7c385bdbc5ae78ed3b8029da1dda628cf82188855c919dfad892b33b6e96eb74b50f85a3282c6f33d3c"}, {&(0x7f0000000980)="b95435184e487fc2e08cd454c73d4e981d2ec55694e04d7b63221b8eceefff03047452436f475f9d542f022e6ebdc94428f03b6374ff917028b069ef2adc89a1236893d6c8e544471930f7d03ef30bca45065e9056f70e990a6e44e8a7346a3b9072476df26009000000fbe736c8a9b08a1e67d0fcf013423c2bffa82a9a48a8c404f11d085067a5", 0xfffffffffffffd46}, {&(0x7f0000000640)="8cb171a9fb603d75e6eb3f695a4d8417c6b8bd87993945b853c7479dcccd21f85b9c1418eac76c174b3be0bed55f3ba951c086b2156772c97311cb48960b87caedec9dd744adfd7f915a7cffe638ffc9bb7169c59fb854469b7286fc5b5843996dd4d27f3550838f23227cabf41312dd3e4bca919346ffc720ea90914ac85c5e949934fd3d4b1ffeddce89fecb35e848b74bdbef96c9345318595b98d062323ddeaf40e267c90bf7634aed15c96a9d671209cfb256693e1fa28b584386b788c6b46f61bde3fd9c78"}, {&(0x7f0000000740)="81a0ffa7f4f1aeec7c8929d421902ab4d5358f4aecbf7c904d07ae500417ace806af6aa64b3c2df93dc1cb300a0bfd7a9b2a28917fbc32f8c67f21dc6435691b84f10e6460c34f05fe59b0beb5131fc0a5b1dcdd361251f2e283ab62ef7921ff6a152f6b6c06792f02c8c0af3e452b9c4e4e549b950f722c423a6dcab6cd708c9180c3845b57dc644355700e207573bff800"}, {&(0x7f0000000800)="5ab4f6d11c66fb"}, {&(0x7f0000000840)="53bb3babe6ea7296"}, {&(0x7f0000000880)="4580cac70335038f75dd08f74cdc42a7015f6555c040ebacf9e3d753c303663dd258af31e0724f4fb8d2107ccdc87e0f07ff3b80304645d89d744654a19d17dad0bd992e56"}], 0x3d, 0x0, 0xffffff64}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000040)={0x1, 0x9, 0x4, 0x3, 0xce82, 0x3}) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0x7f, @dev={[], 0x27}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') write$binfmt_elf32(r4, &(0x7f0000001d40)=ANY=[@ANYBLOB="7f454c46810003200500000000000000020003000100000091020000380000000703000002000000ff0f200002007dbf0400000400000000060000000800000002000000060000000200000007000000c4dfffff572000002f8e8c1ddf595053cc48ba11a209aa8fe62cd23fef982a6159c86b9aebffeea73258f201be43b450daa29e655f4f0c9e75961ae8a17339e94d8ac8971190524860804142c63dd153d591c09e2b5652c3442d6f2fa1b2073d2eeb8cc9013ff3f84d85d4e9fdd0d05d84cdc9c790571779617dc01d46a19a250fe361829bcbce55a9efe8a07f2bf534aae234c3b327865b138c79b50ac8671160da4b136998ecf4bf25cf79a285589900e133b4b6eee1dbdb3988ca1bfc7b4df4bf13ea1e188440d513c156fb1550f7f0dc1fbd22500e23b1a0c04afee4f20c31ea49c67552cc6740e4aace8427e79f29aa15e7acdd278af73ad57ba676eb6e08cc420df072399a129e2882745d93488f2050b6a6e6d5966a37c0ee62db4f50c0cb795ab8b4753718c65fc5c6d16310fd236d16a4de79dfb47234b674410ac67b0232c7d5f05257eeb4c6eafd127fc1a5825ff8bb20b5ecc0e56740d22b799c00bcb48c875f05c4089db7cded0074015b19f21d3c1c61b462a01c651239045d841088eeafccf9526f2793e0c3348e542262f7aa8b0d312622e9f4f69e62b7cc40fcf3ba6f91f3e32995be9d0d7bec6de03f79115d46c097719beac23696cf8efef7a154884dc84feba95f791c7b7ded3cd2a011c25c5dfb3d76f779a0165366e268703a1bf5c93a26af92d10d778bf05250550865c9cca86fc5544198852638a11cfeeb53bed69b07f3b99a8f776f7bc9fc5e1478888d1e6f16bac699722db6a01e6c1f1bb3c34f0e1ceb6b14d4a225d19d38f252786ed66f6ff014427908d288117cac682d1640a74ccf5a1dbfca79f0fc2dd4c37014577641c5b97aade7916a5ea7f0d7e721e57b4c02469a227f45e4bbcd579632efebf0dbdca6651762cec9c7b3de1d2ac3940c54a2daa9c789deff2375e73ebb6a6fe98a103554fd1edbdfeaf9083bde5691a7632cba346fb68d5d019b1e11c254371199c5604f15b81a596d097b50513f0d1d4684e89207f3535cc7be31ab9fc729ccabc7a51bb6a18dd09d553cdc91b107eb251777a5964bfd48162b2462a251dcc7a0649c997589ecca9d64bfa151be8cce3e3ef6c6f11e2619d5d0b4da3599b1d58fbed5970bc5633bdce67d2cfcc86332306cb5dbe9691d92c0dc8f6f2ad775f0ce67e94f06e0d4101b63ad451fe0afba1a3e743b2a19327c9df9288a8fb80d7b7dc875d0092ed346330a1e46fc0b26f69fc33a170ef576b2ba154ed7ad7d8b1c3c3a6522e97340115e15860c0b6a6d909450d7aa90d55ff137dd58bc96097806410a161bb38d05e132ea4bd890135923b0750d47d3bfc35d3ee3b529f1cb16770ea4fee5ad0cb649128e237e16865dd4c966b260c31614334b8a4697b205a1ae3aac972197647864e4b66efda5f23651608c8ad9a90ac4efc748e04a0eb7d3f0df1cb5da5c628cfa3bd19bb555867b72863d711886e2692c44aec10561e92f27b900758d957f1d1eba2a5801a384845a3409da5015f80236dbeda9d989f805da29aa0dcb2f504c8603fbf7853964fe2482a07561daf632256523c97711c74f750e5bd7f96162bb4e7a894ce7602bbf01341857ed4085f8cfa44782a6d41b7b3db0655dac44c596951eda31029afc8ca808a74e39c50f45dd4a5168fe7be2d9dd80a99251b2625d716de34585d3d7b1c4d59b28d6e62d7d020f06adbcece7899ae969efba2f652922052fbb9c4bd6466279543e2164f3f171176924556d017738b06fcccac291e0dbe62aa7715b4612f55114555fab76639bdaccf42a6814dbc16195e088f784eaafe9d084bea0a05e361d9a502490eac08d965ae25d098c971437e68c87d0a03bd636bffe13456f0776aca1937c80e9dbe4ddebd6f8c8cc513021d92590f2a3c9a08b18ca3a8b91e42bf1a14fa3162d9862b2275d99d6162c9e881f3aebebc7c1d08a25c41a359e968eb30521c918887b901f2e64828112004fbf09b063b3a4c0d4b622737f6e374dabaa6541471662585671ae4a5bd90fed5a0ff2f6541a9a1f6040f79787df2b9cf41cf5e4bd6ae5dffb6a966dd43ee1522e8d4b6c3105b973b00c2d4daac712dd295e2380feb0a617e4385306681ad6f3839ddf772894a50550879d7630c0db920b89881a5d9f228317b83fe63e7ad34c5300683009ecb057958525a4843dc1388b366eddb447bbe228929efa7589b6176cda1b7ffe314633d21cbad9f9e46661617bea47509de5d487617c57b018e61e412344c22ae0f84dc09a4be97beaff1db1bdacb3ce9bb69291e86c62d8f15e81c347a67bac05a228d4344ddcb21f5188b2dcfa37c0cd54f3057f4b2b260465c64f8e2992b74835a736bb78300707056c3559995ac55cb5da9bc260fbfd7874127656b730709762e85b51683383c0d8346ffb8453d14b4dc08484096fa94f2fa0ab4ff4ef461f25335a84b77ecdfffde28746e539acb6fd8918f88ed321c543508d8fbcd0c4c3463b35bf6a56a165a67ffb2aec193c37d9824fa1f09cf11299b913b51cdaccc0fd94f0fafdc4b9162c9822ee283f17376ab2669b33e1906cc75c21f526290c1971dde7584d3b454cd01891c1193de4f122b84a3c401046fa5b9f12d048b40ae27dc0bbb109edb2f72bdc6f5678a36da04494278c8e755290c6c17f479d35aa5385657b626d2b027950959f5d98cb0b96c530be2e17abe53fb765c09969810861092b29c57d5f70960bdc72f021a513a0241a84229170f9d358368e0f7e2a4c68255566b48d9a878e5ca00317a55b479e30c59a82ae020999ed77bc8f35703e990c1d4aaa4924a547e5bd53b171bd08cf9ab65389e839ffdf004da291f648ec5076d2403a6c0e425912eefaf3d003e6261c9cace309c530b052018eed214033d7563ac24739777b1caf8dd6099ad944b1a0f9fe8768d1029a695b266e5b5a44d1ab1bbe93e9dda9a34af0bb447525d9b23056163b5fb6551c3f54b6703841d189f77240e7b271d0228d67289beba5542c659578fa98476886437edcd78682901df7d9194c3013b314c851f7ee24517c6535aef71a5ce2b5b890bc70badd96fc51ca984d7807108f4ca018e1aae0b91fed35918ca61c2e7756b44dffb7b24c860ceee4b5d00c0d5af9f109f33bc24cc502fbb73ed316668ce5101fe7a9925260eac604f9e85f60215b229f53b7c7f63e938c129c96d570280a0d344c7d4429063e76d171cbbaf040054c35a63cebbca5a12b1295a0366a86b66b8945b224419a490f77ed14178d8608e4c2fc1341f38c8097dbbeccb6e2c6abbc5addcaf8e0f86ae5fa7db60535d1007df0a10ba70711415ac3134d670aa3ecf3d88077153ae81fed66158091001cfb9b3b7ea2897579ab0b46143083a3836adba01c4475b76652c0569076bf525d951f666d04169db9fad05e754d2ec1807b70e9471e17316bee431d064555a12e86d1227e8af8c2881f0a14d48e894e0beaebb3e9295fea9b9daef0439694cf25a23224a3775a20eccba0157143465e9d20bb705191706da04b687719abfe18dfdd7baf7d80759ee8261b8533109345a0d9c1e339bc39cf5748bfb6d71af5450634e680246e2357ca2b59faf3023bb3c4993bdb4524663825cbf692c7223bbdf8e2566ea1ea0d6be0cb0eaafa9c162126737fa1523283808c999de18507f15b2aab69100c4f8801af9320388366f00515d14d1f819854935888149bfe805ba963b5dbeecb507afc6105bc9a4a1e46c1b16ffd2a29a0e3bd4dcfe5ce8e4da7ffc033f8b2a9b61db969064bbfddf848c1edc6f045d4c85e5b6e64158ef25e2ad864ca6b2b2ebc43f1e49c44595865fcaabe6eda8792b7ccca4c7f914afc86ff59709851134ed4cfb316003227eadbddfc5669210ffc29faea3ee4a4ba62a257f9736672b35e76e3ecd3d6f96091758eb4d1709aec6a5b1671efb2be68fd3b21239141f1a28e197659bd8cd94c5df4496d9cbb81e537d6baaa64b80f0ecaff0f95adb5a32f1607712c3b21823565dd89c8a309023e18343d6e56a6cf089259fd387c4913d2591928c21419ab3a785a77196638dfb58d50788e40266492043d57310a6106f35b6d55f934849ba93c35eae15fce3e20a0ef921545707caaaf62abccc99632fa3e6a936f3de4aba49b44306eaa7c8dd57ca29716244f01c875e32d19c26ab792507bd0709cc92829dc5969cec458a2eca344f62c11d10359daea6618a65aa959291c2d457558c6a67a7f2a83c34c386d58c38c3505d756c39da92d3b9275d08e1312c7b3e50e421a079163d774e350b9d176a74fda16f300a5e617bd3aa3921876621d9f90fac793f687892c0e7df4dbcbed0411f66b7c1ce2f1c46f10cfdf245d92f7a67504cd8152115eadb66826f4c186751177a3989ce064f668a51fb980be8dd22694712b0219269e9d113d2c4c8f92e9800ad3cf82556da07e4e4cb80324b0a842b9992058943ff11bca463d4b18c1a67bc42b1662cc77f2e3c4b63ddf0bae5b72e0541a7746c683d23f4937842cc2eb1f08dbc630ab8ca05a19138d992404a446a94488852f65e843ea0f89392ba40e28f8b06427a93702cd839f466d3d1e405831cd6c4e7820ab1787a484d2f90dd97a155b2754f4227feab6bbfee224767df63c519634bbe66b1b0282baa457726e3618fb9d34793269c8a1e00f7e7514678beb1f704c65a191d62b152a25d0422c6a1e2244c319f5e0fac45f9142b09aa11b12299367f8c0ee1ad931dedb4e577d358b19be3023a90ad113281b846aa57348e7700429116e18c8d9400b24dbd5ffc1d953da293d3a4a30de03dfbb6605eba60ce31f2d779edb3c39cf32f0dade5a0cfac9a7eb58a4d59fd06d76535389eee19c47617c40554096ecc6f55513481cb119b05cadd043feff1c531b909d5584ff38b4163f8b23a60793f9c91bea9c93e46d0ed78cc38696f2a5f103e5a6809e43ad935aa15c9319629bc2c0e75dcf3386c8ae781bb024ec75adb99ec33d8c7c175fc0ffc2982491296744917b85bb8ca1453d190c17e8ff2d85b9140b2027e20aff4124798de2002d2044ccb3c36c41795def784a36ccba3830d56e5441fd88a2c2e4c8bf434479a447fdcde9063cd0a7f269ec311026fb808fa9c0f2ee150b6244cd34c6c187817fb563e2edfb11f44e5edb70a910292c536b6b598287f97490bca0e6d0b0c76758add2dfaba86a16e2128900011e3b0deb0c19f49083d285d010c84bf9fcb6518c08f66237dac99b658534e341e037bde6b6a646b3e3e56eb12344b376d46fe0103d49a0aa2386d68ed208366bad2ba2f4534cfdedcc92df4d7d8d676cccb4a16138e23d1ba74cfb636fc4f526194f77de19d8a2cb95b84214dae325bee133f72cbee53dcb8628ab85f325f0ab4f397faa3df5deb680290236e6cdc24971002cea3d0ff340af2f4fdabb6468ceb190af84cd67b109d103c47247c93df06be2e341dcb5a867611b789dfde939bce2c22f2f5f46e0f26083320cf8899da7177b41fe024a4e17645c4b245de101adf82a4f2360c5e25802639de06dcf28d64ba2ff5768969029c5b36393b2006400c690c22bb83e158f464a85290ba5f0f8c20c55e71ceaf542e8000710e9cff96ea3078865b4237bccdc4d1183d6895ef5b0f9ff9626c2cb2289e2a74704fd6df0b11e9fbe141c0406af0e2de272f235ae098868dbc4863cd8cc279eda172579bf10a15472ceae3591a5952e98aad040367b59e563a50e2eb613b2695bc53791f502e033137fda76db210a28e43909647ccff54012a40710c852140d6f45bd5a85d008f2d1db41f499000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001cef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000035092986280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/6237], 0x1858) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000000440)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r10, 0x0, 0x1) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r11, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0xfe}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x10) ioctl$VT_SETMODE(r7, 0x5602, &(0x7f0000000000)={0xb9, 0x1, 0x9, 0x200}) [ 332.352996][T12319] kvm: emulating exchange as write [ 332.384750][T12312] IPVS: ftp: loaded support on port[0] = 21 14:29:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xca7b983af9bb9703, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r2, r3, 0x0, 0x1) write$P9_RSETATTR(r3, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 332.431533][T12324] IPVS: ftp: loaded support on port[0] = 21 14:29:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r4}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0x5, 0x5, 0x413195}, 0x10) fspick(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r5, 0xfffffffc}, &(0x7f00000002c0)=0x8) listen(r0, 0x1d7) r6 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r6, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 14:29:58 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6a, 0x73, 0x92, 0x10, 0x147a, 0xe018, 0x54fc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x62, 0xb3, 0xa, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x3, 0x6}}]}}]}}]}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = dup(r0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc) 14:29:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000004c0)={"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"}) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 332.890433][T12324] chnl_net:caif_netlink_parms(): no params data found [ 333.018909][T12324] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.026423][T12324] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.035242][T12324] device bridge_slave_0 entered promiscuous mode 14:29:59 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r10, r12, 0x0, 0x1) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r13, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r13}) connect(r1, &(0x7f0000000100)=@hci={0x1f, r14}, 0x80) [ 333.069699][T12324] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.077162][T12324] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.086390][T12324] device bridge_slave_1 entered promiscuous mode 14:29:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00000000000905830300911b00000000f07ea2ac5d02206d8a5085fd1e92759c2b28f368ab64fcbe75e95398195ce7c30cffc01434b1050b2bd66611aa3c1429700205111609cc14b0418c9a384d4d279a040edbfa56ba3688bb82b94c8c4025b90bd94c17746c52dacf466a3f2feee9e2867b7a643179b92c75f6a0d71182adf3b711d6b1a88f1a909cf91552c260739b33c18dc4c4f2b76bbea80ec8112902f31615f4178650eb15318119123116704815a09c0da318d26d00f31bc6673b802afcc07705b0e0b0bcb6e67d1d14c41c2380bfe2a89c5f58250664a7b5d8b823ce8fb7089ad6722b68101ef7045b76d7a6272219b54e9a29f1a05c4742507b292277dbfd30ca77b8a08d8bff701b98cb6230879dac7f7e539a5f6b965543c8eb8610c788631484cba16298a632e31a2b6296e7fdbd355e051b6cc22616c9f9a800bbd2935c5d81d56937f4"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x15, 0x35b, 0x0}) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {0xfffc}, @period={0x59, 0x0, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) write$hidraw(r3, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 333.193789][ T4895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 333.230230][T12324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.262407][T12324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.318911][T12324] team0: Port device team_slave_0 added [ 333.329206][T12324] team0: Port device team_slave_1 added [ 333.421069][T12324] device hsr_slave_0 entered promiscuous mode [ 333.462546][ T802] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 333.463801][ T4895] usb 3-1: Using ep0 maxpacket: 16 [ 333.488326][T12324] device hsr_slave_1 entered promiscuous mode [ 333.523682][T12324] debugfs: Directory 'hsr0' with parent '/' already present! [ 333.562744][T11974] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 333.572729][T12324] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.580039][T12324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.587850][T12324] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.595146][T12324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.613283][ T4895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.624410][ T4895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 333.634268][ T4895] usb 3-1: New USB device found, idVendor=147a, idProduct=e018, bcdDevice=54.fc [ 333.643512][ T4895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.653615][ T4895] usb 3-1: config 0 descriptor?? [ 333.705847][ T4895] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 333.713189][ T4895] mceusb: probe of 3-1:0.0 failed with error -12 [ 333.724877][ T802] usb 2-1: Using ep0 maxpacket: 16 [ 333.777485][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.799965][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.823903][T11974] usb 1-1: Using ep0 maxpacket: 8 [ 333.842882][T12324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.850533][ T802] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 333.858964][ T802] usb 2-1: config 0 has no interface number 0 [ 333.865240][ T802] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 333.874448][ T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.897555][ T802] usb 2-1: config 0 descriptor?? [ 333.912814][T11976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.921592][T11976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.937401][T12324] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.939474][ T4895] usb 3-1: USB disconnect, device number 2 [ 333.972258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.982013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.991086][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.998399][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.007458][T11974] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 334.016011][T11974] usb 1-1: config 0 has no interface number 0 [ 334.022336][T11974] usb 1-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 334.033728][T11974] usb 1-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 334.044988][T11974] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 334.054251][T11974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.070511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.080244][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.089398][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.096699][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.106608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.116731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.126869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.136883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.155383][T11974] usb 1-1: config 0 descriptor?? [ 334.169807][T12201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.179157][T12201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.190227][T12201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.200445][ T802] gtco 2-1:0.219: Collection level already at zero [ 334.208859][ T802] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input5 [ 334.225618][T12201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.235796][T12201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.245016][T12201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.254326][T12201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.271234][T11974] xpad 1-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 334.282737][T11974] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.65/input/input6 [ 334.287552][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.464543][T12324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.584070][T11974] usb 1-1: USB disconnect, device number 2 [ 334.591100][T11974] xpad 1-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 334.661606][ T31] usb 2-1: USB disconnect, device number 4 [ 334.763830][ T31] gtco 2-1:0.219: gtco driver disconnected 14:30:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) connect$caif(r4, &(0x7f0000000000)=@dgm={0x25, 0x4, 0x40}, 0x18) 14:30:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x15, 0x35b, 0x0}) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {0xfffc}, @period={0x59, 0x0, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) write$hidraw(r3, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 334.852289][ T4895] usb 3-1: new high-speed USB device number 3 using dummy_hcd 14:30:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8f, 0x14}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xa) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'gre0\x00', 0x3}, 0x18) [ 335.113640][ T4895] usb 3-1: Using ep0 maxpacket: 16 14:30:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 335.234195][T11974] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 335.242254][ T4895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.253583][ T4895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 335.263418][ T4895] usb 3-1: New USB device found, idVendor=147a, idProduct=e018, bcdDevice=54.fc [ 335.272601][ T4895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.329741][ T4895] usb 3-1: config 0 descriptor?? 14:30:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x101400, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000000)=""/192, &(0x7f00000000c0)=0xc0) [ 335.377961][ T4895] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 335.385251][ T4895] mceusb: probe of 3-1:0.0 failed with error -12 [ 335.472692][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 335.483545][T11974] usb 4-1: Using ep0 maxpacket: 8 14:30:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r3 = fcntl$dupfd(r2, 0x7c4a5259c3274a23, r0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) [ 335.583549][ T4895] usb 3-1: USB disconnect, device number 3 [ 335.602663][T11974] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 335.610881][T11974] usb 4-1: config 0 has no interface number 0 [ 335.617317][T11974] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.628456][T11974] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 335.639880][T11974] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 335.649280][T11974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.665519][T11974] usb 4-1: config 0 descriptor?? 14:30:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) [ 335.709410][T11974] xpad 4-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 335.721876][T11974] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input7 [ 335.723808][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 335.872916][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 335.881292][ T31] usb 2-1: config 0 has no interface number 0 [ 335.887608][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 335.896872][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:30:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x15, 0x35b, 0x0}) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {0xfffc}, @period={0x59, 0x0, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) write$hidraw(r3, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x5, 0x0, {0x51, 0xc77e, 0x4, {0xacd, 0x6}, {0x100, 0x1ff}, @period={0xc6, 0x0, 0x0, 0x100, 0x0, {0x2226, 0x0, 0x5, 0x5}, 0x1, &(0x7f0000000000)=[0xfffd]}}, {0x52, 0x0, 0x8, {0x1, 0x5}, {0x4a54, 0x1000}, @ramp={0x1, 0x100, {0x101, 0x6, 0xf3e0, 0x400}}}}) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000000c0)="95bde77eea93be3d742abef3378ea30f036e57e21e9549cdeae60bb9805e046d29bb52d97b878c9d"}, 0x20) [ 335.999442][ T31] usb 2-1: config 0 descriptor?? [ 336.016664][T11974] usb 4-1: USB disconnect, device number 2 [ 336.023960][T11974] xpad 4-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 14:30:02 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r10, r12, 0x0, 0x1) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r13, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r13}) connect(r1, &(0x7f0000000100)=@hci={0x1f, r14}, 0x80) 14:30:02 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x400800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0x301, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x5, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x103400, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x8b9) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80c21200}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0x2f4, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf470}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc8a}]}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x329}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3da6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe02}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x2f4}}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x150, 0x24, 0x40b, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "c3ef35f110ec6f0c43a729addba54776b2d01acceefcf317e4807a62c5e9ccdacf65422e8aa71e9347a3cacee92424866fcb2a01cf7f8a702e97a3a9a658daaa6c5d5d874ce8630c3f604593573cbf930ddf53aff168d081cd3e184009545ac8fddd9e238564452e5ba10fe7b7d61750a8434e9bf367b806b10764293c61db5cf83ac933f9fd94d6f14a527aa205ac11de6200ca981031326fca5d6f4443d0a16089e6e1788f6d362f075d3d830fc07e08d7432b02fd5f33178bd5897c1e75e5f0b4472e4f0f1f0f4fb6faa836f5bddc8b3301ffda62efa2685b526ec4bd55657994fa8c8e4722ba46a78a28c46eae6a1b1783e215ded79746ae3306980631ee"}, @TCA_RED_MAX_P={0x8, 0x3, 0xa0}, @TCA_RED_PARMS={0x14}]}}]}, 0x150}}, 0x0) 14:30:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "a4494b3fb6d01672", "47d51ea6f7130dd9f58aa923a6b131b4", "f1412484", "36d90deb24da89ca"}, 0x28) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r7, 0x0, 0x1) setsockopt$inet6_tcp_int(r7, 0x6, 0x1, &(0x7f0000000040)=0x7a, 0x4) sendfile(r2, r3, 0x0, 0x1) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000000)=""/16) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r10, 0xaead) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x1, 0xcc, &(0x7f0000000380)="bce3b729fab218a9e11e2cd131e036bcbb48674c108f7f5c4d4e3f059a001eec8aefaee9eb0ef6438f44cc7154d5d1cbadb7134ff8fa804667873d382c2d36ce3407f629f675790887d81f8780ae618b6f2c6583013c0e8785008337269aac0540ce03532a4f3f9a294eb9dc55035e7d77c241090eb2ee56295e618779d22d4d626956bcb52424cbee41289ba2d9255511c4d1e9e62ab2bb3702f5ae3389b9afa5acfc8e8ed1d6c1d58b40e5a6524d62682c6c4879456a8138f838dca548a6f2898b382412424640c0eb9277"}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r11, r12, 0x0, 0x1) ioctl$TIOCNOTTY(r12, 0x5422) [ 336.333885][ T31] gtco 2-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 336.342278][ T31] gtco: probe of 2-1:0.219 failed with error -5 [ 336.362719][ T31] usb 2-1: USB disconnect, device number 5 14:30:02 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0xffffffa3) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000003a00000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) [ 336.441989][ T802] usb 3-1: new high-speed USB device number 4 using dummy_hcd 14:30:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x2, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0xfffffffffffffffe) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000280)=0x2, 0x8) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/93, 0x5d}], 0x2, 0x5) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) preadv(r6, &(0x7f0000000e00), 0x0, 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 336.692239][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 336.822379][ T802] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 336.824651][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 336.830625][ T802] usb 3-1: config 0 has no interface number 0 [ 336.844322][ T802] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 336.855371][ T802] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 336.866627][ T802] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 336.875813][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:30:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) inotify_init() r6 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r7 = fcntl$dupfd(r6, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 337.003512][ T802] usb 3-1: config 0 descriptor?? 