[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.12' (ECDSA) to the list of known hosts. 2020/07/26 07:18:38 fuzzer started 2020/07/26 07:18:38 dialing manager at 10.128.0.26:40467 2020/07/26 07:18:39 syscalls: 3078 2020/07/26 07:18:39 code coverage: enabled 2020/07/26 07:18:39 comparison tracing: enabled 2020/07/26 07:18:39 extra coverage: enabled 2020/07/26 07:18:39 setuid sandbox: enabled 2020/07/26 07:18:39 namespace sandbox: enabled 2020/07/26 07:18:39 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/26 07:18:39 fault injection: enabled 2020/07/26 07:18:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/26 07:18:39 net packet injection: enabled 2020/07/26 07:18:39 net device setup: enabled 2020/07/26 07:18:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/26 07:18:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/26 07:18:39 USB emulation: enabled 07:20:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xbe, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2716, 0x0, &(0x7f00000000c0)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) syzkaller login: [ 187.459145][ T6842] IPVS: ftp: loaded support on port[0] = 21 07:20:49 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) [ 187.588964][ T6842] chnl_net:caif_netlink_parms(): no params data found [ 187.690907][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.706355][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.732400][ T6842] device bridge_slave_0 entered promiscuous mode [ 187.744986][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.762986][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.783468][ T6842] device bridge_slave_1 entered promiscuous mode [ 187.793619][ T6972] IPVS: ftp: loaded support on port[0] = 21 [ 187.834346][ T6842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.849066][ T6842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.890143][ T6842] team0: Port device team_slave_0 added [ 187.914470][ T6842] team0: Port device team_slave_1 added [ 187.947640][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_0 07:20:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000009c0)={0x0, 0x93000000, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r1, 0xffff}, 0x14}}, 0x0) [ 187.973698][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.002489][ T6842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.049210][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.056840][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.085360][ T6842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.201530][ T6842] device hsr_slave_0 entered promiscuous mode [ 188.244106][ T6842] device hsr_slave_1 entered promiscuous mode [ 188.250963][ T7103] IPVS: ftp: loaded support on port[0] = 21 07:20:50 executing program 3: r0 = mq_open(&(0x7f00000000c0)='0\x00\x00\x00\x00H\x9b\xcc\xc4\xa6` \bw\xfe\xcdZ\xbd\xd6\xaf\xd4n\xb7a\x12\xb0B\xdc\xffs\n=Z \xc7\xf6\xc6\x9c\xcf\x16\x10\xcefHt\x9e$\x90', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f00000003c0)="392e5608ddba436402db3281ff45682e06019c7289f9ce3a7af768600eb25cb18bfb43fcdaf61222de1a4c2cd8f0f1d84d112f98827520b67bec7f00378ccaabbbb610bbb3752b08f9779723b5d031cddbc1d5d9c27f1623f5220e2197f6b9e24adcfae5983a851eefd8e6d6b8df4d6b720900000000000000", 0xfffffffffffffcac, 0x0, &(0x7f0000e0b000)={0x0, 0x1c9c380}) [ 188.341270][ T6972] chnl_net:caif_netlink_parms(): no params data found [ 188.608311][ T7183] IPVS: ftp: loaded support on port[0] = 21 07:20:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) [ 188.656879][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.677893][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.695604][ T6972] device bridge_slave_0 entered promiscuous mode [ 188.740572][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.753829][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.762929][ T6972] device bridge_slave_1 entered promiscuous mode [ 188.817379][ T7103] chnl_net:caif_netlink_parms(): no params data found [ 188.897322][ T6842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.942710][ T6972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.952768][ T7316] IPVS: ftp: loaded support on port[0] = 21 [ 188.963642][ T6842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.022316][ T6972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.050790][ T6842] netdevsim netdevsim0 netdevsim2: renamed from eth2 07:20:51 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) dup2(r2, r0) [ 189.169889][ T6842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.205691][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.218586][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.227631][ T7103] device bridge_slave_0 entered promiscuous mode [ 189.244532][ T7369] IPVS: ftp: loaded support on port[0] = 21 [ 189.248662][ T6972] team0: Port device team_slave_0 added [ 189.266685][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.274055][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.281600][ T7103] device bridge_slave_1 entered promiscuous mode [ 189.308093][ T6972] team0: Port device team_slave_1 added [ 189.335828][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.411725][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.422248][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.429188][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.455940][ T6972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.470713][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.478010][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.504583][ T6972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.540412][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 189.615713][ T6972] device hsr_slave_0 entered promiscuous mode [ 189.652582][ T6972] device hsr_slave_1 entered promiscuous mode [ 189.712080][ T6972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.719822][ T6972] Cannot create hsr debugfs directory [ 189.758418][ T7103] team0: Port device team_slave_0 added [ 189.801295][ T7103] team0: Port device team_slave_1 added [ 189.841788][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.851314][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.860327][ T7183] device bridge_slave_0 entered promiscuous mode [ 189.871399][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.878877][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.886985][ T7183] device bridge_slave_1 entered promiscuous mode [ 189.951231][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.000559][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.010571][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.039659][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.057486][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.104703][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.111648][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.140491][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.164058][ T7183] team0: Port device team_slave_0 added [ 190.170052][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 190.197200][ T7183] team0: Port device team_slave_1 added [ 190.227685][ T7369] chnl_net:caif_netlink_parms(): no params data found [ 190.314360][ T7103] device hsr_slave_0 entered promiscuous mode [ 190.352275][ T7103] device hsr_slave_1 entered promiscuous mode [ 190.402018][ T7103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.409571][ T7103] Cannot create hsr debugfs directory [ 190.467629][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.475738][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.501707][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.516309][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.523632][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.549794][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.642653][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.649747][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.660001][ T7316] device bridge_slave_0 entered promiscuous mode [ 190.670976][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.678160][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.688355][ T7316] device bridge_slave_1 entered promiscuous mode [ 190.765431][ T7183] device hsr_slave_0 entered promiscuous mode [ 190.822449][ T7183] device hsr_slave_1 entered promiscuous mode [ 190.862120][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.869675][ T7183] Cannot create hsr debugfs directory [ 190.890628][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.931133][ T6972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.973608][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.980658][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.989782][ T7369] device bridge_slave_0 entered promiscuous mode [ 190.998783][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.009280][ T6972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.059518][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.066830][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.075969][ T7369] device bridge_slave_1 entered promiscuous mode [ 191.085830][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.095433][ T6972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.136175][ T6972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.210572][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.229101][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.263107][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.271336][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.284856][ T6842] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.307193][ T7316] team0: Port device team_slave_0 added [ 191.354344][ T7369] team0: Port device team_slave_0 added [ 191.361665][ T7316] team0: Port device team_slave_1 added [ 191.388089][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.396754][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.407920][ T2537] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.415144][ T2537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.424742][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.433483][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.441713][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.448792][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.456601][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.465383][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.483981][ T7369] team0: Port device team_slave_1 added [ 191.506868][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.564166][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.573821][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.583419][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.591830][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.600880][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.609637][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.623708][ T7103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.663873][ T7103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.719285][ T7103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.784941][ T7103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.854351][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.861302][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.887316][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.899259][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.907196][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.933580][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.945524][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.955862][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.965027][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.994625][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.001563][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.031127][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.045336][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.054895][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.085386][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.110270][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.135905][ T7183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.175962][ T7183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.223813][ T7183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.294761][ T7183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.355355][ T7316] device hsr_slave_0 entered promiscuous mode [ 192.412460][ T7316] device hsr_slave_1 entered promiscuous mode [ 192.482922][ T7316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.490535][ T7316] Cannot create hsr debugfs directory [ 192.554508][ T7369] device hsr_slave_0 entered promiscuous mode [ 192.613173][ T7369] device hsr_slave_1 entered promiscuous mode [ 192.652799][ T7369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.660341][ T7369] Cannot create hsr debugfs directory [ 192.732581][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.739986][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.797433][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.818562][ T6972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.882812][ T6972] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.905119][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.913953][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.987415][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.996684][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.010505][ T2538] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.017611][ T2538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.025698][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.034787][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.043979][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.061931][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.070507][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.083130][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.090179][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.101154][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.116430][ T7103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.140355][ T6842] device veth0_vlan entered promiscuous mode [ 193.164372][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.173144][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.181426][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.190846][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.199641][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.209480][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.218380][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.226917][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.235375][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.243735][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.251998][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.263628][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.271290][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.283233][ T2538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.308165][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.347806][ T6842] device veth1_vlan entered promiscuous mode [ 193.363044][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.370946][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.384950][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.395543][ T7369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.454903][ T7369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.494075][ T7369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.546869][ T7103] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.557662][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.586162][ T7369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.668764][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.677258][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.688532][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.697600][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.704704][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.713487][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.736458][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.754788][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.765061][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.773972][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.780990][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.789088][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.797194][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.817341][ T6842] device veth0_macvtap entered promiscuous mode [ 193.840458][ T7316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.865213][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.874164][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.883055][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.891482][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.900296][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.908918][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.916016][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.924582][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.933402][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.941967][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.950262][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.957347][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.966169][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.974509][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.004346][ T7316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.054256][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.061666][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.069988][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.079248][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.089281][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.098003][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.106571][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.115627][ T6842] device veth1_macvtap entered promiscuous mode [ 194.154602][ T6972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.167288][ T7316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.226175][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.235122][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.246947][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.255700][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.264811][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.273453][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.281700][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.291006][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.299329][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.307868][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.317291][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.346762][ T7316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.384381][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.394636][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.408852][ T7103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.420298][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.429521][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.439690][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.465567][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.475811][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.485392][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.494409][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.522436][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.536559][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.546434][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.555616][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.565057][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.600443][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.615216][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.650141][ T6972] device veth0_vlan entered promiscuous mode [ 194.667593][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.681551][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.696974][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.705496][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.714368][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.735586][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.765566][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.774277][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.784669][ T6972] device veth1_vlan entered promiscuous mode [ 194.801014][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.965439][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.987609][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.012840][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.021522][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.032186][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.040916][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.052830][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.060599][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.095457][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.139292][ T7103] device veth0_vlan entered promiscuous mode [ 195.163957][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.172651][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.180934][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.189898][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.200422][ T2539] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.207651][ T2539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.241649][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.250707][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.261123][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.269499][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.278227][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.286726][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.295882][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.304394][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.313395][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.321715][ T2539] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.328901][ T2539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.337880][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.346823][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.356025][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.363948][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.375186][ T7183] device veth0_vlan entered promiscuous mode 07:20:57 executing program 0: clone(0x2100980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000400)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9002}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) [ 195.395959][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.407160][ T7103] device veth1_vlan entered promiscuous mode [ 195.418612][ T6972] device veth0_macvtap entered promiscuous mode [ 195.438647][ T6972] device veth1_macvtap entered promiscuous mode [ 195.478133][ T7183] device veth1_vlan entered promiscuous mode [ 195.507108][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.519128][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.533022][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.541188][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.556084][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 07:20:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x0, 0x9a, 0xfffffefd, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9b090b, 0x44bf413f, [], @p_u8=&(0x7f0000000180)}}) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0xb, 0x30, r3, 0x83000000) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6035a66801448402000000000000000000000000000000aafe80000000040000d70a0000000000aa04298a32895dbc35acad3b00008666c90000264e6f240e9b18d667b02d0328cb9a0000080032eb0000000000"], 0x0) sendto$unix(r1, &(0x7f00000001c0)="98395150744b713767cce0c69e2816c5193d4bf37522d7639077e30bc9d469db3f30058badfa14ddbfe3825b9647c6316fab05e121504793eb1cab276ec5ca2d5de5d2c7a8cf5bacc5950230951c7194b3912592fe1f6ae6888d408c15455f078f486630cd1f5692f1170d45f79768a3c45966facdfc0085e463aa10da97cbf21860b7550fcc57dc66", 0x89, 0x4000040, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) [ 195.580531][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.597170][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.608941][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.624590][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.638977][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.689634][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.700745][ T8108] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 195.718868][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.727625][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.747679][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.758525][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.774679][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.796520][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.810782][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.826485][ T6972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.856741][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.879387][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.888883][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.897992][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 07:20:58 executing program 0: r0 = semget$private(0x0, 0x207, 0x0) semtimedop(r0, &(0x7f0000000240)=[{}], 0x1f4, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000c3d364064190100d4f600000001090212000000000904"], 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r4, 0xfffd}, &(0x7f0000000040)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={r7, 0xfffd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={r7, 0x44, "736856d1b73361a63b91a866e643f709f0a55aa6f821e41dd372257aa59d7e2949b4677725d6223b67858b79f7b5018a180cdbaf687e9334bef5ec79f3125b5cf8b699f2"}, &(0x7f0000000080)=0x4c) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={r4, 0x7f, 0xda34, 0x7f, 0xdd31, 0x6, 0x80, 0x10001, {r8, @in6={{0xa, 0x4e22, 0xffff, @ipv4={[], [], @broadcast}, 0x6}}, 0x3, 0x4, 0xffffff81, 0x9, 0x4}}, &(0x7f00000000c0)=0xb0) [ 195.906651][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.915982][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.946354][ T7103] device veth0_macvtap entered promiscuous mode [ 195.958939][ T6972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.970975][ T6972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.988800][ T6972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.005421][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.015548][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.025683][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.035588][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.045249][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.052386][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.068131][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.076732][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.086174][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.093388][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.100956][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.110112][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.119355][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.133642][ T7103] device veth1_macvtap entered promiscuous mode [ 196.158920][ T7183] device veth0_macvtap entered promiscuous mode [ 196.172869][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.180743][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.189138][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.198113][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.207519][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.216733][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.226495][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.235403][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.243576][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.262164][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.273039][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.288772][ T7183] device veth1_macvtap entered promiscuous mode [ 196.295216][ T2537] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 196.311844][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.320244][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.343738][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.372255][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.383351][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.394177][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.404837][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.415773][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.425567][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.433948][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.441366][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.451156][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.459689][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.468658][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.549230][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.559569][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.570593][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.580580][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.593516][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.605576][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.613976][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.624948][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.635401][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.645919][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.658079][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.662079][ T2537] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.668932][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.690253][ T2537] usb 1-1: config 0 has no interfaces? [ 196.691065][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.697319][ T2537] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=f6.d4 [ 196.719457][ T2537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.732372][ T2537] usb 1-1: config 0 descriptor?? [ 196.751790][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.760502][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.785822][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.794801][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.855395][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.864323][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.873192][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.880594][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.890851][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.906057][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.915934][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.929060][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.939207][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.949817][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.961199][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.010786][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 07:20:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0x5, 0xf0}, {0xffffffffffffff0a, 0x19, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x80000006}]}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0xfffff9d3, 0x0, 0x2, 0x1, 0x6000000000, 0x6, 0x8, 0x9, 0xc345, 0x1c3, 0x1f, 0x8, 0xdab, 0x8, 0x2, 0x1, {0xffff, 0xd375}, 0x5, 0x6}}) [ 197.077480][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.090038][ T2539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.231630][ T7369] device veth0_vlan entered promiscuous mode 07:20:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3ff, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x88, 0x2, 0x7, 0xb12e3f9a71aec019, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc926}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000540)={0xffffffffffffffff, 0x3, 0x3, 0x30000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000040000000b000100666c6f77657200004c0002004800030044000100070001006374"], 0x7c}}, 0x0) r6 = socket(0x22, 0x80000, 0xc1) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op={0x35}]}], 0x4924924924924b3, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000700)=""/106) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 197.335553][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.347507][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.432687][ T8137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.443063][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.453112][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.461131][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.471178][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 07:20:59 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)=@ll={0x11, 0x17, 0x0, 0x1, 0x40, 0x6, @random="dff9003c9d6b"}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)="cd1d778e80d556c6b386709a007dba8b8f2977384824a1a65d667e99aa867b949bfa7ed6917445b459545582241a9e032c998ff04412696b88acd1d30917df0173cb2523f394fb09b35cc0", 0x4b}, {&(0x7f0000000100)="7a944904a25f1429c537e7792cdd3b47c8c5de363c1d46df55f7b2d2984923c71e895b0ea950312bd422f3a215d13b163b97eab9ffc4674d2091768279f827fe07a0fa6bbaa0c0a3fe4fc8e809485d461e25faf4e33d817a2f8015ac6e421ac4fd6855313a", 0x65}, {&(0x7f0000000280)="e12341f6e18b3d7b3df4674105ea56fc116e71892658aa55d48465db6a096d2030e8dd80378906729a0c68e8e2cb2179b54a3da6ccba103da0dc7944bf6d839edaaae6695354defa2d10829ab00340f8852927020852c46e7c3f1723e6d17d6a9d9b0de30525915889cf6824b38e030c1e995f1b7e09ca740988c65d3b844c8f6778df0caef4fd77e0f036fce64ffad08395fbc426d4ad0d5a59129f04f4253aa996268c41fbc3e4ab7fff08f216fd6e41490bb650a02c07176b9e660331d23029fa6cf08aea", 0xc6}, {&(0x7f0000000380)="957813c69c7cb16c4ace2fe9bba9eddf52355f43011819ff7226cd0d0c534ce0314fcfb85f3796129a43d0d763f571858baf490b30fce77d38bbd348aac0755fba7378c5386b2b47917182c83057329fa5c757f8e961d0d7900adf3d15253217543fcd51dc9e598d6d9bab6d03f5b8d13fbcaf8b0eee8b7f005835bad3f146d96b327184e7f90495602d6838522a208da924f52af5542a8d5dfe350d66f7585076535cfe1cd8dc19741c376f568f2a17101a44da714516e11a6578d28a7363bbd8ce2e321d5fc9ba43a8e83a172390b27f7106f6c548fb0d21004749e8a326582777892e84c97b015c", 0xe9}, {&(0x7f0000000180)}, {&(0x7f0000000480)="703ba877403b3a9f149faf894ffa26a89cb2661d3c94a517e5824ec173ae04e228162e07040bafe61df5f6a003f3d288ee521e5b8336951423b2cee7d46f72cde02936f12ecc89fccefa1470ae12aabe3764c1ec67511051df300a541d6b71deffbac81dc9f7643f4d3a338753044793c98a5ec71b603781614e1284d7", 0x7d}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="c9757d28e68719d838d386cd1306fc414d5d0a8d1f7b9fe81703bb3fbc287e2af00676e5283bf20014c640584ca353504001bbabaffc331c53ae5b7cf7d0d5538f70d18b907203bbd4c43f37eb3017173907", 0x52}, {&(0x7f00000001c0)="8d1edc91e83fac78b9ce668951a5d22c94cb88e86c96cf0a9d", 0x19}, {&(0x7f0000001580)="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", 0xff}], 0xa, &(0x7f0000001740)=[{0xb0, 0x10e, 0x3, "ea9fcda9b0a8b20634cf9049fb4545cace5720a95a8be133caece3329057dd10aafef0e2c4ad51507ec3bb9b6f647b93e91c887e4b7d20e9f35de7f46400eacaaec14bff7a604cd5f4705a803975808cd3733d5a027b2fbb7f20a93ff13a1c26639dde7f16f6b3d35f57bd71ce13ac13ff4770a4c7d634ec7fe8298039f62fc1e929f6d6b62c734987cd097cf849849092a416babcda9e747b9055c2a3ea6b4d"}, {0x98, 0x113, 0x1077, "b347892423ce09df31bcd9e72c5dc4ca8a1cc9a3aa7f81dd35ebea88bb901dbcda66e2b9e6c460b7c113ad0151005eb966932c653b83715e182f123e5aa9b57d3afc1168a06ec1b7662d70fdb55533abd041ddfef0e166906c556f17a414f27397c1f43adfce645c57af3a51233fa5783d16a021e6907be51b533685c1a871c7420e28"}, {0xf0, 0x100, 0x8000, "1bdd346150a6da231da9b4b47c46548a340b873c17c1ff85aca65e19061725a144494dd353ecf5100fc4c87854f36df14c6c789946fdddac406f755ed59d796623d4274f4a2f3f697d3c36ac1151f3a8bff1d9eb91b74a61234fb461dce2cb5f3cf8bde2602bf2417d0b3e627abfbdaf33dfdb1eadb367d5a4d423b90419e7592f182da041a8440897ac9eecac8a62f852b9a87eb8eb28283d6161b6cd0b6745f626cc07a267dd3afea5ffb08ba60c79d1df767f9a7572a664eca55a71141178a251dc9273919af466a9a5975d3c2f050dbe7e21b4e6e047d516"}, {0x20, 