14:30:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x0, 0xe, 0x81}, @IFLA_PROTO_DOWN={0xfd00, 0x14}]}, 0x30}}, 0x2000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/194) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000012c0)) [ 337.047871][ T802] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 337.059842][ T802] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input9 [ 337.102235][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 337.175802][T12441] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.233835][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 337.242584][ T31] usb 2-1: config 0 has no interface number 0 [ 337.248890][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 337.258122][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.275203][ T31] usb 2-1: config 0 descriptor?? 14:30:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x0, 0xe, 0x81}, @IFLA_PROTO_DOWN={0xfd00, 0x14}]}, 0x30}}, 0x2000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000080)=""/194) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000012c0)) 14:30:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = getpid() fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x1, 0x0, 0xd5, 0x0, r4}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r8 = socket(0x0, 0x3, 0x6) connect$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b050000000000dfffffffffffffff00"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r11) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488bfdee3eb191726190f2d1d896773545328b79d2b3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213c782bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6f309ab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008907665c6716449a30c81bd56a349d36094f2add75bf53000100000000000000678a50a09ff13589016438d0c5f0044462e676a23850b5c862e289843fe3bb7d0fb8bcdcd9c07ccacbf83de79626720dae5ec76e30837a2c9dea5637c2ad6439cd6bf51986860a677896248acef0867cfdedb1f0f8e592c6105aef57c1c073c23507bd28cfcd47a74cafba3762f6b6c1c6ee238a2bfe44d0b9e8ef5a7998b7317c4b9dd2f9a20b0031abf74f7d16d6907e95b2addeda2f736ccb52ea2a1d243ce205c3a88af23045c0614b21cbf1b3cf4ece451658e9785da902db6baa4895a67e96c8eacc5e8fcf8de57aa3c70518f31e0d89b0a35a336c2e68e7846f8330302b729eceffdf18b98e510a6c236daeef51b4ea88a6326060d504db45d42ac1881dd10ff951cfd04d7ae550ccce2eaa0f62e03aa8b38c5e2990587b35d897c0"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r13) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r14, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r15) r16 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r16, 0x0, r17) r18 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) keyctl$chown(0x4, r18, 0x0, 0x0) r19 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r19, 0x0, r20) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r22, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r22, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) keyctl$chown(0x4, r24, 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r9, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r11, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000600", @ANYRES32=r13, @ANYBLOB, @ANYRES32=r15, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r20, @ANYBLOB="08000300", @ANYRES32=r21, @ANYRES32=r23, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) getpriority(0x0, 0x0) [ 337.325926][ T4895] usb 3-1: USB disconnect, device number 4 [ 337.333097][ T4895] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 337.425892][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:30:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) sendto$inet(r2, &(0x7f0000000040)="88e5850d86b5eb4ee83c9e93c303749920a6b9ea1d70ba15286fe87bb38fd46762b45de43cf028b5582fccd8d48a7667a87c014a3c34ccbcbd760f9869edcb52449ae605ee12e556a132264a1b8b724d40b3f04ce725", 0x56, 0x8f18a5ebee185d7b, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0xffffffeb, &(0x7f0000000480)=[{&(0x7f0000000140)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0xffffffe2}], 0x1}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) [ 337.592214][ T31] gtco 2-1:0.219: Collection level already at zero [ 337.600404][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input10 14:30:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e8afadd8f11a40a4db2d37ffe9fdd76311"}}]}, 0x150}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x54041, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='\x00') r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x101, 0x80) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000002c0)) 14:30:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x18540, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000240)="1bffda215e3d5e593471c858ac1055b732386c6258c0e97d2a6d54fdabf88d1189bda0bbd35acf3c22149b74496750f986ecdf274c3ee136537b80bd837426a544ce493c5d4b21ca472e6f7153d5b29661f68f7fe8b73a0b234e43a792dd4d8d2f45a777fbf58445cdb4985226d9480993dace0af1d3b0e9e4e0054732dbd781216c98f7a4f778e7028a", 0x8a}, {&(0x7f0000000300)="eabedbf0f51f72611031046e1f4fc97f3cc4a75ed589a4ac4996c624012ac188440be0d85ec22846176a849721686aa376d5386dde5beb98177fd27139171f7728805f15f880b785d796de3e4d55baa4ff599d655bdebe27a402494a1604a71232", 0x61}, {&(0x7f0000000380)="d9897fcba69ee2ff6799770d768581b202f6272b5e8b37205eb25c85cf564c3cad8dabef25741b17f44a579eaa62a7ebc02c03701a5e7314b03e797fcb5471cbd630b6180cb158f21b31bd507f8f6f8a1b162563a925d4ece88fb92d39d38a1d35bde6034d80c42ce3e82fd0444d70e32e731c2702dd58636b476716ed629e7981139d1a76e147e6ae520a1d6b75d378757b96ca28ae6e3db31a02083d33a6e2299a0cc7b368d76dbb2b5c01c0642a0c0be13cd71d2fe914100e4cf68705bc6ca5a4857e68f6cf15c05bf9f5cf05209f908f1601196bbc4197b2e51937a9", 0xde}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="fbc40a4ed62b4a18764e78c75eb095ca7c36240039ab06b02301212d0ec809d0cf53b4213bb8e1193e4590df8bb1171d3896929b520777abb97320a79bcc7db7cdd1226f24b5ec679d345936cf726cbece811a424651696cdea64ea40ed48004a8ea", 0x62}], 0x5}, 0x40000) r3 = accept(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000180)=@x25={0x9, @remote={[], 0x3}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000015c0)="ede34a76eb97b453502e8efe16e47a8f1d94d6c13e1557a24cf0c72e696b5bd15f61d8757db43f0beef22f0617d149418375af5618dd7247b19ba30e73a55e795934c8cce84be89c27ea1df5eebffdaca60d0a8ae3c62e0e027c66ba10615af337d30fae13dd6addfaa8879d7a", 0x6d}, {&(0x7f0000001640)="cfc7ec71bb29110f34f909282958a5fbea7e007901138242e08926401da2cbb99dbfc53025214722d10a457a371f3cf5145d9a73ad61916a07ddfbc2e66baabd2cfa20ddc2513ff06d48bbd07645ceb045fb7758a16a0c354d9ae089b589179ecf47db85e380926b2d9446af7a041977acf2b60b21e7e47dea5c81d7003f185aefa5fe2f4d608d543f", 0x89}], 0x2}, 0x800) sendfile(r4, r5, 0x0, 0x1) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0) setresuid(0x0, r7, 0x0) r8 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x7, r7, r8, 0x0, 0x0, 0x20, 0x81}, 0x9, 0x1000}) lsetxattr$security_capability(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='security.capability\x00', &(0x7f00000017c0)=@v3={0x3000000, [{0x80000001, 0xfc1}, {0x0, 0x7fff}], r7}, 0x18, 0x3) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000140)=0x6) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000001800)={0x4, 0x1000}) [ 338.010066][ T4895] usb 2-1: USB disconnect, device number 6 [ 338.063499][ T4895] gtco 2-1:0.219: gtco driver disconnected 14:30:04 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r10, r12, 0x0, 0x1) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r13, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r13}) connect(r1, &(0x7f0000000100)=@hci={0x1f, r14}, 0x80) 14:30:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) openat$vsock(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vsock\x00', 0x400000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x3) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 14:30:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = getpid() fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x1, 0x0, 0xd5, 0x0, r4}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r8 = socket(0x0, 0x3, 0x6) connect$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b050000000000dfffffffffffffff00"/193], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r11) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r13) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r14, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r15) r16 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r16, 0x0, r17) r18 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) keyctl$chown(0x4, r18, 0x0, 0x0) r19 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r19, 0x0, r20) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r22, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r22, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) keyctl$chown(0x4, r24, 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r9, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r11, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000600", @ANYRES32=r13, @ANYBLOB, @ANYRES32=r15, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r20, @ANYBLOB="08000300", @ANYRES32=r21, @ANYRES32=r23, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) getpriority(0x0, 0x0) 14:30:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffffd, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000140)=0x400) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000440)={0x2, 0x100, 0x1ff}) r6 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x5bb0cbca, 0x13, 0x1, 0x4, 0x0, 0x80000001, 0x6, 0x5, 0xfffffffffffffffb, 0x5, 0x20, 0x1ff, 0xe4f, 0x5f97, 0x4f, 0x8], 0x100000, 0x2}) sendfile(r4, r5, 0x0, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r5, &(0x7f0000000180)="46ddd789430cee4b7a5599f5d268549d0fe0e1f243f30531e49ae73e6c6ac0409f008c6a3251e56ad984026f8ded4d927b9db5148ad7f7bc2d8e34f819b29cf6ea5026261180b7205f53886282dc2af8a9b8a05f11618005", &(0x7f0000000200)=""/138}, 0xfffffe47) bind$isdn_base(r3, &(0x7f0000000080)={0x22, 0x2, 0x1, 0x80}, 0x6) 14:30:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x20, 0x27, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r1, r2, 0x0, 0x1) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) r5 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x5b1000) write$ppp(r5, &(0x7f0000000180)="67f075c8d1", 0x5) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000001400)={0x9, 0x108, 0xfa00, {r4, 0xd3, "dbf895", "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"}}, 0x110) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x5, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc0a}], 0x1, 0x0) [ 338.993713][ T4895] usb 2-1: new high-speed USB device number 7 using dummy_hcd 14:30:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4f0a07fc6f12a728ae42e30520c1cd1ce0526b5763ab61b1ed08a98c80bcc1f07944e0bc05bd7fe867178c9e80aef7310a67e90a7a69c4b9a8ae5ba9a8a6b8c903af56168e99e7ee67af954d2300352ca84cd9d48ee18fcd224510bc7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5452, &(0x7f0000000240)={0x17, 0x231, 0x0}) 14:30:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r1, r2, 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400000000010003) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x81, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) accept4$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0xffffd8ef}, 0x10, 0x100c00) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/full\x00', 0x400040, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r5) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000040001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009a9ebea8653e0907e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) prctl$PR_SVE_SET_VL(0x32, 0xad7) [ 339.242091][ T4895] usb 2-1: Using ep0 maxpacket: 16 14:30:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x284, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x400}, [@IFLA_LINKMODE={0x0, 0x11, 0x81}, @IFLA_EXT_MASK={0x0, 0x1d, 0x8a}, @IFLA_PROTO_DOWN={0x0, 0x27, 0x6}, @IFLA_CARRIER={0x0, 0x21, 0x38}, @IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x26}, @IFLA_IFALIASn, @IFLA_OPERSTATE={0x0, 0x10, 0x85}, @IFLA_GROUP={0x0, 0x1b, 0xea1}, @IFLA_MTU={0x0, 0xe, 0x1f32}, @IFLA_PHYS_SWITCH_ID={0x0, 0x24, "42bf4ba319"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:30:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x51d}], 0x1}, 0x0) [ 339.376537][ T4895] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 339.385038][ T4895] usb 2-1: config 0 has no interface number 0 [ 339.391243][ T4895] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 339.400505][ T4895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:30:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x100000001, 0x80400) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x4, 0x4) sendfile(r1, r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r4, 0x780, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x401, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x72, 0x0, 0x5, "75089eba81af088353043e14d5db1c4c", "499b2786184c4de279e4229ffae8b414d96258ffba25809c1f5cf7e5c31281c29ad80f24868c4b8dfdc6c23aa6a6072a71c5a49fcfa74533181c71339b8b580bb37cd7485fcef60666e5b36fa8a36ad326fee4dda87eb30e9b49a5b956"}, 0x4, 0x0) r5 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r5, 0x0, 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x1c70, &(0x7f00000001c0), 0x10) [ 339.462652][ T4895] usb 2-1: config 0 descriptor?? [ 339.474654][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd 14:30:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r2 = fcntl$dupfd(r0, 0x80c, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="2f1803f35df26d4a5406ab0d2f0783255a5244a6fb630e635793f029f94c6c30aa26187d20d5d44ff668f1933af9365bc77b7c34daa80c65ad99d1b953f274f03bb78b8e7436", 0x46, 0x1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 339.722600][ T4895] gtco 2-1:0.219: Collection level already at zero [ 339.730723][ T4895] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input11 14:30:05 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x8f6, 0x8, 0x8}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0xa8b, 0x1, [], &(0x7f0000000040)=0x3}) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) sendmsg$nl_generic(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x70008082}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="10050000280001002abd7000ffdbdf2504000000cc0021007b231c33c198c1eb9b7fbcc30fd29a161148d1afa4b33bb357d4d06277c53cd88e24b0c0f0d6b859cda0fb39dde87a0cbf6808004100", @ANYRES32=r2, @ANYBLOB="080010000800000008000e00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r10 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r9, r10, 0x0, 0x1) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x5) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) bind$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) writev(r6, &(0x7f0000000180), 0x3e4) [ 339.772564][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 339.926693][ T31] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 339.939931][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 339.951264][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 339.960465][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.980665][ T31] usb 3-1: config 0 descriptor?? [ 340.094536][ T802] usb 2-1: USB disconnect, device number 7 [ 340.263634][ T802] gtco 2-1:0.219: gtco driver disconnected [ 340.482577][ T31] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0001/input/input12 [ 340.505018][ T31] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 340.724699][ T802] usb 3-1: USB disconnect, device number 5 14:30:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r2, r3, 0x0, 0x1) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) listen(r1, 0x70) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea5a088179e38653b1cc810000000ac47b6268e3966cf055d90f15", 0x50}], 0x1}, 0x0) 14:30:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x2000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x22c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf38}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x91}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x310}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5c8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffeff}]}, @TIPC_NLA_MEDIA={0x150, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20042}, 0x24008000) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000004c0)=@usbdevfs_driver={0x80000000, 0x80, &(0x7f00000003c0)="d5f91c055bfef572ead1b06688d77f31f99c5cb37974bc831e3931164d4c2ab0926e31a0fe608c785cb67463bdd263d9eb71113e5624e8857b909f72169497349a2c40c56352d36579cf7df81e68723f74d80b1622e89af8c7b04acc5719e3b8beab79f8e1fc3889ce5a239b54ede1f0cb5bfe28f83083f2210b81ddae568bffc032d471c2a5b1a255c30b2c91e2c5e02065e3d0087a92d6d49654f9ef437af407730de7727a47922b024cdfc1dddf89fd08a66fd3d730b2782fb711675126eef367fa5141bde79f439a9c5095a9863274a62fe00ee072472295a9d1d1dd3cf0ebb4640bc9b8c818feaaffb6db"}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000500)=0x8000) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x40800, 0x0) fremovexattr(r3, &(0x7f0000000580)=@known='trusted.overlay.impure\x00') r4 = syz_open_dev$admmidi(&(0x7f00000005c0)='/dev/admmidi#\x00', 0x983, 0x40) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000600)) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r1, 0x820, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004045) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000007c0)={0x0, 0xc750, 0x6, [0x2, 0x6, 0x2, 0x5, 0x3, 0x9]}, &(0x7f0000000800)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000840)={r6, 0x3, 0x4b, "fc23ff5c7ff2ffa54114b070d8b5541428831da7ca00495596553ba9cef0961d23b3dc5dc4038967c519c9fddd5c0492ecd968fee157426852863743d26a73cc4599621a7317660cc819cc"}, 0x53) r7 = syz_open_dev$admmidi(&(0x7f00000008c0)='/dev/admmidi#\x00', 0xa9, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000900), 0x4) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm-monitor\x00', 0x2000, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, &(0x7f0000000ac0)={0x3, &(0x7f00000009c0)="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"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/video35\x00', 0x2, 0x0) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000b80)={r6, 0x7}, 0x8) chmod(&(0x7f0000000bc0)='./file0\x00', 0x4) r10 = dup2(r5, 0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000c00)=""/187) r11 = open(&(0x7f0000000cc0)='./file0\x00', 0x890180, 0x120) ioctl$KDGKBSENT(r11, 0x4b48, &(0x7f0000000d00)={0xa3, 0x5}) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001100)={r6, 0x1}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001180)={0x0, 0xffffffff}, &(0x7f00000011c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000018c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x1c}, 0x200}}, 0x5, 0x100}, &(0x7f0000001980)=0x90) sendmmsg$inet_sctp(r12, &(0x7f0000002140)=[{&(0x7f0000000d80)=@in6={0xa, 0x4e22, 0x3f, @rand_addr="4bcc5732f8bc38f35cbaa9386a40b899"}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000dc0)="a23a585d50cea175842416decd26dabca16fa0f4d5b4ba94d582261a4d733f2a4d731a7aadc0b7c271432a4820e76fc32bd83e18ed37ba3ffb409d73f6910a030cdfc801aa496d283655f91c26a1d30388e2c416f5c933a8861ca55b0bbf24bfeb23cb7b330e33b84efcbb3f66d909fd86ad", 0x72}, {&(0x7f0000000e40)="50f82ca574693c14237c6fb75abde8997a7422188f02f8d93f7feb123dfb6d0fd1f3ac60a5f90bc348bbb2c9975f392670ca43db75f5ac78ec1601cd913f9cc51d19a3568bba51f8efe99aa225b5ace2a2d9457622f4cb522abf238dccb57d4c3162af9e07b19f9f985fbd497e5dfcd462303ccff4b17e58bcdd1467b5baf441d2a3e362e3f00a23683b4b113819ce986698f03b9150c020c7e1b356c0635c8fe0006283a5951bc306ab82db331fff729e089bbe3a0eaaa95616060df2092d91d992dd8f7dc838efdf46930060bac5a5495a40", 0xd3}, {&(0x7f0000000f40)="18c47ef61890c16ec005ae010d1b20b6f64dedaac4c8f10e30713ce980d71121a8a7c32aa879f2fa7b185405d49cd07faa6fbcd77b47e6146dcdc74f15cabceb084773ee4788482b5102ad8846fe8deba38287310c757f64d5099a345c755eecb4a71a6fc6b447ec11684dd2ed961bfa77730d203e8ecd922521257df4aa782cc7675bde2a8b8ba9cd4edf224fdeab26bfa53e786b14fc9540388a22f70f100f14bdb0538ede52", 0xa7}, {&(0x7f0000001000)="84ab67ff8f6795885452daa6c4fc25113bb8fc28d753b89cd936139764a693e939a973efb7d3954014c58c55c139e1b445c53db3a71825158b2802f274a3ea7fffb2a19a467e65c5daac911e10320120cf245f35c2758570e33b003d39cbfb7d3f2e099e96105f7089f09952e91ebe8ea624863232ff841d27aa4c3468e6e4e42cd0bf03fe2b6f1ce6ee781c946da8", 0x8f}], 0x4, &(0x7f0000001200)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x100}}, @prinfo={0x18, 0x84, 0x5, {0xcd9e584bb8e5a026, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x81, 0xcc808a45eed16556, 0x81, 0x5166, 0x6, 0x1, 0x1000, r13}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x4207, 0x1000, 0x1, r14}}, @init={0x18, 0x84, 0x0, {0x5, 0xce3e, 0x800, 0x100}}], 0x98, 0x4000000}, {&(0x7f00000012c0)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001300)="c3b3874325cc99eeac2e4d3856076361162f6a9aee573026513d4759b645ae9e8e09a72bc84ec28ac8aa858054685882edc88ff912a9d4c533edfc6a26c1fe81ceaea6f4e1ff077fd87280630e4ba44bffc88c32fe80f460906a08bd95114f839c7df1df51edf7fef01a53aafd6a079588be1bcc9ac361bb9e75544de4fbdb742570a2f169fcca1d28f8528d00bedd2ec52f1de0541bfcb3da2b54dfb09a76f0d008ffc8ca85268830309f0a0ce5733f4688ace189bdc4edcb3f1664124ef54a83475ea2d86cafeda2dde4edfe0b81e7c11f8987", 0xd4}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000001440)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001480)="4b4fef4a7711350e037454790468110326c4579000fcf8183b11fde14e2b747d95d842fe15af8cc0db5e96dd697224c0c6b1dfe9f19d0b8a1f216d849844ebde92089397faf363ccbc4e44ed634db2cb9cf9233ee857348e63d578786eaf72c40b0c9c28e2cda62de3696a", 0x6b}, {&(0x7f0000001500)="bbd8b0b92e09c9e47a086622435df07d5129bdf1dc53a0f6a822b023dfd50a1fa83d4fbc90e14f346647c119f809e048a91692e8bb8c36ab8b9c8869090a8eaa9c2b4cd88c026364351185851036b54e2bd652a62a8635e6c58fa4f671dbcb7c13e91fd9a06684b1830101c69b813191c726299527316e9150a532b1fd39be2df948c936fd64819b3ae4879c3cf49674741d3548d82461216992f13f6ebda34c8ec3145cb8935ca348b8ab0c9026d57dca2f29635154415ac47ff5314ddc63ed8295e87c390442408e9b48bf88e285efe6fdf913c1681fb31c2a2003a49443987c3d389d481aaa11e8c6", 0xea}, {&(0x7f0000001600)="fcabd896244cec6a9b8b9893b624af9b4f99119e860ae41010fca6802d70093603551d19081106c1926be013e4a2557a738442bb998373378af12eff4f4e7871a160d3c92ebea325e8633cfcf541d4c2cccf1335a580b8aab90e055a32916a681189671d1c8e5b24314d622dc1448406059745b93393e7b87a09d264b76ff6e469dabc9767931c44a8fc0d6f9ece9b8afd3ccf061c", 0x95}, {&(0x7f00000016c0)="02a69302f2979badc757e6254cd5c9f4da9247ca57c5dcb838a8709fc9fce6e24f14322a695abbc59545d37d2dce21412cd3a22cf59935c95513a1bde1933bb2469ec4a22321cd9efdca05cb6782e687bbeb045f1722fb6a198b0ca0e661db2d20d076c57af5dda8ccf97b04c88d27e8c02ce01fec3b659a9964bcdcbde8a47d6a9784b0cfc72190e97b0e8e335f4de326", 0x91}, {&(0x7f0000001780)="5c8c07e69f7679dddfb9f0f0b32f766a320610d912b870214da2170b317e55fbbb9e9266d5ef139f6627e1e20d4098cb60cbba4c307c42d740b11de18d87b4333d9bfbd1d9fb4440cdd6bc65ed15c76a93e487e2f782e86f77246f3b5870b2f514da4eccef8883", 0x67}, {&(0x7f0000001800)="24fd93dc625531b7c6a56a45e5e69904309ac7ad31308a5ba1a63c72f411722462cb58", 0x23}], 0x6, &(0x7f00000019c0)=[@init={0x18, 0x84, 0x0, {0x9, 0x7, 0xa59, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x6, 0x4006, 0x6, 0x8000, 0x8, 0x8, 0x3, r6}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x20}}, @init={0x18, 0x84, 0x0, {0x8, 0x8000, 0x7, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x5752, 0xfff, 0x209, 0x7, 0x6, 0x3, 0x4, 0x4, r15}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0x6, 0x6, 0x4, 0x401}}], 0x110, 0x2000c800}, {&(0x7f0000001b00)=@in={0x2, 0x4e20, @rand_addr=0x3}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001b40)="dad927a076ea", 0x6}], 0x1, 0x0, 0x0, 0x8}, {&(0x7f0000001bc0)=@in6={0xa, 0x4e23, 0x7fffffff, @local, 0x2}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001c00)="017082e65e43500f235e925add51217daec36c9798712dc825bc118914c16ca363727ff9df2097b50d3966728ee6906a3200c2219e11d4117f41d2809883667f24749f12c8f9a365265d37543e2ac56546aa862e75783043d8b2209b29862cc69668df779e99affc3b80d3aa5e966252577277cdf3cd8a432090d0fb15f257a31610a05184f5d04d283008e8ed659b646fab2d71759fd3f40642c34b7e47385cb21ec371b3d65a8c240af78d7882822b9fd6f321e04061b8d99a6c564dfa9b39245051ab0fb655bb3c84333c715d0045ffbdc69dae74e45ce75c3336a8e025006d", 0xe1}, {&(0x7f0000001d00)="5d9222b82b4a147f1128dfae6c809133bef54790e375b7dff3e6287eac386eb178d8b186fb6d8ed06b44e4653ca216bf585255c2348629ea9aa5aa715a83d5da1f6bb81f384c2829beef833b042f09100b38dd34bd7cc12c50e58abe2667b7bd0779daba883aaef35887ed3a54437bfb3c8c473703a7a841ab6413ad1aa59b87bc75a2067112b2afdd648fe380fa022c9026d8c821813c170ed32f2e4b23fde8e423b990645a898ec071f5fda42c0e9428829847fdc1822e4e3b894a8084959a01d216aae7829bd2b2cbe8c3935dc3e01ce785b4770e3dadcfdf9f", 0xdb}, {&(0x7f0000001e00)="6504cf66784d0b6a17dafc22498a488b5a37ed297f38e1ffb2106f7940a48cd1bcec93c3c0353080ab0304d28c33e9cc1f1d159b1415a4874541078129233bb970bef610a6001a2c8318afcc3ebf8326cbe22ff46318d8aa57379d73a8a65a01554563e763f5907d1942a5072e48453e5e7f8d607293f85fec9e135881b50048657b5db4f92eed089344009ddafc876c9ba988f57018af91f7c1a73268eeaad629da3e8c9c6b9596018592cce1c170873d33f9e93ec7c2829bc7714a08f255fff3e24c27dbe50287f3cbfd9f3d612f0d449cf9", 0xd3}, {&(0x7f0000001f00)="d236db221126f11a71443ed68ecbe8bfa53516c05814a1cff507b20b123116ee5c071ec558de917e2b72d46179cce4c0354ab89b443232f601", 0x39}, {&(0x7f0000001f40)="d15aa999dddb662dcd53c6609ae9dcdf2dbe77a868e9e8a0760bdeaf4fb943328c67b8c778f3cc2a4a3c2e3e51ac3ed3f4702738209b14bdc389acc9f92edb51ff58c87f9b8782d0134a056310d5d2da9984b0a09d0be6c995", 0x59}, {&(0x7f0000001fc0)="63209e03b947444b52c3b3c222cb079c6dfc1abc11af189ddd0cdffdc6f307ee35927c2370a545dda4a5e8872a291b8734f51e1481397c6c853d6162068b98a591c195822d934fd0f1bf809c2a3d3e3c4546615c9fb2087613ebac5ab6f5850c225f10ff1b2a5c9962c3b344b0885d64c9e6cb4c16d473bc73802a34a9fe61455ded3f7b63d503eb664d77c1246cc1bc75908e6f80b43787010fb7fb2ae8c212792e9e64875295", 0xa7}], 0x6, &(0x7f0000002100)=[@sndrcv={0x30, 0x84, 0x1, {0x8000, 0x8, 0x201, 0x40000, 0xfffff001, 0x9, 0x5, 0x0, r6}}], 0x30, 0x800}], 0x5, 0x880) 14:30:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 14:30:06 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r10, r12, 0x0, 0x1) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r13, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r13}) connect(r1, &(0x7f0000000100)=@hci={0x1f, r14}, 0x80) [ 340.940867][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.016936][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:30:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0x3ff) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 341.211975][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 341.415240][T12564] IPVS: ftp: loaded support on port[0] = 21 [ 341.505303][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 341.565688][T12564] chnl_net:caif_netlink_parms(): no params data found [ 341.629257][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.636672][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.645560][T12564] device bridge_slave_0 entered promiscuous mode [ 341.652852][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 341.661185][ T31] usb 2-1: config 0 has no interface number 0 [ 341.664027][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.667459][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 341.674472][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.683584][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.700475][T12564] device bridge_slave_1 entered promiscuous mode [ 341.728553][ T31] usb 2-1: config 0 descriptor?? [ 341.738178][ T802] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 341.754023][T12564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.769165][T12564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.826374][T12564] team0: Port device team_slave_0 added [ 341.847036][T12564] team0: Port device team_slave_1 added [ 341.938596][T12564] device hsr_slave_0 entered promiscuous mode [ 341.984973][T12564] device hsr_slave_1 entered promiscuous mode [ 341.992171][ T31] gtco 2-1:0.219: Collection level already at zero [ 342.000392][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input13 [ 342.012175][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 342.023621][T12564] debugfs: Directory 'hsr0' with parent '/' already present! [ 342.075788][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.083117][T12564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.090852][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.098152][T12564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.154073][ T802] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 342.167531][ T802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.174818][ T802] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 342.184148][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.216256][ T802] usb 3-1: config 0 descriptor?? [ 342.269900][T12564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.314650][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.328560][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.345856][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.368896][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 342.399990][T12564] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.427880][T12201] usb 2-1: USB disconnect, device number 8 [ 342.452954][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.462125][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.469405][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.492726][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.502244][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.509524][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state 14:30:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5452, &(0x7f0000000240)={0x17, 0x231, 0x0}) 14:30:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000d00)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r7 = syz_open_dev$dspn(&(0x7f0000000680)='/dev/dsp#\x00', 0x0, 0x10000) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000006c0)={0x1, 0x0, 0xc4, 0x0, 0xffffffff, 0x6, 0x81, 0x8, 0x9, 0x6, 0x10, 0x80, 0x0, 0x3f9, 0x9, 0x5b, 0x0, 0x7, 0x3}) r8 = clone3(&(0x7f0000000540)={0x300, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0), 0x4, 0x0, &(0x7f0000000400)=""/13, 0xd, &(0x7f0000000440)=""/222}, 0x40) wait4(r8, &(0x7f0000000580), 0x80000002, &(0x7f00000005c0)) setresgid(r6, 0x0, r6) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x40001, &(0x7f0000000100)=ANY=[@ANYBLOB="e63d00", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303430302c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313030302c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313730302c616c6c6f775f6f746865722c6f626a5f726f6c653d2a2c736d61636b6673666c6f6f723dae6c6f2c2c00"]) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast1, 0x7fffffff, 0x1, 0x78, 0x1e, 0x3f, 0x1f}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@flags], 0x1) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000740)={0x2, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x0, 'sed\x00', 0x8, 0x200, 0x5c}, 0x2c) 14:30:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x3}}, 0x1e) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 342.536009][T12201] gtco 2-1:0.219: gtco driver disconnected [ 342.606041][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.615131][ T802] usbhid 3-1:0.0: can't add hid device: -71 [ 342.616148][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.621415][ T802] usbhid: probe of 3-1:0.0 failed with error -71 [ 342.630683][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.669238][T12564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.682289][T12564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.707179][ T802] usb 3-1: USB disconnect, device number 6 14:30:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000d00)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r7 = syz_open_dev$dspn(&(0x7f0000000680)='/dev/dsp#\x00', 0x0, 0x10000) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000006c0)={0x1, 0x0, 0xc4, 0x0, 0xffffffff, 0x6, 0x81, 0x8, 0x9, 0x6, 0x10, 0x80, 0x0, 0x3f9, 0x9, 0x5b, 0x0, 0x7, 0x3}) r8 = clone3(&(0x7f0000000540)={0x300, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0), 0x4, 0x0, &(0x7f0000000400)=""/13, 0xd, &(0x7f0000000440)=""/222}, 0x40) wait4(r8, &(0x7f0000000580), 0x80000002, &(0x7f00000005c0)) setresgid(r6, 0x0, r6) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x40001, &(0x7f0000000100)=ANY=[@ANYBLOB="e63d00", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303430302c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313030302c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313730302c616c6c6f775f6f746865722c6f626a5f726f6c653d2a2c736d61636b6673666c6f6f723dae6c6f2c2c00"]) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast1, 0x7fffffff, 0x1, 0x78, 0x1e, 0x3f, 0x1f}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@flags], 0x1) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000740)={0x2, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x0, 'sed\x00', 0x8, 0x200, 0x5c}, 0x2c) [ 342.738192][T12564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.748351][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.757803][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.767162][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 14:30:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 14:30:09 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r10, r12, 0x0, 0x1) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r13, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r13}) 14:30:09 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000d00)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r7 = syz_open_dev$dspn(&(0x7f0000000680)='/dev/dsp#\x00', 0x0, 0x10000) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000006c0)={0x1, 0x0, 0xc4, 0x0, 0xffffffff, 0x6, 0x81, 0x8, 0x9, 0x6, 0x10, 0x80, 0x0, 0x3f9, 0x9, 0x5b, 0x0, 0x7, 0x3}) r8 = clone3(&(0x7f0000000540)={0x300, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0), 0x4, 0x0, &(0x7f0000000400)=""/13, 0xd, &(0x7f0000000440)=""/222}, 0x40) wait4(r8, &(0x7f0000000580), 0x80000002, &(0x7f00000005c0)) setresgid(r6, 0x0, r6) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x40001, &(0x7f0000000100)=ANY=[@ANYBLOB="e63d00", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303430302c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313030302c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313730302c616c6c6f775f6f746865722c6f626a5f726f6c653d2a2c736d61636b6673666c6f6f723dae6c6f2c2c00"]) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast1, 0x7fffffff, 0x1, 0x78, 0x1e, 0x3f, 0x1f}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@flags], 0x1) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000740)={0x2, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x0, 'sed\x00', 0x8, 0x200, 0x5c}, 0x2c) 14:30:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5452, &(0x7f0000000240)={0x17, 0x231, 0x0}) [ 343.152152][ T802] usb 3-1: new high-speed USB device number 7 using dummy_hcd 14:30:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0) setresuid(0x0, r7, 0x0) r8 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x7, r7, r8, 0x0, 0x0, 0x20, 0x81}, 0x9, 0x1000}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000040)={0x0, 0x0, r5, 0x0, r7, 0x0, 0x47, 0xff}) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:09 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001c750408b80402023667000000010902120001000000000904b5000017e6f1000f6cac227fc7b3192cf0d629a7ff6667ddc7f41055b54115ebaffd4277172ba48c2dd08961a28ab3d26751fce191aed0997e0cc1126c17318b998a7b2ffdffa799ba2b600e205fe7f79c9b0e560a7a6f1f6b748170dd090e47dc18ab21fecd32b92ca49f45262266eb85aeb77fb0ad4909e3227076d141f7050000008515a897d989e645a0bcb28d365986222030730816643253101a4711df1d4c92e2b1945a6dff0e4fb07f0000001421a6db61537bef952d0b4402dc129d951f85855486d80eca1749445d8f0905ba127f8969"], 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x43f2e4ec, 0x20000) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x401) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) [ 343.392276][ T802] usb 3-1: Using ep0 maxpacket: 8 14:30:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) ioctl$EVIOCSCLOCKID(r2, 0x80084503, &(0x7f0000ffcffc)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$inet(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 343.462769][T12201] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 343.513168][ T802] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 343.526733][ T802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 343.533548][ T802] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 343.542750][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.581163][ T802] usb 3-1: config 0 descriptor?? [ 343.615937][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 343.712035][T12201] usb 2-1: Using ep0 maxpacket: 16 14:30:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0xfffffffffffffd43}], 0x1}, 0x0) [ 343.772575][T12094] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 343.833523][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 343.842040][T12201] usb 2-1: config 0 has no interface number 0 [ 343.848264][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 343.859060][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.872975][T12201] usb 2-1: config 0 descriptor?? [ 343.874761][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 344.014538][ T31] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 344.027710][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 344.034988][ T31] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 344.044330][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.053329][T12094] usb 4-1: Using ep0 maxpacket: 8 [ 344.060694][ T31] usb 5-1: config 0 descriptor?? [ 344.093898][ T802] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0002/input/input15 [ 344.132876][T12201] gtco 2-1:0.219: Collection level already at zero [ 344.141075][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input14 [ 344.166770][ T802] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 344.213296][T12094] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 344.221673][T12094] usb 4-1: config 0 has no interface number 0 [ 344.228137][T12094] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=67.36 [ 344.237792][T12094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.302857][T12094] usb 4-1: config 0 descriptor?? [ 344.392973][ T802] usb 3-1: USB disconnect, device number 7 [ 344.484508][T12201] usb 2-1: USB disconnect, device number 9 [ 344.543921][T12201] gtco 2-1:0.219: gtco driver disconnected [ 344.574791][ T31] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0003/input/input16 [ 344.603143][T12094] usb 4-1: USB disconnect, device number 3 [ 344.648382][ T31] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 344.888991][T12094] usb 5-1: USB disconnect, device number 2 14:30:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5452, &(0x7f0000000240)={0x17, 0x231, 0x0}) 14:30:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x1, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:11 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r10, r12, 0x0, 0x1) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r13, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) [ 345.382041][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 345.502076][T12201] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 345.542164][ T802] usb 3-1: new high-speed USB device number 8 using dummy_hcd 14:30:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5452, &(0x7f0000000240)={0x17, 0x231, 0x0}) 14:30:11 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r10, r12, 0x0, 0x1) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, r13, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r13}) [ 345.753457][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 345.783170][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 345.872567][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 345.881094][T12201] usb 2-1: config 0 has no interface number 0 [ 345.887843][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 345.898241][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.912530][T12201] usb 2-1: config 0 descriptor?? [ 345.924104][ T802] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 345.937420][ T802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 345.944312][ T802] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 345.953522][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.975748][ T802] usb 3-1: config 0 descriptor?? [ 346.032061][T11974] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 346.151932][ T31] usb 4-1: device descriptor read/64, error -71 [ 346.213061][T12201] gtco 2-1:0.219: Collection level already at zero [ 346.221273][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input17 [ 346.282104][T11974] usb 5-1: Using ep0 maxpacket: 8 14:30:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pwrite64(r1, &(0x7f00000004c0)="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", 0x1000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x40, @local, 0x7ff}, @in6={0xa, 0x4e20, 0x6, @remote, 0x1}], 0x58) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x3, 0x4) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) connect$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x0, @multicast1}}, 0x1e3) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000000c0)={'ip_vti0\x00', {0x2, 0x4e20, @multicast1}}) r6 = socket$inet(0x10, 0x3, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000040)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r9}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r9, &(0x7f0000000340)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) [ 346.398625][T12655] sctp: [Deprecated]: syz-executor.0 (pid 12655) Use of int in maxseg socket option. [ 346.398625][T12655] Use struct sctp_assoc_value instead [ 346.415087][T11974] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 346.428348][T11974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 346.435409][T11974] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 346.444762][T11974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.483238][ T802] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0004/input/input18 [ 346.522952][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 346.569017][ T802] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 346.621716][T12094] usb 2-1: USB disconnect, device number 10 [ 346.646901][T11974] usb 5-1: config 0 descriptor?? [ 346.669054][ T31] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 346.677415][ T31] usb 4-1: config 0 has no interface number 0 [ 346.684024][ T31] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 346.693219][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.703337][T12094] gtco 2-1:0.219: gtco driver disconnected [ 346.717723][T12657] sctp: [Deprecated]: syz-executor.0 (pid 12657) Use of int in maxseg socket option. [ 346.717723][T12657] Use struct sctp_assoc_value instead [ 346.748776][ T4895] usb 3-1: USB disconnect, device number 8 [ 346.797053][ T31] usb 4-1: config 0 descriptor?? 14:30:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) clone3(&(0x7f00000004c0)={0x1000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0, 0x6, 0x0, &(0x7f0000000300)=""/228, 0xe4, &(0x7f0000000400)=""/132}, 0x40) r2 = getuid() r3 = getegid() r4 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) r8 = syz_open_dev$cec(&(0x7f0000000700)='/dev/cec#\x00', 0x2, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740)={0x0, 0x0}) r10 = geteuid() r11 = getegid() r12 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_open_dev$rtc(&(0x7f0000000800)='/dev/rtc#\x00', 0x0, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8) r17 = getgid() r18 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) r22 = fsopen(&(0x7f0000001e40)='cgroup2\x00', 0x2) r23 = syz_open_dev$ndb(&(0x7f0000001e80)='/dev/nbd#\x00', 0x0, 0x20080) r24 = inotify_init() r25 = syz_open_dev$hiddev(&(0x7f0000001ec0)='/dev/usb/hiddev#\x00', 0x7, 0x430040) r26 = syz_open_dev$sndseq(&(0x7f0000001f00)='/dev/snd/seq\x00', 0x0, 0x50400) r27 = signalfd(0xffffffffffffffff, &(0x7f0000001f40)={0x3}, 0x8) lstat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = socket$inet_smc(0x2b, 0x1, 0x0) r31 = dup(0xffffffffffffffff) r32 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/netstat\x00') r33 = syz_open_dev$ndb(&(0x7f0000002100)='/dev/nbd#\x00', 0x0, 0x220600) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003680)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000036c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f00000037c0)=0xe8) r36 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003840)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000003800)='-eth1\x00'}, 0x30) getresuid(&(0x7f0000003880)=0x0, &(0x7f00000038c0), &(0x7f0000003900)) getresgid(&(0x7f0000003940), &(0x7f0000003980), &(0x7f00000039c0)=0x0) r40 = syz_open_dev$video(&(0x7f0000003a00)='/dev/video#\x00', 0x7f, 0x200000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003a40)={0xffffffffffffffff}) r42 = socket(0x7, 0x1, 0x3a) r43 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r44 = eventfd(0xfffffffd) r45 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/rtc0\x00', 0x4000, 0x0) r46 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003ac0)='/dev/nullb0\x00', 0x180003, 0x0) r47 = socket$inet_udplite(0x2, 0x2, 0x88) r48 = creat(&(0x7f0000003b00)='./file0\x00', 0x5e26ddf5cb5b6fce) r49 = syz_open_dev$dmmidi(&(0x7f0000003b40)='/dev/dmmidi#\x00', 0x0, 0x2) r50 = fspick(0xffffffffffffffff, &(0x7f0000003b80)='./file0\x00', 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003bc0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003c00)={0x0, 0x0}, &(0x7f0000003c40)=0xc) fstat(0xffffffffffffffff, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r54 = openat$full(0xffffffffffffff9c, &(0x7f0000003d00)='/dev/full\x00', 0x1, 0x0) r55 = syz_open_dev$usbfs(&(0x7f0000003d40)='/dev/bus/usb/00#/00#\x00', 0x1b3c, 0xf182338804ea4e15) r56 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003d80)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000003e80)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, &(0x7f0000003f00)=0xc) r59 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003f40)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003f80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003fc0)={{{@in6=@ipv4={[], [], @dev}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f00000040c0)=0xe8) r62 = getegid() r63 = socket$vsock_stream(0x28, 0x1, 0x0) r64 = syz_open_dev$hiddev(&(0x7f0000004800)='/dev/usb/hiddev#\x00', 0x0, 0x2e0676e5ebc3a790) sendmmsg$unix(r0, &(0x7f0000006180)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="1ea3ba43e24dbb8465cbdbfdee6806945094fb5dd55be408a2d96cf5f0f8d35af872e9586bd7fc133bb6463e835f379c06856428d5d6bc11123419ace4d97da38decec0e0a09d7", 0x47}, {&(0x7f0000000140)="6f3787d3e0a2608e9a41b760f090fe61c95eb4743cf3dbaefc6f9682cfdc90c9b7c06616d2502ae2512e51d3e2ce420f470bc0783dfa6d30e8ca9bc6115737145530599f44ff4747c9e97bffbdf59a493a08694797d9327387b4bba29057d3636de395191c402a9da95eb8586586e52e5089c1ea35fce13924a604c14b08e9001486140e97e2be5d2e6a7a2f4e1ed9c4302897cf79286830504b96a78cde5687", 0xa0}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r13}}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x10}}], 0x100, 0xae32af23e06df3f2}, {&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000cc0)="019b73c07186a3b70706bf7c767ef4f41c5589bf9704b7741afdbf91eab3ca4923921dd9119036ac887e833dcc1b5411e6026676eff2a9be10a948534c4fd4b752979846f4479853672e0e426fb86146134f8a2f9dcd73241482ec8d5c2ac36813e46b76c12c0008e4c6fe762eb021fc49d7dbda7cf7132d12c25f2c14c791349153429afd0bc484a021f850601d1e657a124e536737a1a2e8c718ecce598c4d7dc3c960c16534f7fcb1cc349884818ea726277adc53237b92", 0xb9}, {&(0x7f0000000d80)="0761a488758ba557ebca67f733c2bae7f32fb65b21352deae8", 0x19}, {&(0x7f0000000dc0)="0c3bfcc984a89e5ef04fd40a82f5e7d38b54fd82a4727b40fdca859159b6782ffd563a2a144ec8860ce490f312e2fc2ae2ecce8d0944a147ea5a", 0x3a}, {&(0x7f0000000e00)="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", 0x1000}], 0x4, &(0x7f0000002140)=[@rights={{0x30, 0x1, 0x1, [r21, r22, r23, r24, r25, r26, r27, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r28, r29}}}, @rights={{0x20, 0x1, 0x1, [r30, r31, r32, r33]}}], 0x70, 0x20000000}, {&(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000002240)="ea6c78a67f34b40fcd4ae5ef72c9eb75c773f816dc1d568ac6cae3bd8040a2b2ecf9513f9990da2bd39967b3beacbbe375e914af1324197de452480e23cabf49856d5ec1b7fecde51294da3c94cbe3ccd5f0a7b5723b7cff41b0e6d28734260ebc5c5542a28b1fd7b7cf7228bcfa854fe7cb0ece", 0x74}, {&(0x7f00000022c0)="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", 0xff}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="c1883078a387fa76f325d869719acd38cd77047d3a9efc81ef3f95693dcc21eb2bee4d37c02f5e4ca25cc47407814fe356c4d250e5392a498105f1562ee8e68b579504d6c15ff7bd09befd33bc2b6cd824696cc04cb9b5dba49e080df5295e77b379c633682d89aeec5c1fb1d384442eb6b2a24a2323e06f61a999600a0a74683014526f753a85643740158d00b97ac5100e1f964e9375988c8b0d09bce2ec102acc43fab1c1234382bd3aa5aee6bc05a96b291af7c178fdd6291937ff7d", 0xbe}, {&(0x7f0000003480)="381acd44db6a9695ca8c82c37ab00abc35c2eac6ce719fc1b8dcee491901e9f8804c401eb2d84cfb8e4bcf800171d9abbe2e9a8b2d44f6", 0x37}, {&(0x7f00000034c0)="9df876f3171459e7cdec6140cca3034dc470ff4ba99a46c1d780f5cd5c6af19f7ac5a91c44d470dcd2ccd03c2063912f75f6e350a35ebc46cb20cd4ad1307a356e199034695daf935b42f39e51d832c62aae613e9400602224a1481c18f05f639fd54d9e9b615d5aebc3c722cae774d0096bc5b13a3bd7ef38f57fd683a29c1f803bed344d195a72cc6fe8436a4b26209525a66b264ae0f91a98480abd4a9a3aed03efdd2ee0348ca2014d6421e445bd6c0fc522fc7bea75fe6ccaab1d24610d473ab1d00235737a35ea1472b95ef889b26d01", 0xd3}, {&(0x7f00000035c0)="6529d4e43cf1d2ffc50e5a41b23446b0ec5b2c714f8c6872c7f15b3de3bb5231eb1926edaf0a218b993004781a5935", 0x2f}], 0x7, &(0x7f0000004100)=[@cred={{0x1c, 0x1, 0x2, {r34, r35, r36}}}, @cred={{0x1c, 0x1, 0x2, {r37, r38, r39}}}, @rights={{0x34, 0x1, 0x1, [r40, r41, r42, r43, r44, r45, r46, r47, r48]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r49, r50]}}, @cred={{0x1c, 0x1, 0x2, {r51, r52, r53}}}, @rights={{0x18, 0x1, 0x1, [r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {r56, r57, r58}}}, @rights={{0x14, 0x1, 0x1, [r59]}}, @cred={{0x1c, 0x1, 0x2, {r60, r61, r62}}}], 0x128, 0x80}, {&(0x7f0000004240)=@abs={0x3, 0x0, 0x4e23}, 0x6e, &(0x7f00000045c0)=[{&(0x7f00000042c0)="ed4ba3ec0af737672bb0bca03122df73580397a8f772dfe7a344b60b295ff238b7a07e80107d90f6be7947a878ac657a135d02781b3499c44ece00ccf9e027a32d869c36d0f9", 0x46}, {&(0x7f0000004340)="3a2808b57d839c6de71828ecc34e0256fef2ea5879e17284f72408cc5eb2ece0725f266fd095735294932f17efed0c798fba3654761ad2e33335292b9ca53cd43d0c7c3a15c86dce70a7a9e408c572093a920fd18cccd169f9df87849c9bb5a861dc1ffdb99f7338b115f30a5f5bb3834efd4fb8f403d47789480e045d3f", 0x7e}, {&(0x7f00000043c0)="6d69874dcac08c6845e90a5d72236fdabd0a1cc82a63b6cbcf6a76a636e51070535be765c04631d9306143e757db9b415b44d3f5c9bc2acc07784dff9f92e41dd4b8f38168dc02a0c04edf9d4b12ebbbd0bcbc63fca51ff5c3a7e6c03bb42046ca221d903987c278e9908a8d5b9dcc4a2a24d200bb15e367297b588145c0c5d99f8bdee58c7fa9c8b861a60d76d30a8a6beac404343e17fdee2ca43491451ac6c6f483a56ebace3a202cc8b9b165824eaf359cb0ed739e480d2ba95b01ced8f87041eb2c34b92aafb8098d23f539f9b6a7a906bcea677b3911d0bdfa5bd487c5b1d865a1107790", 0xe7}, {&(0x7f00000044c0)="7b046d48f2d256c23f72a0695b4aa4a2d2cf9e399eb76e00ef55ed2297e755ec2a8ec47bbc5af31d082037fe77634d87a02324fa8138fc5d7bc1c0d5b6d5dda414d011b406dd3d21e234b0c3510358f68cf2f28b7fb4877120a6758437465f357a499f4586e7260694d9a18274ff1fd8fd1ff40eecbaf68b029b6b566199eeeda9c304c932762d25ff0dc8e1ed88589534c380308ef37a3bbe4254eb93968c266f6d567077fccdcec5842c7acb4db4c259dd74a184c62a9d0da3778d42aea6e59e841b358ad1d2f05475de255a4dbb31aa59af6fdfcaf727e2022b01d1a0c12860431f509cd8c46a2213d06140c7e6880312b0747321be5c", 0xf8}], 0x4, &(0x7f0000004600)=[@rights={{0x14, 0x1, 0x1, [r63]}}], 0x18, 0x1}, {&(0x7f0000004640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000047c0)=[{&(0x7f00000046c0)="e5f3feef79bb91c0dc17c959eec3760a27d155cd108089d0ca98b9c8d72d32d08d056e1e0d328f66962d351448cdea489229cf965c6141af86ba15e3fd3adb82a7e97566f66256e8a675da7c044065237aed0d7f556492ba66f22cf451ae535e9a2deab9e82a35704264e9aac412532dfe222230036493e0a9143a86d2158ac054fabb1dea9c7c8c9e1b71e9384e3087ff7fb89a0eda250fff3b8d4bb4c14f2e602e1a8c9b9360a5f05f5d5583e7000949968306558ca5da393c7b55f4f0808efda19e44de45be06f77cba09eeca289d180e68fb", 0xd4}], 0x1, &(0x7f0000004840)=[@rights={{0x14, 0x1, 0x1, [r64]}}], 0x18, 0x1}, {&(0x7f0000004880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005b80)=[{&(0x7f0000004900)="e120670893739d6b8895768047833b0c1b2316938eb40f399adaefaac452800dd69da47f09c44f6172deea1d38083f7fefcb2ceb3b1df3e7ecad6ffac02379b18fd865aef7798c6ba53dad7bec03331909c932f421442d487df495534511d4636b80f25736234c1f1159ce8a5c11913841894d5a6bc49ce50840d31402b4f7ffd41835a594aff277a7b4493b83a5fd13", 0x90}, {&(0x7f00000049c0)="6e181dd0f85a58f4a60b36c518d08923c4548622b452499af0b0d42d3a6499b354b3dd1a53e185826c5faa3071f3ff50a9a46bb3a87af4fd486feb2af6d913083f3685703544ac0d7d89aba4f5218c8700167ae1f70a29267b285ec6debb826a091b6a82287c1a27d8e90c1efc235f8b4d5bdce84a8ac2a98fe65c308ac18c791778723d95936a98a1821924fd35", 0x8e}, {&(0x7f0000004a80)="e32b8dd4a4bcedbf0c04196795dab054f37de60dbe98684375879da17d84d7289d0e97a3f13ff4838f2fd8d15fe60656fdb3cb8531", 0x35}, {&(0x7f0000004ac0)="6eeaf3acd59b890e0ceb9e1b0bf3ffbc249bdee5e3f550bdf0efec234d432a5b90ca309f6ad1efe388a1d8e4b3f289663dd24a546115c7bb5faa92f0b28337f124f90cf4766a5f34e3f29ad438c07c6e9419b51b7c62438ab7817b7462a5a7341e9b8e16649a0af6b99d87df6635b2808e81da33d686dff9bedef185be05b451432a081592559fa65ba76ea88375340cfc4146", 0x93}, {&(0x7f0000004b80)="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", 0x1000}], 0x5, 