0x118, 0x3, "3e7e9eaa332faee41cbfdc29"}, {0x78, 0x108, 0x2d7c, "dc69613979623e7788dc7dc1d2c2b6f37ab1333c41511e3e9ac044032d609fa8d5f5260ac071a738b3da2eaa50136be70e18a5f4fc4681f2428eb55c8783c5cf5d17768a29c18bfe91ed3919700cdde1b6bd44d7c87bbd8a6630949305b6f4928aa09a369032ab"}], 0x2d0}}, {{&(0x7f0000001a40)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)="6e70388b5f0cb9b1f8cc5a4278fd2dca5d8978347b7676e8fb0542187410e66f1a3c832c87152cc4582714a3d1", 0x2d}, {&(0x7f0000001b00)="559c86e92ebf4a04b1ca87b8701e5d23b7d872208f054d49f6e51f24492305276a1ba9e33500a3a2942ceada01b5429a792522838dc3ba00fa8f298722cb3368be7cc1004f9f154122c8bbd6c4f302de556b47dcaf351c1e958f37a2b5c431887bdc53efc0d0b568ef0963eed102a73a1aa5a4f9d93217066d873557b0231da8e28b930ad8e9171fd3376ac93006d925cdffe7ed2c51eaf58ba8fdae3a8c85772b", 0xa1}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)="f94a07de86", 0x5}, {&(0x7f0000001c40)="ef7953ddff488fbd4a27ba15180eeab1ec98663e1bacdae790eb001ac7b75c3615de510c124b3ce2fe5f8a2d9c1f1c16cb3d3239b1df5279abfe6544f38975dbda0accffd70a18efdd0bcf2d9262a4504fec5772303dd809d5844a00ff3489bfefc5a551e8c5118aa940a98769199b109ea1c317d59a4fc3fd7dd6c03ed2fd8bdb", 0x81}, {&(0x7f0000001d00)="62e84fe8fcd1ac598a1ca9fa4a3125c40f2f1825b352b337a83f0df45ca620de77ce5b075a384994c3792bd03cdcfb6af867554295ef7506b73d2b37d8ed68", 0x3f}, {&(0x7f0000001d40)="d5e12e0b40e5f662639c9ca1c44b3c5615621c142b05560c9604657ef852788ffd500574c7437607aea58359fdaecb09eb2e149a01f8865c50a9489b091fbb85c7e9d46027713fbf5211bf66022f5bc11b51733da26b49544f3cd02a3327831eda", 0x61}], 0x7, &(0x7f0000001e40)=[{0x10, 0x109, 0x401}, {0x78, 0x115, 0x9, "97bd7fc1ef0e67d63e7b5b7cbb7db23667d89bba39f17a25cdbec28c716a2a1f0ed9538706c3438ffd670fea9b36c5bb6b9dbee975a4222ccb890976b889d4c97f0fda4e77e25400bccad719393bffc7e8644474bad95e37e30214c4ce9b03191486"}, {0x30, 0x108, 0x8000, "ceaf49f92c090d36185fb825bf0205e2d64f88154f1cfafeb59f387a0f"}, {0x88, 0x11, 0x64f7e9c4, "5af61be7aba5fd16c2c447d8ff11165cab3eb3282240ffc3e13ff9a218a53f73cd309d08690a8dfbeea1d95d012509c3a4d1a4ae4a8ed92525eef8df8b3a30d8ddc4164241678c2c650bfb098ed821bffb72f91b6d72f71e5cbe3e006d35fa0fbfa3892647ab9e9bdd357f588ca790dbf6e41cdc5f"}, {0x58, 0x10d, 0x10000, "59e1556affa2b0bab69b02c8aec54d87d4da9a5b1c16b875186e33e1abd37afe82d7a2f76ddb9abcaad034b287208c55b6a695d49f9f06b1488c2eca5c00fe210ecaa2ae17d9"}, {0xb8, 0x10c, 0xfa, "2672ec52066cf8e58f232f3161c8dc668c92dcbe74ee4a15cf1ec1c1a062ac291ba1f375f14b2d25b649c1b31c0e3b4d6c4d661e1ee133f8340696014922b4813890a5ef2f3c86d476f025c56810e3e6f335169ca5e3c0b7c7fe1fff77bc62f416343a476af6599941b343bbf938aa89e1d98166c68da79b5ab56c683c18c3ba79a5de042ef0b047511ef0f436eb01c906b272d77517af36cdfdbe3b6ed6031991d5ec2ef798"}, {0x80, 0x108, 0x2, "792d095f2e9754be7d9c4fe7c048b799a1a77cbf08b2e9115c1e1a2202eff31e2eea98ec41ec9c9c8d0e1c330c3af4c3a91bc54b292be9e58dd002d407fbf88a37b037375d8672379a95a09b7c5a9eca4855e57eb26d6f9d0cf8f895fa053fa1115191fa2c59f3ffa9d3"}, {0x58, 0x118, 0x2, "5c32d8c0baf24b8c4aaad864b3ef6a7284cb99a5080b4a7e7df32774896b144e836256eed1933e7a045ee7821d3ba9ba75e58ed1f9d3cda4a0cf68ec04c1e56096d2edceeddf5ed8"}, {0xd0, 0x103, 0x0, "125497f6537b3609d3fb64232b245a5cd95e4a5f2de2c33233aa651ea3f4c6f238884763354da0749f29eb46b235b9b510514f733c32089f740b839c63e71d9872e902ae4d7e5ffc809db407062e841d90344ab8cd27c4845ffadb0834a92414aef39f3540da1d75e90f8ba1e1b648ff2a9d0ac3082bf3b0c41a0b54b960285fab41713461ddcbeb17d5ea4e44c56d607e479eadf5c1e1d53cf33548f7963868097266babd451dcfdfdafc2d684a6f45c827e155a72d2b1b4856"}], 0x3f8}}, {{&(0x7f0000002240)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80, &(0x7f00000033c0)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="cb29e2d83dc14acd0cfb0af5a7e5317fa23273a4b0be3da9ec677358723f36439bc2488da910cda500e19e8d48a0101ce6807f1260e91b805c96bfe2760e3c410f029bc4c611e458ec7fcd23ca30ccb47349c312acc698232b1c6d17586673cbc855bb239ba6cab91aeabf7a4f2f57b944f7538b41eac0d27cf8a2fbf70eb063c2577c08df179359623d1c88a88ef05613efd35e582ed292a88af7d57dbeb628085c388f0253bac19a3bf31d5eb93e5a75f4cee38eeb6f2ee8a676ed3d637003463e9c0e3801ecef254c77b892d0aa55e3d5b8bde17c292d8c0e", 0xda}], 0x2, &(0x7f0000003400)=[{0xf8, 0x6, 0x10000, "063c7e31b824a50c74ed69c472e7e86000a97984855f15779cc1a7c9bdc9ccdc19273f93a51e639c3155c584f41655a463c810eb4afe09fe32a1b8ffdee9bd54aceb256cf177b33342a3f2bbb3f7dc0d986a67d47e0c99da2588c2a1a4c3f24832a18438bef96afc4947cce51c4344d6e65bde811913c88c78a1dced40c9ab5b028f16ea53b3c7b9e68552a7994e1c02745e1c4fa55dda11bde939c35607f9ee64bf2397950c53a26b89c3cf628947fa26b2b72aef6aa332222e155cfadb9b7c659c882594de53ef12828d98df1cdcd81692cbcc393f129583497d1696d024ceb9c5101614"}], 0xf8}}], 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_modinfo={0x2a}}) [ 197.542492][ T7369] device veth1_vlan entered promiscuous mode [ 197.570426][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.604258][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.623067][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 07:20:59 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = open(0x0, 0x62242, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400000, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000540)={{0x0, 0x0, 0x80, {0x0, 0x1000}}, "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", "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"}) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x20, 0x9, 0x80, 0x5, 0x0, 0xffff, 0x1, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xad79, 0xf89}, 0x0, 0x0, 0x0, 0x6, 0xfffffffeffffffff, 0x2, 0x5}, 0x0, 0x0, r0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffd) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x11a1e4) setgid(0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000003c0)) r6 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x7400, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010001fff811405000000000000000000", @ANYRES32=0x0, @ANYBLOB="003f0000000000002c00258009000100626f6e64000000001c000280080003000900000008000a006c0000000801000000000000628a5c9728087d1f0e709cebadd9b76f62521d05cca2b8fbf46a6459c35a89d5ac721dd5e49ea866bbfac855f4b18577fc97f5324ead3e3c8f41504c51900bb061914af9be58a4de3b6358f6e1648f4a6f602fb4a913fa17ad5ef2add9af51c1e5f192239465a6650130c1e6e1613cf249f9d3ce"], 0x4c}}, 0x0) [ 197.651158][ T7316] device veth0_vlan entered promiscuous mode [ 197.687355][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.705646][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 07:20:59 executing program 2: prctl$PR_GET_PDEATHSIG(0x25, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) 07:20:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffff}}]}}]}, 0x50}}, 0x0) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000100)={0x8, 'ip6erspan0\x00', {'batadv0\x00'}, 0x4}) [ 197.748355][ T7316] device veth1_vlan entered promiscuous mode [ 197.758000][ C1] hrtimer: interrupt took 25257 ns [ 197.788882][ T7369] device veth0_macvtap entered promiscuous mode [ 197.818917][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.830255][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.844778][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.884752][ T7369] device veth1_macvtap entered promiscuous mode 07:21:00 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 197.903976][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.918814][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.938349][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.021468][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.043886][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.069455][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.097361][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.118615][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.131654][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.148848][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.160919][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.177805][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.189328][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.211200][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.227304][ T7316] device veth0_macvtap entered promiscuous mode [ 198.247532][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.256589][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.269252][ T2537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.293489][ T7316] device veth1_macvtap entered promiscuous mode [ 198.315790][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.357865][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.398387][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.430361][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.455506][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.473449][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.528537][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.560456][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.584484][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.617542][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.625574][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.637009][ T2487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.689670][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.700372][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.710749][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.739970][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.756047][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.777466][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.787354][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.804378][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.817320][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.831033][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.863811][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.922386][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.941246][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.973672][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.993308][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.996771][ T2487] usb 1-1: USB disconnect, device number 2 [ 199.048570][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.060357][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.070637][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.083756][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.094784][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.105751][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.116798][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.131527][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.149669][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.251795][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.260840][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.307377][ T8187] IPVS: ftp: loaded support on port[0] = 21 [ 199.584258][ T8187] IPVS: ftp: loaded support on port[0] = 21 [ 199.852006][ T21] tipc: TX() has been purged, node left! 07:21:02 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x1, 0x4, 0x2}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) 07:21:02 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:02 executing program 1: pipe(&(0x7f0000000200)) mknod(0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x305}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x4e23, @dev}, {0x2, 0x0, @broadcast}, 0x2a, 0x0, 0x2, 0x46a, 0x2}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@rc={0x1f, @fixed={[], 0x12}, 0x5}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x800, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd, 0x7fff, 0xfffffffe, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) 07:21:02 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d690fcbe8b000000086d040e000000090400000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8000, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = dup(r2) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x1, 0x81, 0x2, 0x20, 0x0, 0x9, 0xa00, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000002c0), 0x7}, 0x10200, 0x8, 0x2, 0x1, 0x31, 0x5, 0x5}, r7, 0xc, r1, 0x1) getpeername$unix(r6, &(0x7f0000000240), &(0x7f00000001c0)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 07:21:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r0, @ANYBLOB="d361c60ce8e8522fd449fe38319402222c5d3bac0af5582e5e334d64da9a9286", @ANYRES16=r1, @ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES16]) write$binfmt_elf64(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1a0) fallocate(r1, 0x100000003, 0xe, 0x80019c) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000300)=""/90, 0x5a}) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400030}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r4, 0x800, 0x0, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x3d3, 0xf0c, 0x80000000, 0x6}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 07:21:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x12d, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = getpid() tkill(r4, 0x2f) 07:21:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xff0b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x34600}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE2={0xffffff25, 0x2, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044004}, 0x8004) [ 200.210769][ T29] audit: type=1804 audit(1595748062.405:2): pid=8247 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/4/file0/bus" dev="sda1" ino=15751 res=1 [ 200.391745][ T17] usb 4-1: new high-speed USB device number 2 using dummy_hcd 07:21:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000e00000000000014001a80100002800cf001800800100000000000"], 0x34}}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000100)={'bond_slave_0\x00', 0x3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x0, 0xffffffff, r1, 0x0, &(0x7f0000000040)={0x9a0912, 0x0, [], @p_u8=&(0x7f0000000000)=0xff}}) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RRENAME(r3, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r4) fcntl$setflags(r4, 0x2, 0x1) [ 200.618812][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:21:02 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 200.692344][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 200.711808][ T17] usb 4-1: device descriptor read/64, error 18 [ 200.747865][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 07:21:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r6) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000013002b0300"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000050021"], 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r8, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x480d4}, 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 07:21:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x1d7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="080000007a0e824d664097f6b21eb00f9bcfcb7d31a659277d64185330387ce562f167d0959de2623e39540a01039c41f9c100fb1f1c2c5438c1497a5e26894d5d35cd7cfc89bdbdfda69bf0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x24) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e23, @multicast2}}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_sctp(0x2, 0x801, 0x84) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r5) r6 = dup3(r0, r5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, 0x1401, 0x4, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004a041}, 0x4) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000000)={0x103daadfffa69a94, {0x5c3, 0xfc000000, 0x1, 0xcf}, {0x8, 0x7, 0x5, 0x80}, {0x7}}) sendmsg(r4, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b2", 0x8}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 07:21:03 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x301, 0x0, 0x0, {0x15}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@private2={0xfc, 0x2, [], 0x1}, @local, @dev={0xfe, 0x80, [], 0x39}, 0x6, 0x4000, 0x8, 0x100, 0x6, 0x80105, r7}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:21:03 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 201.098285][ T29] audit: type=1804 audit(1595748063.295:3): pid=8293 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/4/file0/file0/bus" dev="sda1" ino=15753 res=1 [ 201.119459][ T17] usb 4-1: device descriptor read/64, error 18 07:21:03 executing program 0: perf_event_open(&(0x7f0000001340)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x44a00, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 07:21:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010088090000040003800c000200100000000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2d66c213689dab2153d4bbe4dd18c3aba73776307e84b8a6e0caafa95123b8df394e40e3502115240a31e37288cfbaf25a399dc718c20289f251d1682bc5709a54c7134224a765ad24d3f0ca9f73a795f4cd391c9a67d8fadb9c3e09df7deaff86fedd0eeb06bd68bd1cb34a0f3d9c8f55b8972b3e590861b8d6357b524db8d759e454ffc67417247d033d47c5445f4a11392f51d85f0eaaf85681c6714157dfe90b2fd10f2874325ab595499568164ff5819ac37c228298935ebded7716a1f1ae3d306e7ad81d1e6dde19b7e4c5f874a8d5068dfbb2f211b19ccc82d2a73e0b9349a64fc50c88d343cb9f2048a5e226f8cc"], 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x18) [ 201.356826][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.425047][ T17] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 201.473871][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.721698][ T17] usb 4-1: device descriptor read/64, error 18 [ 202.111800][ T17] usb 4-1: device descriptor read/64, error 18 [ 202.232077][ T17] usb usb4-port1: attempt power cycle [ 202.961800][ T17] usb 4-1: new high-speed USB device number 4 using dummy_hcd 07:21:05 executing program 4: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r3, 0x301, 0x0, 0x0, {0x15}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x4, 0x1, 0x8, 0x3, 0x8, @loopback, @private1={0xfc, 0x1, [], 0x1}, 0x1, 0x7800, 0x0, 0x7}}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xfffd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) 07:21:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:05 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0xc5b, 