0x0, 0x0, 0x1}, {&(0x7f0000005c00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005c80)="bc0169d8420150f38a815fd403524cfc918e325dc3f29e60a014270208d79b5eac38b7257157ffcd371d50bff7dad62b9a2fadf7d7f2cc42f399ad", 0x3b}, {&(0x7f0000005cc0)="c48c9a226725", 0x6}, {&(0x7f0000005d00)="c7ad1a83a368d4526f388696077fea5175daa4e03b593a4f19891af4ced42107edfd968bb86b09c61ac097c234123c88b439bce4010f5c6453738915332b8c54a77a930d844ae2979cb44b6948679c50b137c1efea375293e3bf604dd38efd2dd1b5800d18b719700870a7fc18e2f2fd921dd3f1a6695c025acc515aec5228f8dea9ba26c1e84ad26d09f1bff8d63f86e827720b40c41b62e902b1e8a263199974029fd7557520691bb507ab5e65b7e0095c88ec35bc7511e2594d211c597a6a71bc03", 0xc3}, {&(0x7f0000005e00)="3ca065e14a0b00e1b2d46ab95a7cae4d8daaa858a8638109f7f6612845129534", 0x20}, {&(0x7f0000005e40)="8b5567a5d16d5d3d4ef3313c055d9a4c9cbc18aa4ddc9e05bb6f1a8a084acffaa23eb7116045f4a82b26a2a1bd8afcdd1f3798fe7eb52e9e00", 0x39}, {&(0x7f0000005e80)="e430e5e030796dbc08013d44ae511a30aacff131f502a2b9bcf0377921a988f31dc9b4659eba2abe190168502e456466ec8710565087f7d9414aef711d30cc6c921d1ffa155adb420a5eb07c4bfc6ff0658ce5929fe6f57456cc6739f6b96ab3b0ee98027d3c9ce36dcd4dc56b6874100d8e78d20a732682ea003e0ee34eeb3f723077c311b3af4d42f9c3dff14e7ef4e90c9694a5c9217b5c4734d6724f3fa0b4869d450db604999b2bfbfb3a64d9bdccbb0ce09f1f587a19c799559cbadd5235f4cec9a66501a50ae8c8da7af132845aadec0f2ea0ac66a6a7063210e114d248620f37cbc6ae24f5518227d576cebfd044858bfb0c16", 0xf7}, {&(0x7f0000005f80)}, {&(0x7f0000005fc0)="8afaa5f309868d6c51945cf11d15cfb3271608ce7f8f9118e89edf1408cf7461ff11120b80fa8b60a3", 0x29}, {&(0x7f0000006000)="88332b13cfe377f9e1554e8705df9316ddc9166bb1e9cd3b3ff748dce78f77c493bfc915fe6c26a7e137a8150a28af64124bad12d6b4dbfa2ba6a529621a08b1de81a0f6dabb791015420c8b926fc770c274c75979ecbef2a42a2d1e73bb8d1f3ab275cfd2392391051437235e863e4b70cb7960ff67360d5a14073ca1e1036e5ada51aa63f5a9fdb7e16a9667a357c1940aa5b56125c1079f2915d15e172eba9fafc1c8a8fba26e97ddd0", 0xab}], 0x9, 0x0, 0x0, 0x24000040}], 0x7, 0x86b552b0d2fe067e) 14:30:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x248400, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x75e, 0x4}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x9, 0xb44f}, 0xc) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') prctl$PR_GET_DUMPABLE(0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000800)={&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000003c0)=""/192, 0xc0}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = socket$inet(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r7 = accept4(r3, &(0x7f0000000140)=@alg, &(0x7f0000000240)=0x80, 0xeb20380f08c2a65f) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="eb0f6c16", @ANYRES16=r8, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) mknod(&(0x7f0000000840)='./file0\x00', 0x800, 0xfffffff7) 14:30:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000140)=""/79, 0x4f}], 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x4, 0xff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) ioctl$int_out(r5, 0x5460, &(0x7f0000000040)) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 347.062138][ T31] gtco 4-1:0.219: Collection level already at zero [ 347.070255][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.219/input/input19 [ 347.134183][T11974] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0005/input/input20 14:30:13 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r10 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r9, r11, 0x0, 0x1) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 347.218310][T11974] sony 0003:054C:03D5.0005: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 14:30:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r2, r3, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x94148024}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000180)={0x5772, 0x6, 0x9}, 0xc) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x1, 0x0, 0x399}, 0x28001) rt_sigqueueinfo(0xffffffffffffffff, 0x23, &(0x7f0000000280)={0xc, 0x3, 0x2}) [ 347.430462][ T31] usb 5-1: USB disconnect, device number 3 14:30:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5452, &(0x7f0000000240)={0x17, 0x231, 0x0}) [ 347.510297][T12683] Started in network mode [ 347.514841][T12683] Own node identity , cluster identity 4711 [ 347.520776][T12683] Failed to obtain node identity [ 347.525882][T12683] Enabling of bearer rejected, failed to enable media [ 347.535129][ T802] usb 4-1: USB disconnect, device number 4 [ 347.594702][ T802] gtco 4-1:0.219: gtco driver disconnected [ 347.646532][T12690] IPVS: ftp: loaded support on port[0] = 21 [ 347.672176][T11974] usb 2-1: new high-speed USB device number 11 using dummy_hcd 14:30:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x1, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0x1) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 347.769378][T12690] chnl_net:caif_netlink_parms(): no params data found [ 347.878427][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.885982][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.894704][T12690] device bridge_slave_0 entered promiscuous mode [ 347.907432][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.914856][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.922483][T11974] usb 2-1: Using ep0 maxpacket: 16 14:30:13 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r5}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r5, 0x7fff, 0x8086bf5abf549213, 0x8, 0x4}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="0900400070b20c7bbda01dbf67e05870476f118e20cee8736e51be101b5ffc66a111f58bf01e4538a62c5823d10e2393ef7844ce1d25d62dc6e486ad6c66a7b76977063b8a327bc6a89fa0a5f2bcc5c2baebefe1350dd22351d11f232bec6ebdb95bbe1c829436ca44678ae6ae45e4c34d2766238fb823520cd382ec6f98b9dd8c940c27ac9b59d77efada1f2b9621c65582a21ef0c59d0f5141bfb3dd5a9005f2c2d0b256e02f64c7e386fa26414bd35bb0645cd241fcee6a2099a31bc4d5d22d99cd2209", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r6}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r6, 0x7, 0x4}, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$PPPIOCGDEBUG(r8, 0x80047441, &(0x7f0000000080)) sendmsg(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x10) [ 347.923952][T12690] device bridge_slave_1 entered promiscuous mode [ 347.934268][T12201] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 347.975375][T12690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.988107][T12690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.016173][T12690] team0: Port device team_slave_0 added [ 348.025753][T12690] team0: Port device team_slave_1 added [ 348.042597][T11974] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 348.051078][T11974] usb 2-1: config 0 has no interface number 0 [ 348.057453][T11974] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 14:30:14 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000380), 0x10) sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000a000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b2003f420f000000000000580f02000000003f420f000000006b76b5ee0000005e000000004e2f9663a91cfa1efd9b0b00"}, 0x48}}, 0x0) [ 348.066673][T11974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.076834][T11974] usb 2-1: config 0 descriptor?? [ 348.098401][T12690] device hsr_slave_0 entered promiscuous mode 14:30:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5452, &(0x7f0000000240)={0x17, 0x231, 0x0}) [ 348.171449][T12690] device hsr_slave_1 entered promiscuous mode [ 348.192939][T12201] usb 3-1: Using ep0 maxpacket: 8 [ 348.212795][T12690] debugfs: Directory 'hsr0' with parent '/' already present! [ 348.250174][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.257459][T12690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.265268][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.272531][T12690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.334089][T12201] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 348.347470][T12201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.354359][T12201] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 348.363593][T12201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.372870][T11974] gtco 2-1:0.219: Collection level already at zero 14:30:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/35, 0x23}, {&(0x7f0000000500)=""/1, 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/116, 0x74}], 0x5, 0xc) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x800, 0xfff, 0xffff, 0x101, 0xffffffff}) clone3(&(0x7f0000000440)={0xe615c511658353b6, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, 0x15, 0x0, &(0x7f00000002c0)=""/149, 0x95, &(0x7f0000000380)=""/184}, 0x40) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x4, 0x1, 0x6, 0x81, 0x0, 0x1, 0x200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x3, @perf_config_ext={0x1, 0x8}, 0x204, 0x4, 0x5, 0x4, 0x7, 0x0, 0x9}, r2, 0xf, r1, 0x8) r3 = socket$inet(0x10, 0x3, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x1, &(0x7f0000ffd000/0x2000)=nil, 0x4) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x28625a7f16a49334) [ 348.381047][T11974] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input21 14:30:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) [ 348.441231][T12201] usb 3-1: config 0 descriptor?? [ 348.495356][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.585678][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.599166][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.623791][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.683330][T12690] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.702290][ T802] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 348.745354][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.755056][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.764127][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.771284][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.782498][ T31] usb 2-1: USB disconnect, device number 11 [ 348.822898][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.832352][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.837028][ T31] gtco 2-1:0.219: gtco driver disconnected [ 348.841424][T11974] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.853649][T11974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.862165][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.871599][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.881073][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.890347][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.899661][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.909069][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.918520][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.927267][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.936309][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.945392][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.959695][T12690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.977002][T12201] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0006/input/input22 [ 348.995029][T12201] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 349.010571][T11974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.034056][T12690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.072021][ T802] usb 5-1: Using ep0 maxpacket: 8 [ 349.192219][ T802] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 349.205702][ T802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.212524][ T802] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 349.221660][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:30:15 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r2 = creat(0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000180)) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) connect$netlink(r5, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$P9_RSTAT(r2, &(0x7f0000000300)={0x6c, 0x7d, 0x0, {0x0, 0x65, 0x0, 0x0, {}, 0x0, 0x0, 0x10001, 0x0, 0x10, '/selinux/policy\x00', 0x10, '/selinux/policy\x00', 0xe, './cgroup/syz1\x00', 0x4, 'wrr\x00'}}, 0x6c) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) getpid() sendfile(r1, r4, 0x0, 0x9001) 14:30:15 executing program 3: unshare(0x4000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r2, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, 0x0, 0x0) 14:30:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r2, r3, 0x0, 0x1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880)='/dev/hwrng\x00', 0x20b82, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r7}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000008c0)={r7, 0xcfd}, 0x8) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 349.249903][ T802] usb 5-1: config 0 descriptor?? [ 349.261062][ T31] usb 3-1: USB disconnect, device number 9 [ 349.382352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 349.388617][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 349.422407][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 349.428530][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:15 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r10, 0x0, 0x1) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb4) 14:30:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 349.748075][ T802] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0007/input/input23 [ 349.765110][ T802] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 349.812349][T12094] usb 2-1: new high-speed USB device number 12 using dummy_hcd 14:30:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) 14:30:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 350.000008][ T31] usb 5-1: USB disconnect, device number 4 14:30:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 350.080775][T12094] usb 2-1: Using ep0 maxpacket: 16 14:30:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000140)={0x7ff, 0x4000009, 0x7, 0x1, 0xd8, 0xa8ef, 0x4000069, 0xfffffffb, 0x400, 0x3, 0xee, 0x6, 0x1, 0xffff, &(0x7f0000000000)=""/141, 0x7fff, 0x1, 0x6}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0xcde, 0x4) [ 350.212233][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 350.222224][T12094] usb 2-1: config 0 has no interface number 0 [ 350.228453][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 350.237967][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.248158][T12094] usb 2-1: config 0 descriptor?? [ 350.324077][ T802] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 350.512166][T12094] gtco 2-1:0.219: Collection level already at zero [ 350.519873][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input24 [ 350.574223][ T802] usb 3-1: Using ep0 maxpacket: 8 14:30:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) 14:30:16 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4200, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0cda366f094eaeac44b8055fadbfac2a7dfe5d4965c1dcbe2544be6077bf0925f49126b4bd2dcbf0c45ceecc872b56070000000000000036bc9e892451c93db0ed05311b9e56d77397f8640cef47628488498f2c8c6624e7329e5b17f60fe94e963686", @ANYBLOB="8a7cfcb0bd543a073725047b455dc076640764ef04ff46cf47e8137f38ee3889", @ANYRES64], 0x0, 0x8b}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 14:30:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x14, 0x0, &(0x7f0000000280)) [ 350.692563][ T802] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 350.705877][ T802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.713904][ T802] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 350.723109][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.769487][T12785] ptrace attach of "/root/syz-executor.3"[12784] was attempted by "/root/syz-executor.3"[12785] 14:30:16 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00\x00\x00\x00\x10\x00\x00\x0f\x00\x9e\xff\xff\xff'}, {0x8}, {0x4, 0x7}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}}, 0x0) [ 350.813946][ T802] usb 3-1: config 0 descriptor?? [ 350.887655][T11974] usb 2-1: USB disconnect, device number 12 14:30:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbf, 0x11, 0x1a001000000}, [@ldst={0x6, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 350.976429][T11974] gtco 2-1:0.219: gtco driver disconnected [ 351.151983][T12094] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 351.291956][ T802] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0008/input/input25 [ 351.307588][ T802] sony 0003:054C:03D5.0008: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 351.401981][T12094] usb 5-1: Using ep0 maxpacket: 8 14:30:17 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r10, 0x0, 0x1) 14:30:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70f000}}) [ 351.532292][T12094] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 351.545727][T12094] usb 5-1: config 0 interface 0 has no altsetting 0 [ 351.545828][T12094] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 351.561603][T12094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.570596][ T802] usb 3-1: USB disconnect, device number 10 [ 351.589361][T12094] usb 5-1: config 0 descriptor?? [ 351.762024][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 352.002023][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 352.092362][T12094] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0009/input/input26 [ 352.107628][T12094] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 352.152066][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 352.160774][ T31] usb 2-1: config 0 has no interface number 0 [ 352.167440][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 352.176667][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.187472][ T31] usb 2-1: config 0 descriptor?? 14:30:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) 14:30:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = msgget(0x3, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000140)={{0x2, 0x66, 0x20, 0x3f, 0x28, 0xa4}, 0xffffffff, 0x1, 0xff81, 0x3, 0x1000, "1907c13b13f49e5b6dd8b36a80a7ae24445d61f1e16229c524f10a5d664183dd6525919c63cdef3533431cbd1f94d213e787245a34c35cb7e29c5bec17ebb8796321ae1459420d67566bc355cfac446dfacbd0bbdc814ccbaab44707d86c00ea7c08fb6de6079fe37884161609f337799ccc76934a36c09a166cfd14bd4b434d"}) msgctl$IPC_RMID(r1, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/115) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400203) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) 14:30:18 executing program 5: r0 = socket(0x10, 0x200000000803, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_to_bridge\x00'}) 14:30:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2828}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x712b177317839c08, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x9480) syz_open_dev$sndseq(0x0, 0x0, 0x41) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20048800) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) [ 352.337312][ T802] usb 5-1: USB disconnect, device number 5 [ 352.359199][T12822] veth0_to_bridge: mtu less than device minimum [ 352.462172][ T31] gtco 2-1:0.219: Collection level already at zero [ 352.469908][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input27 [ 352.702083][T11974] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 352.763101][ T802] usb 2-1: USB disconnect, device number 13 [ 352.798539][ T802] gtco 2-1:0.219: gtco driver disconnected [ 352.941953][T11974] usb 3-1: Using ep0 maxpacket: 8 14:30:19 executing program 0: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x1, {0xa1, 0x1, 0x3}}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r2, r3, 0x0, 0x1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r6}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0xd3d, 0x8004, 0xfffffffa, 0x9, r6}, &(0x7f00000000c0)=0x10) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x4000) 14:30:19 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='\xf30\b\x05SV(k\xee\x9cv[L J(\xf1\xefn!J\x89\x00\x9aw\xeb\x19\xcb\xf4\b\xfa#\x1f\x81=\x99\x8b)\x11\xd1\x91\x96\xac\xdc\xcf;\x00a\xa6\x06V\xb5\xbfs\xb2{\xff\xf4[e\xc7\xbew\x92B\x1c+\x05\x92,)\xeb\xa1\xe6K\xf2)U\a\x18\xc3(}\x02h8\x05\x05\x13\xf5\xc4S\xd8\xe5\x82G\x1f-\xee(\x17\x8dA\xac\x05>t=8\xb7\x8d\x05\xd1X\xc6\"\x9bQ\xcdg\x06\x8cr\xd2\xad\r\xc7\xfe:\x02q`\xe8<\x1e\x83\x12\xe7\x88\x8e\x8f\xc9j', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x23) 14:30:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) syz_usb_disconnect(r0) 14:30:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2828}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x712b177317839c08, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x9480) syz_open_dev$sndseq(0x0, 0x0, 0x41) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x2b) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20048800) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) [ 353.072391][T11974] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 353.085660][T11974] usb 3-1: config 0 interface 0 has no altsetting 0 [ 353.092992][T11974] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 353.102297][T11974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.169993][T11974] usb 3-1: config 0 descriptor?? 14:30:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) 14:30:19 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) sendfile(r8, 0xffffffffffffffff, 0x0, 0x1) [ 353.434355][ T802] usb 5-1: new high-speed USB device number 6 using dummy_hcd 14:30:19 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000000442a"], 0x10094) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000003c0)=0x4) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r3, &(0x7f0000000380)={'#! ', './file0', [], 0x11}, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x10019) shutdown(r0, 0x2) [ 353.664490][T11974] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.000A/input/input28 [ 353.714981][ T802] usb 5-1: Using ep0 maxpacket: 8 [ 353.761978][T12201] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 353.791732][T11974] sony 0003:054C:03D5.000A: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 353.845534][ T802] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 353.859032][ T802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 353.868662][ T802] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 353.877872][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.894475][ T802] usb 5-1: config 0 descriptor?? [ 353.953195][T11974] usb 3-1: USB disconnect, device number 11 [ 354.014794][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 354.142531][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 354.150976][T12201] usb 2-1: config 0 has no interface number 0 [ 354.157390][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 354.166980][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.228281][T12201] usb 2-1: config 0 descriptor?? [ 354.403016][ T802] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.000B/input/input30 [ 354.456373][ T802] sony 0003:054C:03D5.000B: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 354.495241][T12201] gtco 2-1:0.219: Collection level already at zero [ 354.503453][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input29 14:30:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) [ 354.643567][ T31] usb 5-1: USB disconnect, device number 6 14:30:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r1, r2, 0x0, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$hidraw(r3, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x4, 0x0, 0x2}}, 0x30) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000002840)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000002880)={r7, 0x3}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000000)={r7, 0x5}) r8 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x20000000400200) r9 = socket$inet(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:20 executing program 5: 14:30:20 executing program 3: 14:30:20 executing program 3: 14:30:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x100000000014, 0x4, 0x8, 0x4000100}, 0x3c) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') [ 354.845287][ T4895] usb 2-1: USB disconnect, device number 14 [ 354.903535][ T4895] gtco 2-1:0.219: gtco driver disconnected [ 355.082205][T12094] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 355.321989][T12094] usb 3-1: Using ep0 maxpacket: 8 14:30:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40002, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x33f, 0x0, 0xffffffffffffffdd}, 0x0) 14:30:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000580)={0x0, 0x92, &(0x7f00000001c0)={&(0x7f0000000c40)={0x20, 0x0, 0x1, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @u64}]}, 0x20}}, 0x0) 14:30:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 14:30:21 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) sendfile(r8, 0xffffffffffffffff, 0x0, 0x1) 14:30:21 executing program 5: r0 = socket$kcm(0x29, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x3}, 0x0, 0x100000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) unlink(&(0x7f0000000700)='./file0\x00') write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x0, 0x0, 0x4, 0x3}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="4cd576c630fdd33bd113e187589e95481c402e26b2dadcb448bdcd", 0x1b}, {&(0x7f0000000640)="f2e593459e20cf95f4dfc19affd7e51c846492ff0d1e52bbb8fbb2d592faab", 0x1f}], 0x2}, 0x20004000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg(r1, 0x0, 0x2000) write$cgroup_pid(r4, 0x0, 0x0) r5 = gettid() perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x8, 0x6, 0x8001, 0x8, 0x0, 0x3, 0x2000, 0x2, 0x0, 0x800000000, 0x2, 0x2, 0x4, 0x1cf, 0x4, 0x1, 0x0, 0x8, 0x3, 0x0, 0x6, 0x400, 0x0, 0xca7f, 0x7, 0xa0a5, 0x0, 0x0, 0x2, 0x2, 0x3ff, 0xfffffffffffffffb, 0x10001, 0x9, 0x7, 0x401, 0x0, 0x0, 0x2, @perf_config_ext={0x1ff, 0x40}, 0x2000, 0xfffffffffffffff7, 0x0, 0x8, 0x27, 0x4, 0x80}, r5, 0x3, 0xffffffffffffffff, 0x3) ioctl$TUNSETFILTEREBPF(r4, 0x6609, 0x0) recvmsg$kcm(r1, 0x0, 0x10100) sendmsg$kcm(r0, 0x0, 0x20000001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={0xffffffffffffffff}) write$cgroup_type(r6, &(0x7f00000018c0)='threaded\x00', 0x9) r7 = socket$kcm(0x29, 0x3ffffffffffffe, 0x0) recvmsg(r7, &(0x7f000001bd80)={&(0x7f000001bb40)=@can, 0x80, 0x0, 0x0, &(0x7f000001bc80)=""/198, 0xc6}, 0x100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000013001707ed12806cd20010e517fb0d61e18fbd2fe6a5dd80009d00010801000000000300f87f00006400", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f000001bdc0)=@ipx={0x4, 0xff, 0x7, "5415150be368", 0x35}, 0x80, &(0x7f0000003ec0), 0x0, 0x0, 0x2be}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x3ffffffffffffe, 0x0) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000001940)) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000340)) [ 355.405126][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:30:21 executing program 3: [ 355.455046][T12094] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 355.470214][T12094] usb 3-1: config 0 interface 0 has no altsetting 0 [ 355.477061][T12094] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 355.486273][T12094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.546388][T12094] usb 3-1: config 0 descriptor?? [ 355.702077][T12201] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 355.852035][ T4895] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 355.952052][T12201] usb 5-1: Using ep0 maxpacket: 8 [ 356.042216][T12094] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.000C/input/input31 [ 356.057304][T12094] sony 0003:054C:03D5.000C: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 356.076883][T12201] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 356.090144][T12201] usb 5-1: config 0 interface 0 has no altsetting 0 [ 356.097019][T12201] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 356.102340][ T4895] usb 2-1: Using ep0 maxpacket: 16 [ 356.106355][T12201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.121902][T12201] usb 5-1: config 0 descriptor?? [ 356.222182][ T4895] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 356.230532][ T4895] usb 2-1: config 0 has no interface number 0 [ 356.237531][ T4895] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 356.246768][ T4895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.257975][ T4895] usb 2-1: config 0 descriptor?? [ 356.318252][T12094] usb 3-1: USB disconnect, device number 12 [ 356.522099][ T4895] gtco 2-1:0.219: Collection level already at zero [ 356.529831][ T4895] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input32 [ 356.591976][T12201] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.000D/input/input33 [ 356.627182][T12201] sony 0003:054C:03D5.000D: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 356.753187][T12201] usb 2-1: USB disconnect, device number 15 14:30:22 executing program 5: 14:30:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x6e6b5f52}}, 0xff00, 0x100}, &(0x7f0000000400)=0x90) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000580)={'ah\x00'}, &(0x7f00000005c0)=0x1e) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000440)={r5, 0x6, 0x8}, 0x8) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x68e502, 0x0) ioctl$BLKSECTGET(r8, 0x1267, &(0x7f00000003c0)) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x26000000}, 0x40000) fchdir(r0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 14:30:22 executing program 3: [ 356.795085][T12201] gtco 2-1:0.219: gtco driver disconnected [ 356.861448][T12094] usb 5-1: USB disconnect, device number 7 14:30:23 executing program 5: 14:30:23 executing program 3: 14:30:23 executing program 3: 14:30:23 executing program 5: [ 357.212301][ T802] usb 3-1: new high-speed USB device number 13 using dummy_hcd 14:30:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 14:30:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff5000/0x8000)=nil, 0x8000}, 0x4}) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:23 executing program 3: 14:30:23 executing program 5: 14:30:23 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000400)={0x2, "fafb"}, 0x3) sendfile(r8, 0xffffffffffffffff, 0x0, 0x1) 14:30:23 executing program 3: [ 357.472311][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 357.602570][ T802] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 357.615799][ T802] usb 3-1: config 0 interface 0 has no altsetting 0 [ 357.622965][ T802] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 357.632257][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.656941][ T802] usb 3-1: config 0 descriptor?? [ 357.711963][T12094] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 357.802053][T12201] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 357.952085][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 358.042087][T12201] usb 5-1: Using ep0 maxpacket: 8 [ 358.072032][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 358.080404][T12094] usb 2-1: config 0 has no interface number 0 [ 358.086853][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 358.096359][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.105784][T12094] usb 2-1: config 0 descriptor?? [ 358.139895][ T802] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.000E/input/input34 [ 358.162526][T12201] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 358.176815][T12201] usb 5-1: config 0 interface 0 has no altsetting 0 [ 358.183670][T12201] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 358.193145][T12201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.214667][ T802] sony 0003:054C:03D5.000E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 358.231220][T12201] usb 5-1: config 0 descriptor?? [ 358.362211][T12094] gtco 2-1:0.219: Collection level already at zero [ 358.369827][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input35 [ 358.415255][ T802] usb 3-1: USB disconnect, device number 13 [ 358.594699][T11974] usb 2-1: USB disconnect, device number 16 [ 358.635500][T11974] gtco 2-1:0.219: gtco driver disconnected [ 358.719558][T12201] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.000F/input/input36 [ 358.741368][T12201] sony 0003:054C:03D5.000F: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 14:30:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x10000000}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="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", 0x4b}], 0x0, 0x0, 0x354}, 0x4000) 14:30:24 executing program 5: 14:30:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4f0a07fc6f12a728ae42e30520c1cd1ce0526b5763ab61b1ed08a98c80bcc1f07944e0bc05bd7fe867178c9e80aef7310a67e90a7a69c4b9a8ae5ba9a8a6b8c903af56168e99e7ee67af954d2300352ca84cd9d48ee18fcd224510bc7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 14:30:24 executing program 3: 14:30:25 executing program 5: 14:30:25 executing program 3: [ 358.987861][T11974] usb 5-1: USB disconnect, device number 8 [ 359.312147][T12201] usb 3-1: new high-speed USB device number 14 using dummy_hcd 14:30:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 14:30:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x10000093}, 0x0) 14:30:25 executing program 3: 14:30:25 executing program 5: 14:30:25 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) [ 359.562189][T12201] usb 3-1: Using ep0 maxpacket: 8 14:30:25 executing program 5: 14:30:25 executing program 3: 14:30:25 executing program 5: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40104593, &(0x7f0000002ffc)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40104593, &(0x7f0000002ffc)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x0, 0x40a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() pipe(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x10, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0xffffffffffffffff) ptrace$pokeuser(0x6, r4, 0x388, 0x0) write$P9_RWALK(r3, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYBLOB], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = open(0x0, 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x3, 0x3, 0x3f, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x7, 0x0, 0xa5cc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}}, {0x0, 0x1}}}, 0x42) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 359.682282][T12201] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 359.695720][T12201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 359.702564][T12201] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 359.711708][T12201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.817558][T12201] usb 3-1: config 0 descriptor?? [ 359.831998][T12094] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 359.879174][T11974] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 360.092735][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 360.121971][T11974] usb 5-1: Using ep0 maxpacket: 8 [ 360.222283][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 360.230718][T12094] usb 2-1: config 0 has no interface number 0 [ 360.237004][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 360.242351][T11974] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 360.246188][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.259291][T11974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 360.273277][T12094] usb 2-1: config 0 descriptor?? [ 360.274004][T11974] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 360.288994][T11974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.307592][T12201] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0010/input/input37 [ 360.320984][T11974] usb 5-1: config 0 descriptor?? [ 360.328996][T12201] sony 0003:054C:03D5.0010: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 360.562198][T12094] gtco 2-1:0.219: Collection level already at zero [ 360.570257][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input38 [ 360.585746][T12201] usb 3-1: USB disconnect, device number 14 [ 360.809259][T11974] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0011/input/input39 [ 360.837865][T11974] sony 0003:054C:03D5.0011: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 360.880743][T12201] usb 2-1: USB disconnect, device number 17 [ 360.903847][T12201] gtco 2-1:0.219: gtco driver disconnected 14:30:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4f0a07fc6f12a728ae42e30520c1cd1ce0526b5763ab61b1ed08a98c80bcc1f07944e0bc05bd7fe867178c9e80aef7310a67e90a7a69c4b9a8ae5ba9a8a6b8c903af56168e99e7ee67af954d2300352ca84cd9d48ee18fcd224510bc7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40104593, &(0x7f0000002ffc)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40104593, &(0x7f0000002ffc)) fcntl$dupfd(r0, 0x0, r1) r2 = getpid() perf_event_open(&(0x7f0000000140)={0x0, 0x40a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() pipe(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x13, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0xffffffffffffffff) ptrace$pokeuser(0x6, r5, 0x388, 0x0) write$P9_RWALK(r4, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES64=r5], @ANYBLOB], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r4, 0x0) r6 = open(0x0, 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r6, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) r8 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x3, 0x3, 0x3f, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x7, 0x0, 0xa5cc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}}, {0x0, 0x1}}}, 0x42) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:30:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="2400001f250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e28deffff2500ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x8000) 14:30:27 executing program 3: clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='stat\x00') r1 = getpid() tkill(r1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r0, 0x0, 0x100000002) [ 361.074986][T11974] usb 5-1: USB disconnect, device number 9 [ 361.452035][T12094] usb 3-1: new high-speed USB device number 15 using dummy_hcd 14:30:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480), 0x10000000000001b2, 0x0, 0xfffffffffffffe31}, 0x200c8840) 14:30:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) 14:30:27 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) 14:30:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:27 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='pipefs\x00', 0x0, 0x0) 14:30:27 executing program 5: clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='stat\x00') r1 = getpid() tkill(r1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0x0, 0x2000}) r6 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fstat(r3, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) sendfile(r2, r0, 0x0, 0x100000002) 14:30:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x15, 0x80005, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="fc3dbf6a0f19cfad5c02def60c6390aa"}, 0x1c) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000000)="b5724d24a5b80f8aac797ed3c8c01897840daa4266c37f2fc4", 0x19) getsockname(r2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e21, @multicast2}], 0x10) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xffffffffffffff47) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 361.692029][T12094] usb 3-1: Using ep0 maxpacket: 8 14:30:27 executing program 3: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) r0 = gettid() lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) geteuid() setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x16) [ 361.812411][T12094] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 361.826238][T12094] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.833072][T12094] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 361.842306][T12094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.894078][T12094] usb 3-1: config 0 descriptor?? [ 361.922307][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 361.930318][ T4895] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 362.161908][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 362.172156][ T4895] usb 2-1: Using ep0 maxpacket: 16 [ 362.282127][ T31] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 362.295498][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 362.302331][ T31] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 362.311482][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.320394][ T4895] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 362.328720][ T4895] usb 2-1: config 0 has no interface number 0 [ 362.335041][ T4895] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 362.344299][ T4895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.364151][T12094] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0012/input/input40 [ 362.377378][ T31] usb 5-1: config 0 descriptor?? [ 362.383484][ T4895] usb 2-1: config 0 descriptor?? [ 362.398658][T12094] sony 0003:054C:03D5.0012: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 362.593283][T11974] usb 3-1: USB disconnect, device number 15 [ 362.632354][ T4895] gtco 2-1:0.219: Collection level already at zero [ 362.640125][ T4895] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input41 [ 362.872452][ T31] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0013/input/input42 [ 362.891199][T12201] usb 2-1: USB disconnect, device number 18 [ 362.907703][ T31] sony 0003:054C:03D5.0013: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 362.953494][T12201] gtco 2-1:0.219: gtco driver disconnected [ 363.113202][ T31] usb 5-1: USB disconnect, device number 10 14:30:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:29 executing program 3: fchown(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0xee00}}) r1 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0xee00}}) semget(0x1, 0x9a13eef699ed6b79, 0x300) r2 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0xee00}}) semget$private(0x0, 0x1, 0x1) semget$private(0x0, 0x1, 0x0) r3 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0xee00}}) semctl$SETALL(r3, 0x0, 0x11, 0x0) r4 = gettid() mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) fcntl$setownex(r5, 0xf, 0x0) tkill(r4, 0x1000000000015) 14:30:29 executing program 5: fchown(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = gettid() mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r1 = epoll_create(0x5) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) open(0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) tkill(r0, 0x1000000000015) 14:30:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) openat$cgroup_int(r4, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) dup3(r2, r1, 0x0) r3 = socket$inet(0x10, 0x800, 0x40) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:29 executing program 3: fchown(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = gettid() mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) open(0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) tkill(r0, 0x1000000000015) 14:30:29 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) [ 363.645551][T12201] usb 3-1: new high-speed USB device number 16 using dummy_hcd 14:30:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4f0a07fc6f12a728ae42e30520c1cd1ce0526b5763ab61b1ed08a98c80bcc1f07944e0bc05bd7fe867178c9e80aef7310a67e90a7a69c4b9a8ae5ba9a8a6b8c903af56168e99e7ee67af954d2300352ca84cd9d48ee18fcd224510bc7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:29 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 14:30:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0xf66139ddc8f7b1df}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)={0x2}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0xff1f}], 0x63}, 0x0) 14:30:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, {}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 363.832030][T11974] usb 2-1: new high-speed USB device number 19 using dummy_hcd 14:30:30 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) getpid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 363.912022][T12201] usb 3-1: Using ep0 maxpacket: 8 [ 364.042601][T12201] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 364.056244][T12201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 364.063087][T12201] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 364.072333][T12201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.082165][T11974] usb 2-1: Using ep0 maxpacket: 16 [ 364.088985][T12201] usb 3-1: config 0 descriptor?? [ 364.192311][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 364.222223][T11974] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 364.230644][T11974] usb 2-1: config 0 has no interface number 0 [ 364.236973][T11974] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 364.246296][T11974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.256433][T11974] usb 2-1: config 0 descriptor?? [ 364.431968][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 364.503563][T11974] gtco 2-1:0.219: Collection level already at zero [ 364.511420][T11974] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input43 [ 364.552630][ T31] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 364.566762][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.574194][ T31] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 364.583418][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.627998][T12201] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0014/input/input44 [ 364.637919][ T31] usb 5-1: config 0 descriptor?? [ 364.706453][T12201] sony 0003:054C:03D5.0014: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 364.780222][T12201] usb 3-1: USB disconnect, device number 16 [ 364.834776][T11974] usb 2-1: USB disconnect, device number 19 [ 364.884916][T11974] gtco 2-1:0.219: gtco driver disconnected [ 365.202285][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 365.208882][ T31] usbhid: probe of 5-1:0.0 failed with error -71 [ 365.218926][ T31] usb 5-1: USB disconnect, device number 11 14:30:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x600, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r1, r2, 0x0, 0x1) r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x30, 0x0, 0x2, 0x7f, 0x0, 0x1ff, 0x10740, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb09, 0x2, @perf_config_ext={0x1, 0xfffffffffffffffd}, 0x400, 0x0, 0x6, 0xb, 0x1, 0x1, 0x100}, r2, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x100040c204) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000009b1c0aea95f0f1d45a2d672a2f807f5260cb79da8c35dd50d8800f26f915bc8ff6c208742a97fab97864ec34fdac9faf96552f0fe745ec85d0c4d15f7e82a986ef039cc35d6ea3d98249df711a0c7d527e4cf42106d13fead8accb83284e45402798dcdd3b51ad764f16f5dd53549e9012d42bf7589816c09686a59f4b9a5c4ccb1c8db26811fba83c5ea5ad35a6c43b0a4117752e998b79bce8eb43fe50386f5a7c86122fec38200eb0ad05a2718e2c2e3e14289e8b8befe3444a97", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000040)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r9}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000300)={r9, 0xf6b8, 0x7}, 0x8) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) fcntl$setlease(r5, 0x400, 0x3) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r10, 0x0, 0x1) ioctl$RNDZAPENTCNT(r10, 0x5204, &(0x7f00000000c0)=0x3) r11 = socket$inet(0x10, 0x3, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r14 = syz_open_procfs(r13, &(0x7f0000000600)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/Q\x89A/izj\xbe\xa5Q1R(wMZ(\xa2U\xd1\xbey\xc5\x00M\xef\x10\xa3\x17\x1cX\xdci\x884\x18\x97\x1c\xec\x02\xb6y\x86\xcd\x9b5\x92\xddg\x9a_>\xe2<\xd1\xaea\x9d\x8c\xca\x94+\x86i\\Y\xd3\x1d\xe7\x0e\xc16\x04\"\x16\x7f\xedv4\xf2D\xa1\xcc\x8d\xed\x1d\xc26\xf2u:\xaeP#\v\f\xde&\x8fv]\xdd6\xc7=\xcc\xdexY\x87\xf3\xa6\xf9#\x81\xe1\xb0\xbef:\xa5i\x01\x10\x8f1\x97\xe7_@\xf0\xf1o\x8fs=\xdd\xe2J\xc5\xcf\xb4w\xbaJ\xbf\x00W\xbe\xc4f7\xd7d\xd0\x05\x87\r\xebw\x11\xea}4\xf6N9:\xe8_\xbb\xa8\xa1\x04O<\xaa3\xe0\x9c(') sendfile(r12, r14, 0x0, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r12, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000280)=0x78) sendmsg(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:31 executing program 5: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) dup2(0xffffffffffffffff, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:30:31 executing program 3: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:30:31 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r8, 0x0, 0x1) 14:30:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) [ 365.824452][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd 14:30:31 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000240)={0xe, 0x4, 0x3, 0x4, 0xf3, "a03ec760b7a061ab8bb8abd65922b02171a4fbff4d82cef488710fa816efac9000eb9811975db502d9722a50150189e3ce197115aaa438e1a1dfff129653606a6776946b55e3ab13407f5a6fee29199bdbd735ccaca5188b876539b2608499de85029343c64898d2f9f11691029c01ca64e2358d233980298d97185ed71dcd8e450675b9011776f09c77ac761dc19ac18b532f99c14c1e70f03cb535a0f369584ca3bc393619a6fa10e01fed363f869e0e38727960b7ac20cae84190988330cb0a74df2c468c8967d50ded99e0101e5e86f6ae3db28897afff058352036531dd34517cec9c8b7d780db32814a934cd2eb29640"}, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x18000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, &(0x7f0000000080)=0x1ff}) socket$inet(0x10, 0x3, 0x0) [ 365.875591][T11974] usb 3-1: new high-speed USB device number 17 using dummy_hcd 14:30:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x10000000000001ce}, 0x0) [ 366.071944][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 366.144100][T11974] usb 3-1: Using ep0 maxpacket: 8 [ 366.193151][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 366.201566][ T31] usb 2-1: config 0 has no interface number 0 [ 366.208134][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 366.217726][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:30:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24001c00250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x2fb}], 0x1}, 0x1) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) [ 366.242273][T12201] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 366.276353][T11974] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 366.289676][T11974] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.295669][ T31] usb 2-1: config 0 descriptor?? [ 366.296519][T11974] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 366.310783][T11974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.425520][T11974] usb 3-1: config 0 descriptor?? 