0x0, 0x0, 0x4], 0x10000}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r4 = gettid() sched_getscheduler(r4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 07:21:05 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x2c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:21:05 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x181100, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x204, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1ff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x20004}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1ff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x400}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3000}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}}]}, 0x204}}, 0x840) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) [ 203.111697][ T17] usb 4-1: device descriptor read/8, error -71 [ 203.122336][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.132697][ T21] tipc: TX() has been purged, node left! [ 203.180109][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:21:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r3) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x0, 0xfff}) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/48, 0x30) write$evdev(r0, &(0x7f0000000040), 0x373) syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x1ff, 0x80801) [ 203.342044][ T17] usb 4-1: device descriptor read/8, error -71 07:21:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) [ 203.537856][ T8338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:21:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:06 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:06 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair(0x11, 0xa, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 07:21:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r3) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x0, 0xfff}) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/48, 0x30) write$evdev(r0, &(0x7f0000000040), 0x373) syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x1ff, 0x80801) 07:21:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r5, 0xfffd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x4, 0xfff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getpid() connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r6, 0x0, 0x80001d00c0d0) 07:21:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r3) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x0, 0xfff}) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/48, 0x30) write$evdev(r0, &(0x7f0000000040), 0x373) syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x1ff, 0x80801) [ 204.460740][ T8389] syz-executor.4 (8389) used greatest stack depth: 23656 bytes left 07:21:07 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x1000, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0xc5b, 0x0, 0x0, 0x4], 0x10000}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r4 = gettid() sched_getscheduler(r4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 07:21:07 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r3) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x0, 0xfff}) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/48, 0x30) write$evdev(r0, &(0x7f0000000040), 0x373) syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x1ff, 0x80801) 07:21:07 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r5, 0xfffd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x4, 0xfff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getpid() connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r6, 0x0, 0x80001d00c0d0) 07:21:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r3) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x0, 0xfff}) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/48, 0x30) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:07 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r5, 0xfffd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x4, 0xfff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getpid() connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r6, 0x0, 0x80001d00c0d0) 07:21:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r3) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x0, 0xfff}) write$evdev(r0, &(0x7f0000000040), 0x373) [ 205.787082][ T8431] debugfs: Directory 'loop0' with parent 'block' already present! 07:21:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:08 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904000000a8ff5500e7755724e1003baf71f64ff499340fd3ae5632958b887ac92028971bf8312a8e4c5bee2761caecdf080f7d4d0250d835a8b067a517a4ded74ef4f594bcef127f705d47105996907003b87af78a5089c5feddd91a1f9daba9a27d4d7437ed7daa00020000000000001e6c98c7d1a7f2bf239fa7a060052cb785e5b07d8c93960e6b909d3f82390e16152d45a1caf213afe748306450"], 0x0) 07:21:08 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 07:21:08 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:08 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local}) r3 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_LOCK(r3, 0xb) 07:21:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r3) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:08 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 206.852285][ T2487] usb 6-1: new high-speed USB device number 2 using dummy_hcd 07:21:09 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 07:21:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:09 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 207.314042][ T2487] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 207.337507][ T2487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 207.349810][ T2487] usb 6-1: SerialNumber: syz [ 207.367271][ T2487] usb 6-1: config 0 descriptor?? [ 207.414678][ T2487] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 207.430567][ T2487] usb 6-1: Detected SIO [ 207.463688][ T2487] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 207.488020][ T8510] debugfs: Directory 'loop0' with parent 'block' already present! [ 207.619972][ T2525] usb 6-1: USB disconnect, device number 2 [ 207.669952][ T2525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 207.723692][ T2525] ftdi_sio 6-1:0.0: device disconnected [ 208.401571][ T2487] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 208.841763][ T2487] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 208.850887][ T2487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 208.859439][ T2487] usb 6-1: SerialNumber: syz [ 208.868250][ T2487] usb 6-1: config 0 descriptor?? [ 208.914843][ T2487] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 208.935053][ T2487] usb 6-1: Detected SIO [ 208.948802][ T2487] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 07:21:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 07:21:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:11 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 07:21:11 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:11 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904000000a8ff5500e7755724e1003baf71f64ff499340fd3ae5632958b887ac92028971bf8312a8e4c5bee2761caecdf080f7d4d0250d835a8b067a517a4ded74ef4f594bcef127f705d47105996907003b87af78a5089c5feddd91a1f9daba9a27d4d7437ed7daa00020000000000001e6c98c7d1a7f2bf239fa7a060052cb785e5b07d8c93960e6b909d3f82390e16152d45a1caf213afe748306450"], 0x0) [ 209.121836][ T2487] usb 6-1: USB disconnect, device number 3 [ 209.133312][ T2487] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 209.183487][ T2487] ftdi_sio 6-1:0.0: device disconnected 07:21:11 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:11 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:11 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) write$evdev(r0, &(0x7f0000000040), 0x373) [ 209.611525][ T2487] usb 6-1: new high-speed USB device number 4 using dummy_hcd 07:21:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:11 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:11 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019060100000006005b0000000000355a000000000000000001e000000100000000800000000000000000000000020000000a0001000000d2b40c6b229c27632300ea5de82a389c2e6f4dc8842ff635000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) 07:21:12 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) write$evdev(r0, &(0x7f0000000040), 0x373) [ 210.074731][ T2487] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 210.094970][ T2487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 210.141875][ T2487] usb 6-1: SerialNumber: syz [ 210.164870][ T2487] usb 6-1: config 0 descriptor?? [ 210.217775][ T2487] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 210.242646][ T2487] usb 6-1: Detected SIO [ 210.260078][ T2487] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 210.468520][ T2487] usb 6-1: USB disconnect, device number 4 [ 210.478366][ T2487] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 210.488522][ T2487] ftdi_sio 6-1:0.0: device disconnected 07:21:13 