14:30:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x81, 0x4) [ 366.533829][T12201] usb 5-1: Using ep0 maxpacket: 8 [ 366.552110][ T31] gtco 2-1:0.219: Collection level already at zero [ 366.561047][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input45 14:30:32 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') r2 = open(&(0x7f00000008c0)='./bus\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000002c0), 0x4) sendfile(r2, r2, &(0x7f0000000180), 0x200800100000002) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000300)=""/149) lchown(&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100050}, {0x80000006}]}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) getsockname(r4, &(0x7f0000000480)=@un=@abs, &(0x7f00000005c0)=0x80) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r6 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x0) renameat(r5, 0x0, 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 14:30:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r4}, &(0x7f00000000c0)=0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000080)={0x5, "36fd07400cfdacebfa307543398eb7ace4dff9ad1ec7a0556038857dc8dd3c4f", 0xda1fbcd3582adb36, 0x3}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x3, 0x1f}, 0x8) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 366.654492][T12201] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 366.667700][T12201] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.674596][T12201] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 366.683893][T12201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.805234][T12201] usb 5-1: config 0 descriptor?? [ 366.870807][ T802] usb 2-1: USB disconnect, device number 20 [ 366.934634][T11974] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0015/input/input46 [ 366.949630][ T802] gtco 2-1:0.219: gtco driver disconnected [ 366.993879][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 366.993915][ T32] audit: type=1804 audit(1570199433.042:31): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/24/file0/bus" dev="ramfs" ino=32757 res=1 [ 367.065119][T11974] sony 0003:054C:03D5.0015: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 367.136056][T11974] usb 3-1: USB disconnect, device number 17 [ 367.353112][T12201] usbhid 5-1:0.0: can't add hid device: -71 [ 367.359680][T12201] usbhid: probe of 5-1:0.0 failed with error -71 [ 367.372632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 367.379068][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 367.385671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 367.392040][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 367.402634][T12201] usb 5-1: USB disconnect, device number 12 14:30:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:33 executing program 3: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:30:33 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) get_robust_list(r1, &(0x7f0000000180)=&(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000280)=0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x3ff) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r8, 0x0, 0x1) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000000)={0x7, 0xd883, 0x5, 0x7}) 14:30:33 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r8, 0x0, 0x1) [ 367.989048][ T32] audit: type=1804 audit(1570199434.032:32): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/24/file0/file0/bus" dev="ramfs" ino=33807 res=1 [ 368.012553][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.019235][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) [ 368.092466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.098792][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$RTC_UIE_OFF(r3, 0x7004) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}}, 0x84) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) ioctl$SG_EMULATED_HOST(r8, 0x2203, &(0x7f0000000000)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r10 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r9, r10, 0x0, 0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$isdn_base(0x22, 0x3, 0x0) 14:30:34 executing program 5: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r1 = gettid() mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000015) [ 368.212041][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 368.243072][T12201] usb 3-1: new high-speed USB device number 18 using dummy_hcd 14:30:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000000040)) sendfile(r3, r4, 0x0, 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000000)={{0x2, @addr=0x9}, 0x6, 0x80000001, 0x8}) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 368.451956][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 368.514340][T12201] usb 3-1: Using ep0 maxpacket: 8 14:30:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x20080, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x6) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xff, 0x400) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000280)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x1) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 368.562556][ T4895] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 368.572561][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 368.581111][ T31] usb 2-1: config 0 has no interface number 0 [ 368.587581][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 368.597070][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.632408][T12201] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 368.645587][T12201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 368.651352][ T31] usb 2-1: config 0 descriptor?? [ 368.652475][T12201] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 368.652550][T12201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:30:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) flock(0xffffffffffffffff, 0x6) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) dup3(r0, r3, 0x80000) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 368.789153][T12201] usb 3-1: config 0 descriptor?? [ 368.821900][ T4895] usb 5-1: Using ep0 maxpacket: 8 14:30:34 executing program 5: clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3234ccd3d2bb0100212014b50f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:30:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(r3, 0x0, r4) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 368.912297][ T31] gtco 2-1:0.219: Collection level already at zero [ 368.920533][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input47 [ 368.942686][ T4895] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 368.955985][ T4895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 368.962808][ T4895] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 368.972021][ T4895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.080579][ T4895] usb 5-1: config 0 descriptor?? [ 369.277409][ T31] usb 2-1: USB disconnect, device number 21 [ 369.302583][T12201] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0016/input/input48 [ 369.324540][ T31] gtco 2-1:0.219: gtco driver disconnected [ 369.326723][T12201] sony 0003:054C:03D5.0016: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 369.496724][T12094] usb 3-1: USB disconnect, device number 18 [ 369.622280][ T4895] usbhid 5-1:0.0: can't add hid device: -71 [ 369.628382][ T4895] usbhid: probe of 5-1:0.0 failed with error -71 [ 369.642853][ T4895] usb 5-1: USB disconnect, device number 13 14:30:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 14:30:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f0000000040)=0x54) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:36 executing program 5: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fremovexattr(0xffffffffffffffff, 0x0) 14:30:36 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_init() ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0c80086, r1}) 14:30:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:36 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r8, 0x0, 0x1) 14:30:36 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:36 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:36 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'lapb0\x00', 0x52}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:36 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000000)={0x1, 0x1}) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 370.552340][T12201] usb 3-1: new high-speed USB device number 19 using dummy_hcd 14:30:36 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 370.644830][T11974] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 370.653031][ T802] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 370.792032][T12201] usb 3-1: Using ep0 maxpacket: 8 [ 370.892088][T11974] usb 5-1: Using ep0 maxpacket: 8 [ 370.897599][ T802] usb 2-1: Using ep0 maxpacket: 16 [ 370.912293][T12201] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 370.926002][T12201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 370.933025][T12201] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 370.942176][T12201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.955557][T12201] usb 3-1: config 0 descriptor?? [ 371.022051][T11974] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 371.035549][T11974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 371.042381][T11974] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 371.051509][T11974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.062877][ T802] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 371.071202][ T802] usb 2-1: config 0 has no interface number 0 [ 371.077918][ T802] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 371.087215][ T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.096882][T11974] usb 5-1: config 0 descriptor?? [ 371.103451][ T802] usb 2-1: config 0 descriptor?? [ 371.362269][ T802] gtco 2-1:0.219: Collection level already at zero [ 371.370522][ T802] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input49 [ 371.492434][T12201] usbhid 3-1:0.0: can't add hid device: -71 [ 371.498685][T12201] usbhid: probe of 3-1:0.0 failed with error -71 [ 371.513733][T12201] usb 3-1: USB disconnect, device number 19 [ 371.617805][ T4895] usb 2-1: USB disconnect, device number 22 [ 371.632352][T11974] usbhid 5-1:0.0: can't add hid device: -71 [ 371.638565][T11974] usbhid: probe of 5-1:0.0 failed with error -71 [ 371.648311][T11974] usb 5-1: USB disconnect, device number 14 [ 371.665312][ T4895] gtco 2-1:0.219: gtco driver disconnected 14:30:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 14:30:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x201c0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xed, "5228fbd135125ea9582261a509d38fa07e5a8348571d4e13dd9deb690606a353cc43baacda978fc98c35fae0fe74ae3182912ccb7da14727ab964d442b6c7b2541d44d882a9cb3fc08d3f67d5c9084460d1bf31eab30a2e167ff6de0af9e1c3744b5bfced2c7aceff9cd2d3530200b173f62179b53eb7be2b938d5e2e99192927fa723d36b91a11fa30624527c4d60376c727437723004f038362c57d775fb6d93b6c653e27c91d9296c6f1d5d5ee4e2db57a13be9b9cfef072d094c1ddef2361d74324c2d851e76ae0cc6f177d9a5ff6dd9dcf4660ae78d6abece3ca211b3d82b68ded4130b6a7b154bcb4750"}, &(0x7f0000000040)=0xf5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000340)={r4, @in={{0x2, 0x4e23, @rand_addr=0x5}}, 0x9, 0xc6a}, 0x90) 14:30:38 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:38 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 372.172389][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 372.178750][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:38 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) 14:30:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:30:38 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x0, 0x2) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000002c0)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r2, r3, 0x0, 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000000)={0xf4, ""/244}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x1b}], 0x1}, 0x0) 14:30:38 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) r1 = gettid() syz_open_procfs(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0xffffffbc}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) ptrace$getregs(0xffffffffffffffff, r1, 0x1, &(0x7f0000000000)=""/235) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd8c, &(0x7f0000000140)=[{&(0x7f0000000240)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffff9916a0aa1c0009b3ebea865304000000975c0ac47b0868e3966cf055d90f158a", 0x4c}], 0x1, 0x0, 0xff7d}, 0x40850) [ 372.472167][ T4895] usb 3-1: new high-speed USB device number 20 using dummy_hcd 14:30:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = dup(0xffffffffffffffff) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r5}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r5, 0x873d}, &(0x7f0000000340)=0x8) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000010000004001200000f0ffffffffffffff23259542d69dfac6aa143597342b544e6bed28fe10004b0c32f957e8fdb24aee93deb5cfad2154845c51c40641970afdbdb600f960f9a6732ae2ec8ac514f8d6f5db67b318b476469485a2ce00040000000000001fd14fdcdfbbd69f77"], 0x5, 0x0, &(0x7f0000000280)="5c16690862"}) r7 = socket$inet(0x10, 0x1, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82414b40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r10, 0x8, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x1e8}], 0x1}, 0x0) [ 372.612099][T12094] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 372.662426][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 372.713792][ T4895] usb 3-1: Using ep0 maxpacket: 8 14:30:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1000009c}, 0x0) 14:30:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) [ 372.844386][ T4895] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 372.857921][ T4895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 372.865309][ T4895] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 372.874539][ T4895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.883892][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 372.921670][ T4895] usb 3-1: config 0 descriptor?? [ 372.942479][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 373.035674][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 373.044312][T12094] usb 2-1: config 0 has no interface number 0 [ 373.050511][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 373.059714][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.072618][T12094] usb 2-1: config 0 descriptor?? [ 373.094134][ T31] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 373.107313][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 373.114176][ T31] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 373.123397][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.133743][ T31] usb 5-1: config 0 descriptor?? [ 373.362103][T12094] gtco 2-1:0.219: Collection level already at zero [ 373.369811][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input50 [ 373.463363][ T4895] usbhid 3-1:0.0: can't add hid device: -71 [ 373.470126][ T4895] usbhid: probe of 3-1:0.0 failed with error -71 [ 373.485163][ T4895] usb 3-1: USB disconnect, device number 20 [ 373.577002][T12094] usb 2-1: USB disconnect, device number 23 [ 373.623395][T12094] gtco 2-1:0.219: gtco driver disconnected [ 373.672277][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 373.678492][ T31] usbhid: probe of 5-1:0.0 failed with error -71 [ 373.687788][ T31] usb 5-1: USB disconnect, device number 15 14:30:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 14:30:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) bind$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) r7 = semget$private(0x0, 0x8, 0x20) semtimedop(r7, &(0x7f0000000040)=[{0x2, 0x1, 0x800}], 0x1, &(0x7f00000000c0)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r9, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880), 0x100000000000003c, 0x0, 0xfffffffffffffec7}, 0x8f634a60e76b0486) 14:30:40 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:40 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:40 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) 14:30:40 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:40 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:40 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:40 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 374.461938][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd 14:30:40 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 374.613822][T11974] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 374.642392][T12201] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 374.723234][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 374.862067][T11974] usb 2-1: Using ep0 maxpacket: 16 [ 374.862655][ T31] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 374.880793][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 374.882128][T12201] usb 5-1: Using ep0 maxpacket: 8 [ 374.887703][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 374.901938][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.911450][ T31] usb 3-1: config 0 descriptor?? [ 374.982110][T11974] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 374.990862][T11974] usb 2-1: config 0 has no interface number 0 [ 374.997529][T11974] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 375.006870][T11974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.015807][T12201] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 375.029755][T12201] usb 5-1: config 0 interface 0 has no altsetting 0 [ 375.036692][T12201] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 375.045963][T12201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.055794][T11974] usb 2-1: config 0 descriptor?? [ 375.062048][T12201] usb 5-1: config 0 descriptor?? [ 375.312274][T11974] gtco 2-1:0.219: Collection level already at zero [ 375.320188][T11974] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input51 [ 375.432229][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 375.438516][ T31] usbhid: probe of 3-1:0.0 failed with error -71 [ 375.452525][ T31] usb 3-1: USB disconnect, device number 21 [ 375.555534][T11974] usb 2-1: USB disconnect, device number 24 [ 375.602791][T12201] usbhid 5-1:0.0: can't add hid device: -71 [ 375.608954][T12201] usbhid: probe of 5-1:0.0 failed with error -71 [ 375.618839][T11974] gtco 2-1:0.219: gtco driver disconnected [ 375.626433][T12201] usb 5-1: USB disconnect, device number 16 [ 375.692369][ C0] net_ratelimit: 4 callbacks suppressed [ 375.692412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 375.702366][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 375.704652][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 375.710259][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4f0a07fc6f12a728ae42e30520c1cd1ce0526b5763ab61b1ed08a98c80bcc1f07944e0bc05bd7fe867178c9e80aef7310a67e90a7a69c4b9a8ae5ba9a8a6b8c903af56168e99e7ee67af954d2300352ca84cd9d48ee18fcd224510bc7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x800, 0x4) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:42 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:42 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 376.172355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 376.178748][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:42 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 14:30:42 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r8, r9, 0x0, 0x1) 14:30:42 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0xe, &(0x7f00000000c0)=[{&(0x7f0000000000)="32d24a73074633190ceb4e0652f07b053163cf892bdf1dd5cc9199fdef30f056f9934aa5fe37f07997f571f4c2e06c43308f5f126938e7d7cb858293ea697377204f20833e3b6d26d3aabef4621bb3e502bb6a96e45e910901804e129a922c39fc0731354dfd364107d063f328e8c70486f569b3f044871efb98ac339d45373829ba0f9e05ddc98fe40192dd024c70f7da46eb", 0x93}], 0x1}, 0x0) 14:30:42 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 376.332389][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 376.338764][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:42 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) 14:30:42 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 376.412501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 376.418824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 376.432437][T12201] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 376.642409][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 376.683008][T12201] usb 3-1: Using ep0 maxpacket: 8 [ 376.802185][T12201] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 376.815433][T12201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.822236][T12201] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 376.832141][T12201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.842254][T12201] usb 3-1: config 0 descriptor?? [ 376.892120][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 377.022226][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 377.030654][ T31] usb 2-1: config 0 has no interface number 0 [ 377.037001][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 377.046292][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.055971][ T31] usb 2-1: config 0 descriptor?? [ 377.302046][ T31] gtco 2-1:0.219: Collection level already at zero [ 377.310064][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input52 [ 377.382569][T12201] usbhid 3-1:0.0: can't add hid device: -71 [ 377.388786][T12201] usbhid: probe of 3-1:0.0 failed with error -71 [ 377.397982][T12201] usb 3-1: USB disconnect, device number 22 [ 377.517656][ T31] usb 2-1: USB disconnect, device number 25 [ 377.563678][ T31] gtco 2-1:0.219: gtco driver disconnected 14:30:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4f0a07fc6f12a728ae42e30520c1cd1ce0526b5763ab61b1ed08a98c80bcc1f07944e0bc05bd7fe867178c9e80aef7310a67e90a7a69c4b9a8ae5ba9a8a6b8c903af56168e99e7ee67af954d2300352ca84cd9d48ee18fcd224510bc7"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) r5 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) ioctl$TIOCSBRK(r6, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000040)={r9}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000040)={r9, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}}, 0xd0, 0x979a, 0x10000, 0xc8a, 0x1000}, &(0x7f0000000140)=0x98) 14:30:44 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:44 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:44 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 14:30:44 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) 14:30:44 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:44 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:44 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 378.353334][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd 14:30:44 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r3 = fcntl$dupfd(r2, 0xe09, r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 378.452171][T12094] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 378.592059][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 378.692384][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 378.712581][ T31] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 378.725976][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 378.732902][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 378.742148][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.754263][ T31] usb 3-1: config 0 descriptor?? [ 378.822134][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 378.830661][T12094] usb 2-1: config 0 has no interface number 0 [ 378.837325][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 378.846551][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.876670][T12094] usb 2-1: config 0 descriptor?? [ 379.142174][T12094] gtco 2-1:0.219: Collection level already at zero [ 379.149910][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input53 [ 379.294400][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 379.300637][ T31] usbhid: probe of 3-1:0.0 failed with error -71 [ 379.309786][ T31] usb 3-1: USB disconnect, device number 23 [ 379.390622][T12094] usb 2-1: USB disconnect, device number 26 [ 379.424693][T12094] gtco 2-1:0.219: gtco driver disconnected 14:30:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:46 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:46 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r1, r2, 0x0, 0x1) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:46 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 14:30:46 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) 14:30:46 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:46 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000000)) 14:30:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:46 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:46 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 380.312034][T12094] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 380.332021][T12201] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 380.552138][T12094] usb 3-1: Using ep0 maxpacket: 8 [ 380.581955][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 380.672174][T12094] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 380.685493][T12094] usb 3-1: config 0 interface 0 has no altsetting 0 [ 380.692339][T12094] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 380.701580][T12094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.712256][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 380.720708][T12201] usb 2-1: config 0 has no interface number 0 [ 380.727044][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 380.730996][T12094] usb 3-1: config 0 descriptor?? [ 380.736292][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.763461][T12201] usb 2-1: config 0 descriptor?? [ 381.022066][T12201] gtco 2-1:0.219: Collection level already at zero [ 381.029633][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input54 [ 381.253640][ T31] usb 2-1: USB disconnect, device number 27 [ 381.263177][T12094] usbhid 3-1:0.0: can't add hid device: -71 [ 381.269374][T12094] usbhid: probe of 3-1:0.0 failed with error -71 [ 381.278501][T12094] usb 3-1: USB disconnect, device number 24 [ 381.287949][ T31] gtco 2-1:0.219: gtco driver disconnected 14:30:47 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x1, 0x81, 0x3f, 0x6, 0xba, 0x7, 0x6, 0x9, 0x5, 0x0, 0x8, 0x3, 0x1c000000000000}, {0x400, 0x3, 0xf0, 0x7, 0x0, 0xff, 0xa8, 0x40, 0x5, 0x1, 0x5c, 0xf3, 0x10001}, {0x1, 0x3f, 0x4, 0x3, 0x1, 0x4, 0x5, 0x80, 0xe1, 0xff, 0x7f, 0x80, 0x2}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_open_procfs(r6, &(0x7f0000000140)='net/rfcomm\x00') sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:47 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:48 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) 14:30:48 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) [ 381.932357][ C0] net_ratelimit: 26 callbacks suppressed [ 381.932379][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 381.932707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 381.938529][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:30:48 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:48 executing program 3: socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:48 executing program 3: socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:48 executing program 3: socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 382.252558][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd 14:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) [ 382.412291][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 382.418625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 382.496572][ T31] usb 2-1: Using ep0 maxpacket: 16 14:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 14:30:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) dup3(r1, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) sendfile(r6, r9, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0xabb2) r10 = socket$inet(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 382.572137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 382.578422][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 382.624092][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 382.632525][ T31] usb 2-1: config 0 has no interface number 0 [ 382.638872][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 382.648243][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.656942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 382.657394][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) [ 382.657977][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:30:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:48 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) [ 382.906540][ T31] usb 2-1: config 0 descriptor?? [ 383.172317][ T31] gtco 2-1:0.219: Collection level already at zero [ 383.180418][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input55 [ 383.404939][ T31] usb 2-1: USB disconnect, device number 28 [ 383.444110][ T31] gtco 2-1:0.219: gtco driver disconnected 14:30:50 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r6, 0xffffffffffffffff, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:30:50 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r3 = shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000004c0)=""/4096) 14:30:50 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:50 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) 14:30:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x0) connect$l2tp(r1, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @empty}, 0x4, 0x1, 0x4, 0x2}}, 0x26) r2 = fcntl$dupfd(r0, 0x0, r0) rt_sigtimedwait(&(0x7f0000000080)={0x5}, &(0x7f0000000140), &(0x7f00000000c0), 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x3000000, 0x8, 0x4}, &(0x7f0000000040)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x629, 0x400) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000280)={'ip_vti0\x00', 0x33}) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100000, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f00000004c0)={{0x2, 0xffffffff, 0x7, 0x9, 0x2, 0x8}, 0x3ee, [0xffff0000, 0x10000, 0x6, 0x2, 0x4, 0x1, 0x7fff, 0x0, 0x4, 0x6, 0x7fff, 0x1, 0xfffffff7, 0x3, 0x7, 0x1c, 0x6, 0x5, 0x71a, 0x200, 0xdc2, 0x1000, 0x6f2, 0x1, 0x3, 0x0, 0x1000, 0x1, 0x6, 0x4, 0x400, 0xc1, 0x7, 0x6, 0xfff, 0x8, 0x10001, 0x7ff, 0x8, 0xff, 0x20000000, 0x3, 0x80, 0x1, 0x2, 0x88, 0x6, 0xa9, 0x10001, 0x101, 0x7, 0x9, 0x5, 0x81, 0x9, 0xffffff56, 0x1, 0x10001, 0x7ff, 0x9, 0x400, 0xfffffffc, 0x0, 0x1, 0x7fffffff, 0x2, 0x9, 0x80, 0x7, 0xffff, 0x2, 0x3, 0x2, 0x3ff, 0xa1a2, 0x3, 0xfffffffd, 0x1000, 0x9, 0xea00, 0x3, 0x8, 0x4d, 0x5, 0x3, 0x0, 0x8000, 0x80000001, 0x3f, 0x8000, 0x92ad, 0x44f7c649, 0x1, 0x5, 0xfffffffa, 0xff, 0x4, 0x4, 0x1, 0x40, 0x6, 0x9, 0x81, 0xffff55b7, 0x7, 0x8000, 0x7fff, 0x0, 0x2, 0xfffffe00, 0x8, 0x0, 0x9, 0x3, 0x5, 0x1, 0xb569, 0x10001, 0x0, 0x1ff, 0x3, 0xb619df, 0x2, 0x5, 0x5, 0x7ff, 0x1, 0x400, 0x65eb, 0x3ff, 0x2, 0x0, 0x8, 0xb3, 0x3, 0xc7e, 0x0, 0x9, 0xff, 0x3f, 0x1, 0x80000001, 0x0, 0x3ff, 0x8f6e, 0x9b, 0x0, 0x7, 0x1, 0x7, 0x79c3, 0x0, 0x100, 0xffffff81, 0x80000000, 0x80, 0x1, 0x0, 0x86, 0x1, 0x5, 0xffffffff, 0x7f, 0x1, 0xfff, 0xb4, 0x4, 0x6, 0x6, 0x8, 0x5, 0x0, 0x2, 0x2, 0x1, 0x1000, 0x1ff, 0x2, 0x7fff, 0x9, 0x5, 0x10001, 0x1, 0x8, 0x275e, 0x8, 0x4, 0x46ef661e, 0x0, 0x0, 0x80, 0x8, 0x6, 0x2, 0x8a01, 0x0, 0x7, 0x5, 0x0, 0x3f, 0xacec, 0x7fff, 0x1f, 0x40, 0x0, 0x3f, 0xff, 0x9, 0x7, 0x4, 0xef84, 0x1, 0x16, 0x7, 0x2, 0x10001, 0x8001, 0x6, 0x80, 0x5, 0x3, 0x9, 0x1, 0xff, 0x2, 0xffff, 0x4828, 0x0, 0x100, 0x401, 0x3ff, 0x5, 0x7fff, 0x3, 0x8, 0x3f, 0x101, 0x2, 0x400, 0x1ff, 0x3, 0x8000, 0x4, 0x4, 0x400, 0xfffffffb, 0x7fffffff, 0xfffffbff, 0x1, 0x2, 0x4, 0xfffff87f, 0xb58000, 0x1, 0x736, 0x7, 0x7ff, 0xfffffffe, 0x7, 0x7, 0xfffffff9, 0x3, 0x400, 0x5df908cb, 0x63, 0x2, 0x0, 0xfffff2f0, 0x9, 0x800, 0x7fffffff, 0x0, 0x8, 0x4504, 0xc5c, 0x4ea4a44, 0x6, 0x3, 0x201a26bb, 0x200, 0x7, 0x0, 0xfffffffc, 0x26, 0x80000000, 0x383, 0x7fffffff, 0x6, 0x0, 0x6, 0x7, 0x0, 0xa840, 0x4, 0xd5, 0x8, 0x0, 0x7ff, 0x369, 0x43, 0x3, 0xfffffffb, 0x81, 0x6, 0x10001, 0x10001, 0xf1, 0x20, 0x0, 0x4, 0x9, 0x20, 0x5, 0x7cc, 0x0, 0x8, 0xef, 0x3, 0x3f, 0xa3, 0x3f, 0x1, 0x2, 0xa, 0xa8b, 0x1, 0x7fffffff, 0x8001, 0x177, 0x1, 0x3, 0x2, 0x319f0359, 0x6, 0x0, 0x9, 0x9, 0xffffff80, 0x7fff, 0x20, 0xff, 0xffff, 0x20, 0x7ff, 0x5, 0xf5, 0x81, 0x1, 0x80000001, 0x6, 0x7, 0x1, 0xfffffffb, 0x0, 0x6, 0xfff, 0x20, 0x2, 0x1, 0xddb, 0x2, 0xcf2f, 0x4, 0x5, 0x5f, 0x9, 0xff, 0x5, 0x80, 0x379a41, 0x2, 0x92, 0xa6, 0x1, 0x6, 0x2, 0x9, 0x2, 0x67adcf0d, 0x100, 0x9, 0x7, 0xa7, 0x2, 0x4, 0x7, 0x7, 0x9, 0x1, 0xfffffffd, 0x1000, 0x3, 0x6, 0x7, 0x0, 0x7, 0x6, 0x4, 0x6, 0x3f, 0x9, 0xbd, 0xff, 0x3, 0x3, 0x0, 0x3, 0x0, 0x4bd, 0x9, 0x7fff, 0x9, 0xffffffff, 0x8d, 0x800, 0xffffff46, 0x699, 0x252, 0x1, 0x3d5, 0xfffff9d6, 0xd0, 0xfffffc01, 0x101, 0x4, 0xfffffff9, 0x4, 0x401, 0x3, 0x44, 0x9, 0x2, 0x7, 0x40, 0x7, 0x1f, 0xfffffffd, 0x7f, 0x3, 0x5, 0x8, 0x6, 0x2, 0x3ff, 0x3, 0xb3ab288f, 0x0, 0x0, 0x9, 0x5, 0x7, 0x7ff, 0x40, 0x1000, 0x2, 0xffffffff, 0x0, 0x0, 0xba1, 0x1, 0x5, 0x10000, 0x4, 0x6, 0x100, 0xde1, 0x1, 0x9, 0x7f, 0x6, 0x8, 0x2, 0xfffffffe, 0x8, 0x3, 0x2, 0x0, 0x400, 0x8, 0x1, 0x7ff, 0x1, 0x5e, 0x2, 0x0, 0x5, 0x4, 0x6, 0x8, 0x7b8, 0x0, 0x6, 0x6, 0xa08, 0x2, 0x3, 0x4, 0x3, 0x8, 0x1ff, 0x101, 0x80, 0x1, 0x2, 0x47d, 0x5, 0x200, 0x7, 0x7b9, 0x401, 0x7fff, 0x9, 0x0, 0x1, 0xffffffe1, 0xbca, 0x400, 0x3, 0x8, 0x9, 0x25, 0x8, 0x4, 0x9, 0x4, 0xffff8001, 0xd71, 0x1000, 0x0, 0x51, 0x8, 0xff, 0x8, 0x6, 0x1f, 0x7f, 0x2, 0x1000, 0x8, 0x3, 0x1, 0x20000000, 0x0, 0x17c, 0x10001, 0x0, 0xfff, 0x0, 0xfff, 0x9764, 0x4, 0x2, 0xffff, 0x69fd, 0xfa11, 0x4, 0x4, 0x10000, 0x7ff, 0x1ff, 0x7, 0x100, 0x8, 0x8, 0x3, 0xfffffffb, 0x80000000, 0x1, 0x130, 0x8, 0x7fffffff, 0x0, 0xfffff1fa, 0x8, 0x101, 0x830, 0x8000, 0x7, 0x7, 0x8000, 0x0, 0xfffffffa, 0xffffffc0, 0xfff, 0x9, 0xc375, 0x5, 0x2, 0x7, 0x1, 0x5, 0x9b, 0x1f, 0xdd2, 0x4, 0x200, 0x7fffffff, 0x8001, 0x9177, 0x4, 0x400, 0x2303, 0xc73, 0xfffffffc, 0x3b, 0xfffffffc, 0x7, 0x80000000, 0x3, 0x2, 0x9, 0x3, 0x1000, 0x8, 0xffff, 0x7, 0x9, 0x1, 0x3, 0x9, 0x3, 0x7, 0x1f, 0x6, 0x0, 0x2, 0xffffffff, 0x5, 0x97, 0x9, 0x8, 0x1, 0x1, 0x5, 0x2, 0x5, 0xf806, 0xa7a3, 0x2, 0xfff, 0x1, 0x1, 0xa9eaa0b, 0x6, 0x9, 0x2, 0xfffffeff, 0x105, 0x5, 0xcef, 0x1, 0x4, 0x200, 0x9, 0x53b5, 0x7fff, 0xffff, 0x6, 0xc31, 0x7, 0x81, 0x1322d8ae, 0x2749, 0x85, 0x200, 0x80000000, 0x400, 0x21b, 0x7fffffff, 0x8000, 0x2, 0x3, 0x20, 0x9, 0x9, 0x2, 0x6, 0x5, 0x2, 0x9, 0x3ff, 0x8, 0x3, 0x2, 0x2000200, 0x5bb, 0xfffffffc, 0x63, 0x8, 0x8a, 0x9, 0x6, 0x6, 0xffffff01, 0x8, 0xfff, 0x40, 0x8, 0xffff44fa, 0x1f, 0x4, 0x5095, 0xffffffff, 0x4, 0x74, 0x9, 0x8000, 0xf9, 0x81, 0x80000001, 0xee9, 0x2, 0x1, 0x40, 0x1, 0x80, 0x200, 0x0, 0x6, 0x81, 0x20, 0x9, 0x8, 0x3, 0x82, 0x8, 0x2, 0x7fffffff, 0x57c, 0x8158, 0xa796, 0xd4a, 0x10000, 0xfffffffe, 0xff7, 0x5, 0x3be7, 0x1ff, 0x2, 0xb23, 0x10000, 0x3, 0x6, 0x0, 0x4, 0x0, 0x5, 0x81, 0x10001, 0x7fff, 0x8, 0x9, 0x3, 0x2, 0x2, 0x2, 0x3, 0x100, 0x7, 0x7ff, 0x81, 0xb46, 0x0, 0x1f, 0x1000, 0x5c, 0x1, 0x7c657038, 0x4, 0x5a7f, 0xd495, 0x4, 0x75d75f7a, 0x8, 0x7ff, 0x4, 0x3, 0x1ff, 0x5, 0xfffffffe, 0x6, 0x80, 0x1ff, 0x7, 0x2, 0x36a, 0x10001, 0x5, 0x6, 0x6, 0x7, 0x8, 0x1, 0x101, 0x200000, 0x9, 0x1, 0x80000000, 0xff, 0x4, 0xb5, 0xfffffffd, 0x1, 0xffff698a, 0xff, 0x112f, 0x5544, 0x9, 0xf993, 0xc0, 0x7, 0xda, 0x1, 0xfff, 0x1, 0x2d, 0x7a21, 0x1, 0x6, 0x0, 0x400, 0x1, 0x6, 0x4, 0x7f, 0x3, 0x9, 0x65, 0x8, 0x2, 0x5, 0x8, 0xf, 0xa1d, 0x8, 0x4e689910, 0x2, 0xc7000000, 0x8, 0x9, 0x0, 0x80, 0xfffffff7, 0x2, 0x0, 0x10001, 0x8001, 0x88, 0x10001, 0x2, 0xffff, 0x2, 0x80, 0x4, 0x1, 0x2, 0x9, 0x8001, 0x3ff, 0xffffffff, 0x3, 0x5, 0x8000, 0x6, 0x1, 0x1000, 0xfffffff7, 0x400, 0x0, 0x2, 0xeb, 0x7, 0x1, 0x7ff, 0x80000001, 0xfffff7f5, 0x80, 0x80, 0x3ff, 0x9, 0x6a, 0x400, 0x8, 0x6, 0x8000, 0x0, 0x8, 0x6, 0xfff, 0x8, 0x3, 0x2, 0x401, 0x0, 0x7, 0x80, 0x6, 0x9, 0xffffddde, 0x2e, 0x800, 0xfffff800, 0x7ff, 0x6414, 0x7, 0x0, 0x9, 0x2, 0x8000, 0xc000, 0x2, 0x90, 0x9, 0x6, 0x8, 0x1, 0x0, 0x8, 0x2, 0x8, 0x3, 0x64, 0x9, 0xfead, 0x8001, 0x4, 0x5, 0x2b0b, 0x7, 0x40, 0x1f, 0x8, 0x400, 0x10000, 0x5, 0x4, 0x40000, 0x1, 0x3, 0x73b7, 0x6, 0x9, 0xaf, 0x5, 0x1, 0x0, 0x7, 0x4, 0x0, 0x5, 0xfffffff9, 0x3, 0x1b600000, 0xffff, 0x6, 0x100, 0xfffffffe, 0xffff, 0x9, 0x10001, 0x2, 0xc0f, 0x50caa7b, 0x0, 0x7f, 0x800, 0x9, 0x733, 0xfff, 0x7, 0x4, 0x0, 0x80000001, 0x6, 0x1000, 0x8, 0x3, 0x7ff, 0x3, 0x5, 0xffff, 0xcc64, 0x1, 0x8, 0x3, 0x7f, 0xffffffff, 0x1, 0x7f, 0xfffffe00, 0x8000, 0xfffffffe, 0x9b2c5c5, 0xfffff026, 0xf0, 0xae9, 0x18f, 0x100, 0x81af17, 0x101, 0x1, 0xfffffffd, 0x6, 0x4f0b9373, 0xc421, 0x4, 0x401, 0x5, 0x4b207b78, 0x2, 0x17e, 0xa0000000, 0x5, 0x1, 0x3, 0x6, 0x4, 0x0, 0x1, 0x5, 0x8, 0x6, 0x1, 0x9]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x4941, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000240)={{0xd3, 0x1}, 'port1\x00', 0x40, 0x80000, 0x4, 0x0, 0x6, 0xfffffff8, 0x1, 0x0, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$isdn(0x22, 0x3, 0x22) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3ff, 0x81, 0x2c}, {0x0, 0x0, 0x3, 0x301}]}, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) r6 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40400) write$P9_RLERROR(r6, &(0x7f0000000140)={0x9, 0x7, 0x2}, 0x9) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000001500), r9, 0x2}}, 0x18) 14:30:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0xffffffffffffffc5, &(0x7f0000000480)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) 14:30:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="2400000025000703ea2e6d4a1a775d5420200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1, 0x0, 0xff81}, 0x0) 14:30:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r2 = fcntl$dupfd(r0, 0x203, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) write$P9_RSTATFS(r6, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x1, 0x4, 0x3, 0x8, 0x401, 0x7, 0x0, 0x13, 0x2}}, 0x43) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x532, [0x200004c0, 0x0, 0x0, 0x200005ce, 0x200005fe], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x27, 0x883e, 'tunl0\x00', 'nr0\x00', 'erspan0\x00', 'ip6gre0\x00', @remote, [0x0, 0xff, 0x7f, 0x53ae656d6f557660], @dev={[], 0x20}, [0xff, 0xff, 0x0, 0x0, 0xff, 0x101], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x27}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0xec4a0cc098bf83d0, 0x4c, 0xf8, 'ip6erspan0\x00', 'veth0_to_bond\x00', 'teql0\x00', 'syz_tun\x00', @empty, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0x73b9a9ec73da3070], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x25}, 0xfffffffffffffffd}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x17}, 0x43bf2fbab3e44a70}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x10}}}}, {0x11, 0x2, 0x86dd, 'bridge_slave_0\x00', 'ipddp0\x00', 'ip6tnl0\x00', 'team_slave_1\x00', @dev={[], 0xff}, [0x0, 0xff, 0x0, 0x0, 0x80, 0xff], @empty, [0xff, 0x0, 0xff, 0x1fe], 0x1c6, 0x246, 0x27e, [@connlabel={'connlabel\x00', 0x8, {{0xf0, 0x1}}}, @comment={'comment\x00', 0x100}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x7f, 0xffff}}}, @snat={'snat\x00', 0x10, {{@random="eb282d720e7f", 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@remote}}}}]}]}, 0x5aa) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0x4b}], 0x1}, 0x0) [ 384.302379][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd 14:30:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15", 0xfffffd28}], 0x1}, 0x0) [ 384.551968][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 384.672174][ T31] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 384.680633][ T31] usb 2-1: config 0 has no interface number 0 [ 384.686975][ T31] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 384.696183][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.705918][ T31] usb 2-1: config 0 descriptor?? [ 384.962187][ T31] gtco 2-1:0.219: Collection level already at zero [ 384.969773][ T31] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input56 [ 385.189875][ T31] usb 2-1: USB disconnect, device number 29 [ 385.243284][ T31] gtco 2-1:0.219: gtco driver disconnected 14:30:51 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r6, 0xffffffffffffffff, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:30:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000340), &(0x7f0000000380), 0x2}, 0x20) 14:30:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:51 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:51 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 14:30:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64], @ANYRES32=0x0, @ANYRES16], 0xffffff54) write$binfmt_misc(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x400000000800, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b00") [ 386.108106][T12094] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 386.382089][T12094] usb 2-1: Using ep0 maxpacket: 16 14:30:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) [ 386.502341][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 386.510937][T12094] usb 2-1: config 0 has no interface number 0 [ 386.517356][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 386.526590][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:30:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) [ 386.659278][T12094] usb 2-1: config 0 descriptor?? 14:30:52 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:52 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 386.922107][T12094] gtco 2-1:0.219: Collection level already at zero [ 386.930276][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input57 [ 387.155600][T12094] usb 2-1: USB disconnect, device number 30 [ 387.193826][T12094] gtco 2-1:0.219: gtco driver disconnected 14:30:53 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r6, 0xffffffffffffffff, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:30:53 executing program 3: syz_emit_ethernet(0x70, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60d8652b00140600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5011070090780000"], 0x0) 14:30:53 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x7f, 0x40, 0x0, 0x8}, {0x1, 0x0, 0x0, 0x3e00000000000000}, {0x0, 0x7, 0x1f, 0x3}, {0x80000001, 0x7ec3, 0x0, 0x3}, {0x1000, 0x6, 0x0, 0x9}]}, 0x10) getpid() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000340)={0xf80}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 14:30:53 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) [ 387.748679][T13737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:30:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:30:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) 14:30:54 executing program 3: 14:30:54 executing program 3: 14:30:54 executing program 3: 14:30:54 executing program 3: [ 388.172437][ C1] net_ratelimit: 25 callbacks suppressed [ 388.172459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 388.172563][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 388.178628][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 388.184573][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 388.204037][T12201] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 388.462059][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 388.582296][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 388.590723][T12201] usb 2-1: config 0 has no interface number 0 [ 388.597140][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 388.606393][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.632943][T12201] usb 2-1: config 0 descriptor?? [ 388.652474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 388.658693][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 388.822091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 388.828188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 388.882036][T12201] gtco 2-1:0.219: Collection level already at zero [ 388.889689][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input58 [ 388.902330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 388.908542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 389.109087][T12201] usb 2-1: USB disconnect, device number 31 [ 389.144232][T12201] gtco 2-1:0.219: gtco driver disconnected 14:30:55 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:30:55 executing program 3: 14:30:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:55 executing program 0: 14:30:55 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:55 executing program 0: 14:30:55 executing program 3: 14:30:55 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:55 executing program 0: 14:30:55 executing program 3: 14:30:56 executing program 0: [ 390.005759][T12094] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 390.261868][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 390.382042][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 390.390372][T12094] usb 2-1: config 0 has no interface number 0 [ 390.396751][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 390.405935][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.418867][T12094] usb 2-1: config 0 descriptor?? [ 390.682180][T12094] gtco 2-1:0.219: Collection level already at zero [ 390.689800][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input59 [ 390.912846][T12201] usb 2-1: USB disconnect, device number 32 [ 390.953860][T12201] gtco 2-1:0.219: gtco driver disconnected 14:30:57 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:30:57 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:57 executing program 3: 14:30:57 executing program 0: 14:30:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:57 executing program 0: 14:30:57 executing program 3: 14:30:57 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:57 executing program 0: 14:30:57 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:57 executing program 3: [ 391.812437][T12201] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 392.052152][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 392.172186][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 392.180455][T12201] usb 2-1: config 0 has no interface number 0 [ 392.186834][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 392.196115][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.205859][T12201] usb 2-1: config 0 descriptor?? [ 392.462121][T12201] gtco 2-1:0.219: Collection level already at zero [ 392.469789][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input60 [ 392.689216][T12201] usb 2-1: USB disconnect, device number 33 [ 392.735408][T12201] gtco 2-1:0.219: gtco driver disconnected 14:30:59 executing program 3: 14:30:59 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:59 executing program 0: 14:30:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:30:59 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:30:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:30:59 executing program 3: 14:30:59 executing program 0: 14:30:59 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:59 executing program 3: 14:30:59 executing program 0: 14:30:59 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:30:59 executing program 3: 14:30:59 executing program 0: [ 393.602960][T12201] usb 2-1: new high-speed USB device number 34 using dummy_hcd 14:30:59 executing program 3: [ 393.862226][T12201] usb 2-1: Using ep0 maxpacket: 16 14:31:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) [ 393.982226][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 393.990670][T12201] usb 2-1: config 0 has no interface number 0 [ 393.997086][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 394.006680][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.020162][T12201] usb 2-1: config 0 descriptor?? [ 394.282094][T12201] gtco 2-1:0.219: Collection level already at zero [ 394.289721][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input61 [ 394.412400][ C1] net_ratelimit: 25 callbacks suppressed [ 394.412435][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 394.412800][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 394.418570][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 394.514185][T12094] usb 2-1: USB disconnect, device number 34 [ 394.553465][T12094] gtco 2-1:0.219: gtco driver disconnected [ 394.892158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 394.898333][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:31:01 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) 14:31:01 executing program 0: 14:31:01 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') write$P9_RUNLINKAT(r0, 0x0, 0x0) 14:31:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) [ 395.052202][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.058426][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:31:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2828}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x712b177317839c08, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x9480) syz_open_dev$sndseq(0x0, 0x0, 0x41) dup2(0xffffffffffffffff, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20048800) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) [ 395.132321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.140281][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 395.146818][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:31:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') close(r0) 14:31:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="7365637572697479000000000000000000ae0000000000000000000000006ddf2958c505b80a00007002000000000000700200005001000070020000c0030000c0030000c0030000c0030000c003000004000000", @ANYPTR=&(0x7f0000000100)=ANY=[]], 0x2) [ 395.444396][T12201] usb 2-1: new high-speed USB device number 35 using dummy_hcd 14:31:01 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000007c40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x0) 14:31:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) [ 395.692371][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 395.819492][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 395.828056][T12201] usb 2-1: config 0 has no interface number 0 [ 395.834439][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 395.843653][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.876258][T12201] usb 2-1: config 0 descriptor?? [ 396.132189][T12201] gtco 2-1:0.219: Collection level already at zero [ 396.140375][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input62 [ 396.362524][T12094] usb 2-1: USB disconnect, device number 35 [ 396.405022][T12094] gtco 2-1:0.219: gtco driver disconnected 14:31:02 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) 14:31:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2828}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x712b177317839c08, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x9480) syz_open_dev$sndseq(0x0, 0x0, 0x41) dup2(0xffffffffffffffff, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20048800) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) 14:31:02 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = gettid() tkill(r0, 0x21) 14:31:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x1}}) 14:31:03 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="0800080000f200001400020000000000000000000000796eb54e70452b248ca206ba00ff7f0000011400010000f70000000000000000ffffac1e000114000600000010000900"/80], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xd901}) 14:31:03 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c289030086dd6076605100303afffe800000009f00000000000000000000aa858a49027457ff305016219796823e3c880290780007880060c5961e00006200030400ff280000000402000005000001110500000000000000000000000000010e2a71440e6fb0023f67036f880fdc4b10393a5e27b4908743830dd824ef5bb31b838eddab53a94f59924662348792f65772612c"], 0x0) [ 397.272161][T12094] usb 2-1: new high-speed USB device number 36 using dummy_hcd 14:31:03 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="0800080000f200001400020000000000000000000000796eb54e70452b248ca206ba00ff7f0000011400010000f70000000000000000ffffac1e000114000600000010000900"/80], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xd901}) [ 397.384352][T13955] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 397.396704][T13955] device lo entered promiscuous mode [ 397.408756][T13956] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 14:31:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) write$P9_RGETLOCK(r1, 0x0, 0x0) [ 397.480110][T13960] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 14:31:03 executing program 0: clone(0x3102401ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) [ 397.532075][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 397.652110][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 397.660423][T12094] usb 2-1: config 0 has no interface number 0 [ 397.667007][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 397.676256][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.746512][T12094] usb 2-1: config 0 descriptor?? [ 398.002154][T12094] gtco 2-1:0.219: Collection level already at zero [ 398.009810][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input63 [ 398.230011][T12201] usb 2-1: USB disconnect, device number 36 [ 398.264928][T12201] gtco 2-1:0.219: gtco driver disconnected 14:31:04 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r5, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) 14:31:04 executing program 3: getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000300)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) recvfrom(r0, &(0x7f0000000040)=""/7, 0x7, 0x10001, &(0x7f00000000c0)=@vsock, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={@mcast2, @ipv4={[], [], @loopback}, @dev={0xfe, 0x80, [], 0x25}, 0xff, 0x0, 0x400, 0x500, 0x80000001, 0x2a00009}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r2 = gettid() mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10800, 0x0) tkill(r2, 0x1000000000015) 14:31:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:04 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = gettid() mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) tkill(r0, 0x1000000000015) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 14:31:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:04 executing program 3: syz_open_procfs(0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x14f) r0 = gettid() ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0xe9) flistxattr(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 398.837822][T13990] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 14:31:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 14:31:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) getuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) close(r0) [ 399.124054][T12094] usb 2-1: new high-speed USB device number 37 using dummy_hcd 14:31:05 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 399.492103][T12094] usb 2-1: Using ep0 maxpacket: 16 14:31:05 executing program 3: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14:31:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) [ 399.622624][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 399.631124][T12094] usb 2-1: config 0 has no interface number 0 [ 399.637844][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 399.647063][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.707711][T12094] usb 2-1: config 0 descriptor?? [ 399.982199][T12094] gtco 2-1:0.219: Collection level already at zero [ 399.990143][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input64 [ 400.211931][T12201] usb 2-1: USB disconnect, device number 37 [ 400.254839][T12201] gtco 2-1:0.219: gtco driver disconnected [ 400.652280][ C1] net_ratelimit: 25 callbacks suppressed [ 400.652304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 400.652658][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 400.658444][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:31:06 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:31:06 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x80000001}, {0x1}, {0x80000000}]}) 14:31:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) 14:31:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="850000000500000084000000000000009500130000000000b9b8520d73509b3b3c5957ca2021a3a456579e1086a97e9f8df65baad04360711872096e97f1573bfe9c0b16bec4258333f8fba4247c728d9362be24fc60a598c0e393c82372fd1405fb934cc65297392039e73977fc6886ff327165f4ba372508393fcb881b42d369cbc4a0fb37ee833acec53a031cfe810d95c3e72db931f309fcc4617b2ad796d6a6ba222c18882adf189331c7051efd3a"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) 14:31:07 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="2e00000010008108040f80ecdb4cb9c00a480e1813000000ff050005bf008600002000000000000000ecff6b7e42", 0x33fe0}], 0x1}, 0x0) [ 401.132133][T12201] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 401.132418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.146308][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 401.199117][T14068] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 401.249103][T14068] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 14:31:07 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) [ 401.292300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.298597][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:31:07 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 401.372526][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.379508][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 401.386447][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 401.392016][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 401.522253][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 401.530785][T12201] usb 2-1: config 0 has no interface number 0 [ 401.537298][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 401.546539][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.559486][T12201] usb 2-1: config 0 descriptor?? [ 401.822124][T12201] gtco 2-1:0.219: Collection level already at zero [ 401.830346][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input65 [ 402.050207][T12201] usb 2-1: USB disconnect, device number 38 [ 402.104871][T12201] gtco 2-1:0.219: gtco driver disconnected 14:31:08 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:31:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000202010000010000002c11b903d5538f71325b7a6de34b486143481000020004"], 0x24}}, 0x0) 14:31:08 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:08 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:08 executing program 0: 14:31:08 executing program 0: [ 402.675922][T14098] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:31:08 executing program 3: 14:31:08 executing program 0: 14:31:08 executing program 3: 14:31:08 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0x0) r0 = shmat(0x0, &(0x7f0000fef000/0x4000)=nil, 0x7000) shmdt(r0) 14:31:09 executing program 3: [ 402.986539][T12094] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 403.251934][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 403.382467][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 403.390830][T12094] usb 2-1: config 0 has no interface number 0 [ 403.397139][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 403.406351][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.431373][T12094] usb 2-1: config 0 descriptor?? [ 403.692085][T12094] gtco 2-1:0.219: Collection level already at zero [ 403.699705][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input66 [ 403.920194][T12094] usb 2-1: USB disconnect, device number 39 [ 403.963328][T12094] gtco 2-1:0.219: gtco driver disconnected 14:31:10 executing program 3: 14:31:10 executing program 0: 14:31:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:10 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:31:10 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:10 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:10 executing program 3: 14:31:10 executing program 0: 14:31:10 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:10 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:10 executing program 3: 14:31:10 executing program 0: syz_open_procfs(0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x14f) r0 = gettid() ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0xe9) flistxattr(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 14:31:10 executing program 3: [ 404.842084][T12201] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 405.092107][T12201] usb 2-1: Using ep0 maxpacket: 16 14:31:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) [ 405.212100][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 405.220465][T12201] usb 2-1: config 0 has no interface number 0 [ 405.226909][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 405.236151][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:31:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) [ 405.259455][T12201] usb 2-1: config 0 descriptor?? [ 405.522118][T12201] gtco 2-1:0.219: Collection level already at zero [ 405.529923][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input67 [ 405.752635][T12094] usb 2-1: USB disconnect, device number 40 [ 405.794263][T12094] gtco 2-1:0.219: gtco driver disconnected 14:31:12 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f088e22771a776868238520f1e8068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf1320d459749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add01809faaf8606f40ff10b827831c8e8c7b2efbc1dea236a77ed0dd02000000000000000e01b7a7f7c646eb507fbef7047e1d3fc67974624c518868c143068290ca5131379791bde70fa88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62a2dacc4a070000001d671b58fee0224776b16f00"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:31:12 executing program 3: 14:31:12 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:12 executing program 0: 14:31:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:12 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:12 executing program 0: 14:31:12 executing program 3: 14:31:12 executing program 0: 14:31:12 executing program 3: 14:31:12 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:12 executing program 0: [ 406.635126][T12201] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 406.889661][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 406.895530][ C0] net_ratelimit: 25 callbacks suppressed [ 406.895552][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 406.896009][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 406.902332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 406.920074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 407.022132][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 407.030448][T12201] usb 2-1: config 0 has no interface number 0 [ 407.036781][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 407.046076][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.056044][T12201] usb 2-1: config 0 descriptor?? [ 407.302110][T12201] gtco 2-1:0.219: Collection level already at zero [ 407.309800][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input68 [ 407.372364][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 407.378525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 407.531625][T12094] usb 2-1: USB disconnect, device number 41 [ 407.538204][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 407.538621][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 407.593939][T12094] gtco 2-1:0.219: gtco driver disconnected [ 407.612162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 407.618181][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:31:14 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:31:14 executing program 3: 14:31:14 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:14 executing program 0: 14:31:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:14 executing program 0: 14:31:14 executing program 3: 14:31:14 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:14 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f000000cc80)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x87ffd) sendfile(r0, r1, 0x0, 0x800000000024) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000001600)='./bus\x00', 0x0) 14:31:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x42000, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x0, 0x3, 0x9, 0x3, 0x0, 0x1, 0x0, 0x10000, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2ff6d6a8dcafa7c2625272c2a7801110e16f302b72666d6120"], 0x19) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r2, 0x43c) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.subtree_control\x00', 0x2, 0x0) 14:31:14 executing program 3: [ 408.442296][T12201] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 408.691951][T12201] usb 2-1: Using ep0 maxpacket: 16 [ 408.822304][T12201] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 408.830862][T12201] usb 2-1: config 0 has no interface number 0 [ 408.837252][T12201] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 408.846593][T12201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.856224][T12201] usb 2-1: config 0 descriptor?? [ 409.112129][T12201] gtco 2-1:0.219: Collection level already at zero [ 409.119824][T12201] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input69 [ 409.339936][T12201] usb 2-1: USB disconnect, device number 42 [ 409.383398][T12201] gtco 2-1:0.219: gtco driver disconnected 14:31:15 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:31:15 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:15 executing program 0: 14:31:15 executing program 3: 14:31:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:16 executing program 0: 14:31:16 executing program 3: 14:31:16 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x100000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) unlink(&(0x7f0000000700)='./file0\x00') write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2f72646d81202bdec16473208dae974c002f725948fb69494e7e0acd3f2729f71ec639fe8a3a84a2fdf3b3f8a528e2ff0071fe650ae936c5f217eead18a996d31f3791dfa6c103419523d387a73552452122e17140a677abfa240b559e25da80ad96094e210863b9e4621e77b8c6960fd36eaf074439021ebdbdca20eda6"], 0x7e) sendmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x0, 0x0, 0x4, 0x3}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="4cd576c630fdd33bd113e187589e95481c40", 0x12}, {&(0x7f0000000640)="f2e593459e20cf95f4dfc19affd7e51c846492ff0d1e52bbb8fbb2d592faab", 0x1f}], 0x2}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg(r1, 0x0, 0x2000) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r4, &(0x7f0000000000), 0x10000000d) r5 = gettid() perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x8, 0x6, 0x0, 0x8, 0x0, 0x3, 0x2000, 0x2, 0x0, 0x800000000, 0x2, 0x2, 0x4, 0x1cf, 0x4, 0x1, 0x0, 0x8, 0x3, 0x0, 0x6, 0x400, 0x81, 0xca7f, 0x7, 0xa0a5, 0x0, 0x0, 0x2, 0x2, 0x3ff, 0xfffffffffffffffb, 0x10001, 0x9, 0x7, 0x401, 0x0, 0x0, 0x2, @perf_config_ext={0x1ff, 0x40}, 0x2000, 0xfffffffffffffff7, 0x2, 0x8, 0x27, 0x4, 0x80}, r5, 0x3, r1, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x6609, 0x0) recvmsg$kcm(r1, 0x0, 0x10100) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0xa, 0x3, 0x11) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001880)={r6}) socket$kcm(0x29, 0x3ffffffffffffe, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000013001707ed12806cd20010e517fb0d61e18fbd2fe6a5dd80009d00010801000000000300f87f00006400", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) r8 = openat$cgroup_ro(r4, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r9 = openat$cgroup_ro(r8, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x3ffffffffffffe, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000340)) 14:31:16 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x3c) 14:31:16 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 410.235932][T12094] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 410.482021][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 410.602133][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 410.610746][T12094] usb 2-1: config 0 has no interface number 0 [ 410.617382][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 410.626664][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.636603][T12094] usb 2-1: config 0 descriptor?? [ 410.902176][T12094] gtco 2-1:0.219: Collection level already at zero [ 410.909807][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input70 [ 411.130102][T12201] usb 2-1: USB disconnect, device number 43 [ 411.173869][T12201] gtco 2-1:0.219: gtco driver disconnected 14:31:17 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:31:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) close(r1) 14:31:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x1) shutdown(r0, 0x2) 14:31:17 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4f0a07fc6f12a728ae42e30520c1cd1ce0526b5763ab61b1ed08a98c80bcc1f07944e0bc05bd7fe867178c9e80aef7310a67e90a7a69c4b9a8ae5ba9a8a6b8c903af56168e9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x201) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000240)=""/156) write$hidraw(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="c6f2f98330edc4091864fca101b60006c52459a746b46de63dbbc31d6a574e538358d428cb64783a9d136329ecdf", 0x2e) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000300)=0xfffffffffffffffa) r3 = syz_open_dev$hidraw(0x0, 0xfffffff7fffffffc, 0x107d) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000001240)=""/4096) syz_open_dev$hiddev(&(0x7f00000001c0)='/dev/usb/hiddev#\x00', 0xffffffff, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(r4, 0x81044804, &(0x7f0000000040)={0x1, "c2"}) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000001600)) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) read$hidraw(r2, &(0x7f0000000080)=""/154, 0x9a) r5 = syz_open_dev$hiddev(&(0x7f0000000440)='/\xa3(\x11\xddd\f\x00', 0x1, 0x2) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x3) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/../raw#\x00', 0x1, 0x2246) r6 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) write$hidraw(r6, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) r7 = syz_open_dev$hidraw(0x0, 0x0, 0x4000) read$hidraw(r7, &(0x7f0000003200)=""/4096, 0xffffffad) read$hidraw(r7, &(0x7f0000000540)=""/172, 0xac) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/149, 0x95) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000200)=""/13) r8 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r8, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCGRDESCSIZE(r8, 0x80044801, &(0x7f0000000180)) 14:31:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xb4, 0xbb, 0xef, 0x40, 0x4f1, 0x1001, 0xc3b5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9d, 0x0, 0x0, 0xa5, 0xc2, 0xef}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 14:31:17 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) 14:31:18 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 412.012395][T12094] usb 2-1: new high-speed USB device number 44 using dummy_hcd 14:31:18 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 412.098423][T14325] syz-executor.5 (14325) used greatest stack depth: 53088 bytes left [ 412.222055][T12201] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 412.252037][T12094] usb 2-1: Using ep0 maxpacket: 16 14:31:18 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce05000000010902120001000000000904080000fe030000b7c44d52c59aa3329a3b3f"], 0x0) [ 412.372767][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 412.381597][T12094] usb 2-1: config 0 has no interface number 0 [ 412.388060][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 412.397298][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.408092][T12094] usb 2-1: config 0 descriptor?? [ 412.622131][T12201] usb 1-1: config 0 has an invalid interface number: 157 but max is 0 [ 412.630716][T12201] usb 1-1: config 0 has no interface number 0 [ 412.637168][T12201] usb 1-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=c3.b5 [ 412.646302][T12201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.658403][T12201] usb 1-1: config 0 descriptor?? [ 412.672375][T12094] gtco 2-1:0.219: Collection level already at zero [ 412.680268][T12094] input: GTCO_CalComp as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.219/input/input71 [ 412.718559][T12201] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 412.745019][T11974] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 412.924191][T12094] usb 2-1: USB disconnect, device number 44 [ 412.975631][T12094] gtco 2-1:0.219: gtco driver disconnected [ 412.992381][T11974] usb 4-1: Using ep0 maxpacket: 16 [ 413.122373][T11974] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 413.130597][T11974] usb 4-1: config 0 has no interface number 0 [ 413.132339][ C1] net_ratelimit: 26 callbacks suppressed [ 413.132391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.137345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 413.142858][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.148692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.166202][T11974] usb 4-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 413.176168][T11974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.186107][T11974] usb 4-1: config 0 descriptor?? [ 413.224119][T11974] usbtmc 4-1:0.8: bulk endpoints not found [ 413.425560][T11974] usb 4-1: USB disconnect, device number 5 14:31:19 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/299], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000083000000aa0e78c148ed3757f2d6eed5cb866a724c607e7c914aa3974425b1d8daed6c6cf6fafa2cc5655e7305eafd9777099074e1b4511d1636e05c00cccbdd70d62d0b53d3d7b88c34d942f5a579978ffe95ba25978665e9d2a068e1a27db172d867ed43830000000000ae8aa6b2d7f093aff45c70886d2d07af5a91fc834ee040d2d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe0b, 0x800) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x1f, 0x9, 0x1c, 0x9, 0x7, 0xff, 0xfc, 0x1, 0x20, 0x6, 0x7f, 0x11, 0x7f}, {0x8, 0x1ea8, 0xf9, 0x20, 0x6, 0x0, 0x1f, 0x85, 0x0, 0x40, 0x3f, 0x7, 0x5}, {0x82c8, 0x3, 0x81, 0x0, 0x0, 0x3f, 0xa0, 0x1, 0x3f, 0x3, 0x3f, 0x5, 0x3}], 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r6 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r5, r6, 0x0, 0x1) socketpair(0xa, 0x1, 0x4, &(0x7f0000000380)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r7, r8, 0x0, 0x1) 14:31:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000f600084c05d50300000000000109022400010000a000090400f508030000000921000000012229000905810300000100007a5e60bc5cff4ff805036d2fd95300fac879cf416e822f581766925abe7df13b3105e29586e69296b49e876c47373537e332d5051b11e962b26a1d63fdebd10e98e5ee579df527a23f11a2805d7a5028a4d2bf56c887a4e6a6634ef4b7b36f650fa54fcd2fb50b5e42de7f737229cb8716526025ba06051866ecdadce30ec2341d399a472d276c611698646d076f6032af224f09b926e209342ab2b0fac703b8a2f275c62137d80b74ae40af65a87838bc0ef78a2cdd33e37067f4c995680453f311e9064b3b5affc7a8e0c5e36f8c546928605c8dbdeebd9b52fb291d2becf4f0a07fc6f12a728ae42e30520c1cd1ce0526b5763ab61b1ed08a98c80bcc1f07944e0bc05bd7fe867178c9e80aef7310a67e90a7a69c4b9a8ae5ba9a8a6b8c903af56168e9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) 14:31:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 14:31:19 executing program 5: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r2}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) [ 413.612421][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.618514][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.772357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.778613][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.812139][T12094] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 413.812463][T12201] gspca_sunplus: reg_w_riv err -71 [ 413.825582][T12201] ===================================================== [ 413.832728][T12201] BUG: KMSAN: uninit-value in gspca_dev_probe2+0xe93/0x2230 [ 413.840009][T12201] CPU: 0 PID: 12201 Comm: kworker/0:5 Not tainted 5.3.0-rc7+ #0 [ 413.847648][T12201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.853734][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.857788][T12201] Workqueue: usb_hub_wq hub_event [ 413.864629][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.868561][T12201] Call Trace: [ 413.877553][T12201] dump_stack+0x191/0x1f0 [ 413.881918][T12201] kmsan_report+0x13a/0x2b0 [ 413.886430][T12201] __msan_warning+0x73/0xe0 [ 413.890946][T12201] sd_init+0x5b6f/0x5e60 [ 413.895207][T12201] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 413.901550][T12201] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 413.907709][T12201] ? sd_config+0x37d/0x710 [ 413.912244][T12201] ? sd_config+0x710/0x710 [ 413.916810][T12201] gspca_dev_probe2+0xe93/0x2230 [ 413.921778][T12201] gspca_dev_probe+0x346/0x3b0 [ 413.926654][T12201] sd_probe+0x8d/0xa0 [ 413.930663][T12201] ? i2c_write+0xe40/0xe40 [ 413.935088][T12201] usb_probe_interface+0xd19/0x1310 [ 413.940311][T12201] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 413.946209][T12201] ? usb_register_driver+0x7d0/0x7d0 [ 413.951486][T12201] really_probe+0x1373/0x1dc0 [ 413.956182][T12201] driver_probe_device+0x1ba/0x510 [ 413.961316][T12201] __device_attach_driver+0x5b8/0x790 [ 413.966692][T12201] bus_for_each_drv+0x28e/0x3b0 [ 413.971541][T12201] ? deferred_probe_work_func+0x400/0x400 [ 413.977265][T12201] __device_attach+0x489/0x750 [ 413.982042][T12201] device_initial_probe+0x4a/0x60 [ 413.987692][T12201] bus_probe_device+0x131/0x390 [ 413.992567][T12201] device_add+0x25b5/0x2df0 [ 413.997202][T12201] usb_set_configuration+0x309f/0x3710 [ 414.003334][T12201] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 414.009443][T12201] generic_probe+0xe7/0x280 [ 414.013973][T12201] ? usb_choose_configuration+0xae0/0xae0 [ 414.019716][T12201] usb_probe_device+0x146/0x200 [ 414.024574][T12201] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 414.030463][T12201] ? usb_register_device_driver+0x470/0x470 [ 414.036367][T12201] really_probe+0x1373/0x1dc0 [ 414.041070][T12201] driver_probe_device+0x1ba/0x510 [ 414.046202][T12201] __device_attach_driver+0x5b8/0x790 [ 414.051605][T12201] bus_for_each_drv+0x28e/0x3b0 [ 414.056483][T12201] ? deferred_probe_work_func+0x400/0x400 [ 414.062245][T12201] __device_attach+0x489/0x750 [ 414.067029][T12201] device_initial_probe+0x4a/0x60 [ 414.072023][T12094] usb 2-1: Using ep0 maxpacket: 16 [ 414.072082][T12201] bus_probe_device+0x131/0x390 [ 414.082074][T12201] device_add+0x25b5/0x2df0 [ 414.086630][T12201] usb_new_device+0x23e5/0x2fb0 [ 414.091491][T12201] hub_event+0x581d/0x72f0 [ 414.095948][T12201] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 414.101844][T12201] ? led_work+0x720/0x720 [ 414.106622][T12201] ? led_work+0x720/0x720 [ 414.110994][T12201] process_one_work+0x1572/0x1ef0 [ 414.116042][T12201] worker_thread+0x111b/0x2460 [ 414.120831][T12201] kthread+0x4b5/0x4f0 [ 414.124905][T12201] ? process_one_work+0x1ef0/0x1ef0 [ 414.130114][T12201] ? kthread_blkcg+0xf0/0xf0 [ 414.134744][T12201] ret_from_fork+0x35/0x40 [ 414.139176][T12201] [ 414.141526][T12201] Uninit was created at: [ 414.145801][T12201] kmsan_internal_poison_shadow+0x53/0x100 [ 414.151619][T12201] kmsan_slab_alloc+0xaa/0x120 [ 414.156381][T12201] kmem_cache_alloc_trace+0x8c5/0xd20 [ 414.161837][T12201] gspca_dev_probe2+0x30d/0x2230 [ 414.166786][T12201] gspca_dev_probe+0x346/0x3b0 [ 414.171548][T12201] sd_probe+0x8d/0xa0 [ 414.175536][T12201] usb_probe_interface+0xd19/0x1310 [ 414.180738][T12201] really_probe+0x1373/0x1dc0 [ 414.185414][T12201] driver_probe_device+0x1ba/0x510 [ 414.190543][T12201] __device_attach_driver+0x5b8/0x790 [ 414.192256][T12094] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 414.195910][T12201] bus_for_each_drv+0x28e/0x3b0 [ 414.195925][T12201] __device_attach+0x489/0x750 [ 414.195939][T12201] device_initial_probe+0x4a/0x60 [ 414.195953][T12201] bus_probe_device+0x131/0x390 [ 414.195964][T12201] device_add+0x25b5/0x2df0 [ 414.195979][T12201] usb_set_configuration+0x309f/0x3710 [ 414.196014][T12201] generic_probe+0xe7/0x280 [ 414.204425][T12094] usb 2-1: config 0 has no interface number 0 [ 414.209106][T12201] usb_probe_device+0x146/0x200 [ 414.214097][T12094] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 414.218909][T12201] really_probe+0x1373/0x1dc0 [ 414.223921][T12094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.228422][T12201] driver_probe_device+0x1ba/0x510 [ 414.242474][T12094] usb 2-1: config 0 descriptor?? [ 414.244512][T12201] __device_attach_driver+0x5b8/0x790 [ 414.244528][T12201] bus_for_each_drv+0x28e/0x3b0 [ 414.244542][T12201] __device_attach+0x489/0x750 [ 414.244557][T12201] device_initial_probe+0x4a/0x60 [ 414.244570][T12201] bus_probe_device+0x131/0x390 [ 414.244599][T12201] device_add+0x25b5/0x2df0 [ 414.306144][T12201] usb_new_device+0x23e5/0x2fb0 [ 414.306158][T12201] hub_event+0x581d/0x72f0 14:31:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0x7349f68b, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_disconnect(r0) [ 414.306174][T12201] process_one_work+0x1572/0x1ef0 [ 414.306206][T12201] worker_thread+0x111b/0x2460 [ 414.315742][T12201] kthread+0x4b5/0x4f0 [ 414.334098][T12201] ret_from_fork+0x35/0x40 [ 414.338552][T12201] ===================================================== [ 414.345708][T12201] Disabling lock debugging due to kernel taint [ 414.352313][T12201] Kernel panic - not syncing: panic_on_warn set ... [ 414.358919][T12201] CPU: 0 PID: 12201 Comm: kworker/0:5 Tainted: G B 5.3.0-rc7+ #0 [ 414.368310][T12201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.379002][T12201] Workqueue: usb_hub_wq hub_event [ 414.384048][T12201] Call Trace: [ 414.387365][T12201] dump_stack+0x191/0x1f0 [ 414.391695][T12201] panic+0x3c9/0xc1e [ 414.395609][T12201] kmsan_report+0x2a2/0x2b0 [ 414.400630][T12201] __msan_warning+0x73/0xe0 [ 414.405129][T12201] sd_init+0x5b6f/0x5e60 [ 414.409364][T12201] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 414.415267][T12201] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 414.421425][T12201] ? sd_config+0x37d/0x710 [ 414.425837][T12201] ? sd_config+0x710/0x710 [ 414.430253][T12201] gspca_dev_probe2+0xe93/0x2230 [ 414.435197][T12201] gspca_dev_probe+0x346/0x3b0 [ 414.439960][T12201] sd_probe+0x8d/0xa0 [ 414.444020][T12201] ? i2c_write+0xe40/0xe40 [ 414.448472][T12201] usb_probe_interface+0xd19/0x1310 [ 414.453768][T12201] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 414.459680][T12201] ? usb_register_driver+0x7d0/0x7d0 [ 414.464998][T12201] really_probe+0x1373/0x1dc0 [ 414.469777][T12201] driver_probe_device+0x1ba/0x510 [ 414.474892][T12201] __device_attach_driver+0x5b8/0x790 [ 414.480442][T12201] bus_for_each_drv+0x28e/0x3b0 [ 414.485307][T12201] ? deferred_probe_work_func+0x400/0x400 [ 414.491470][T12201] __device_attach+0x489/0x750 [ 414.496250][T12201] device_initial_probe+0x4a/0x60 [ 414.501282][T12201] bus_probe_device+0x131/0x390 [ 414.506156][T12201] device_add+0x25b5/0x2df0 [ 414.510688][T12201] usb_set_configuration+0x309f/0x3710 [ 414.516275][T12201] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 414.522344][T12201] generic_probe+0xe7/0x280 [ 414.526840][T12201] ? usb_choose_configuration+0xae0/0xae0 [ 414.532573][T12201] usb_probe_device+0x146/0x200 [ 414.538119][T12201] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 414.545051][T12201] ? usb_register_device_driver+0x470/0x470 [ 414.550943][T12201] really_probe+0x1373/0x1dc0 [ 414.555622][T12201] driver_probe_device+0x1ba/0x510 [ 414.561001][T12201] __device_attach_driver+0x5b8/0x790 [ 414.566385][T12201] bus_for_each_drv+0x28e/0x3b0 [ 414.571398][T12201] ? deferred_probe_work_func+0x400/0x400 [ 414.577156][T12201] __device_attach+0x489/0x750 [ 414.581935][T12201] device_initial_probe+0x4a/0x60 [ 414.586976][T12201] bus_probe_device+0x131/0x390 [ 414.591854][T12201] device_add+0x25b5/0x2df0 [ 414.596374][T12201] usb_new_device+0x23e5/0x2fb0 [ 414.601234][T12201] hub_event+0x581d/0x72f0 [ 414.605683][T12201] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 414.611566][T12201] ? led_work+0x720/0x720 [ 414.615885][T12201] ? led_work+0x720/0x720 [ 414.620210][T12201] process_one_work+0x1572/0x1ef0 [ 414.625266][T12201] worker_thread+0x111b/0x2460 [ 414.630040][T12201] kthread+0x4b5/0x4f0 [ 414.634099][T12201] ? process_one_work+0x1ef0/0x1ef0 [ 414.639293][T12201] ? kthread_blkcg+0xf0/0xf0 [ 414.643876][T12201] ret_from_fork+0x35/0x40 [ 414.649634][T12201] Kernel Offset: disabled [ 414.653984][T12201] Rebooting in 86400 seconds..