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904000000a8ff5500e7755724e1003baf71f64ff499340fd3ae5632958b887ac92028971bf8312a8e4c5bee2761caecdf080f7d4d0250d835a8b067a517a4ded74ef4f594bcef127f705d47105996907003b87af78a5089c5feddd91a1f9daba9a27d4d7437ed7daa00020000000000001e6c98c7d1a7f2bf239fa7a060052cb785e5b07d8c93960e6b909d3f82390e16152d45a1caf213afe748306450"], 0x0) 07:21:13 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:13 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:13 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:13 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 211.351874][ T2527] usb 6-1: new high-speed USB device number 5 using dummy_hcd 07:21:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:13 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 211.693774][ T8685] debugfs: Directory 'loop0' with parent 'block' already present! [ 211.863797][ T2527] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 211.881484][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 211.889635][ T2527] usb 6-1: SerialNumber: syz [ 211.912704][ T2527] usb 6-1: config 0 descriptor?? [ 211.952555][ T2527] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 211.960791][ T2527] usb 6-1: Detected SIO [ 211.982275][ T2527] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.203138][ T2487] usb 6-1: USB disconnect, device number 5 [ 212.221719][ T2487] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 212.233081][ T2487] ftdi_sio 6-1:0.0: device disconnected 07:21:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:14 executing program 4: r0 = getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x80000000, 0x2, 0xff, 0x9, 0xfe01, 0xfff}, &(0x7f0000000700)=0x20) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100008400}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000fb9b96c6a58a688ff2437bf787f99e21e109501de22208ccfddbada4d27e0e7cc855f842abf1f426f583a9b7992ce38f46bee16daf90346c96e85477e765443947702be851716b39438748404445057e71d1bf6b358b4628567cc9741b7ba3d3b6466da9cab0510492f9d3d49d0aab2862b990d567269c46309d994421170d0b42f46aec34f3262fd8cb4b02b7b625b577bb053d4d5b5c5a85e66335438a07c71060b3132790", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf250f0000000eef00006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100060000f3070001007063690011000200303030303a30303a31302e300000000008004b00000000000600110002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8990}, 0x4000000) capget(&(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, [], 0x35}, @in6=@empty, 0x4e22, 0x8, 0x4e20, 0x0, 0x0, 0x20, 0xc0, 0x67}, {0x188, 0x8, 0x0, 0x5, 0x1ff, 0x1e, 0x7}, {0x10000, 0xfffffffffffffffa, 0x9, 0x947}, 0x5, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x0, 0x1, 0xfffffe01}}, 0xe8) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x97a5, @ipv4={[], [], @loopback}, 0xd07}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}}, @in6={0xa, 0x0, 0x0, @empty}, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}], 0x80) socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:21:14 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64, @ANYBLOB="00800000f1ffffff000000000a0001006e6574656d000000800002000000000000000000000000000000000000004000000000000c000a00140000000000000014000600440000000200000000000100000800000c00030000000000010100002c000c000000000000000000970900007cd8000000000000fb21df2dfdfffffffffffff702000000000000000100f0ffe14bd92afee10be14b5a9a7036c499c70a39a836167c52a4d450866a"], 0xb0}}, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:14 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904000000a8ff5500e7755724e1003baf71f64ff499340fd3ae5632958b887ac92028971bf8312a8e4c5bee2761caecdf080f7d4d0250d835a8b067a517a4ded74ef4f594bcef127f705d47105996907003b87af78a5089c5feddd91a1f9daba9a27d4d7437ed7daa00020000000000001e6c98c7d1a7f2bf239fa7a060052cb785e5b07d8c93960e6b909d3f82390e16152d45a1caf213afe748306450"], 0x0) [ 212.872994][ T8721] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:21:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:15 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:15 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 213.081814][ T2534] usb 6-1: new high-speed USB device number 6 using dummy_hcd 07:21:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:15 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:15 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 213.521537][ T2534] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 213.544738][ T2534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 213.566226][ T2534] usb 6-1: SerialNumber: syz [ 213.578500][ T2534] usb 6-1: config 0 descriptor?? [ 213.632487][ T2534] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 213.640567][ T2534] usb 6-1: Detected SIO [ 213.691563][ T2534] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 213.914508][ T2525] usb 6-1: USB disconnect, device number 6 [ 213.930124][ T2525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 214.002623][ T2525] ftdi_sio 6-1:0.0: device disconnected 07:21:16 executing program 4: r0 = getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x80000000, 0x2, 0xff, 0x9, 0xfe01, 0xfff}, &(0x7f0000000700)=0x20) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100008400}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000fb9b96c6a58a688ff2437bf787f99e21e109501de22208ccfddbada4d27e0e7cc855f842abf1f426f583a9b7992ce38f46bee16daf90346c96e85477e765443947702be851716b39438748404445057e71d1bf6b358b4628567cc9741b7ba3d3b6466da9cab0510492f9d3d49d0aab2862b990d567269c46309d994421170d0b42f46aec34f3262fd8cb4b02b7b625b577bb053d4d5b5c5a85e66335438a07c71060b3132790", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf250f0000000eef00006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100060000f3070001007063690011000200303030303a30303a31302e300000000008004b00000000000600110002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8990}, 0x4000000) capget(&(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, [], 0x35}, @in6=@empty, 0x4e22, 0x8, 0x4e20, 0x0, 0x0, 0x20, 0xc0, 0x67}, {0x188, 0x8, 0x0, 0x5, 0x1ff, 0x1e, 0x7}, {0x10000, 0xfffffffffffffffa, 0x9, 0x947}, 0x5, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x0, 0x1, 0xfffffe01}}, 0xe8) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x97a5, @ipv4={[], [], @loopback}, 0xd07}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}}, @in6={0xa, 0x0, 0x0, @empty}, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}], 0x80) socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:21:16 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:16 executing program 5: 07:21:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:16 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:16 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:16 executing program 5: 07:21:16 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:17 executing program 4: r0 = getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x80000000, 0x2, 0xff, 0x9, 0xfe01, 0xfff}, &(0x7f0000000700)=0x20) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100008400}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000fb9b96c6a58a688ff2437bf787f99e21e109501de22208ccfddbada4d27e0e7cc855f842abf1f426f583a9b7992ce38f46bee16daf90346c96e85477e765443947702be851716b39438748404445057e71d1bf6b358b4628567cc9741b7ba3d3b6466da9cab0510492f9d3d49d0aab2862b990d567269c46309d994421170d0b42f46aec34f3262fd8cb4b02b7b625b577bb053d4d5b5c5a85e66335438a07c71060b3132790", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf250f0000000eef00006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100060000f3070001007063690011000200303030303a30303a31302e300000000008004b00000000000600110002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8990}, 0x4000000) capget(&(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, [], 0x35}, @in6=@empty, 0x4e22, 0x8, 0x4e20, 0x0, 0x0, 0x20, 0xc0, 0x67}, {0x188, 0x8, 0x0, 0x5, 0x1ff, 0x1e, 0x7}, {0x10000, 0xfffffffffffffffa, 0x9, 0x947}, 0x5, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x0, 0x1, 0xfffffe01}}, 0xe8) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x97a5, @ipv4={[], [], @loopback}, 0xd07}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}}, @in6={0xa, 0x0, 0x0, @empty}, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}], 0x80) socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:21:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:17 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:17 executing program 5: 07:21:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:17 executing program 5: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 07:21:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:17 executing program 4: r0 = getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x80000000, 0x2, 0xff, 0x9, 0xfe01, 0xfff}, &(0x7f0000000700)=0x20) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100008400}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000fb9b96c6a58a688ff2437bf787f99e21e109501de22208ccfddbada4d27e0e7cc855f842abf1f426f583a9b7992ce38f46bee16daf90346c96e85477e765443947702be851716b39438748404445057e71d1bf6b358b4628567cc9741b7ba3d3b6466da9cab0510492f9d3d49d0aab2862b990d567269c46309d994421170d0b42f46aec34f3262fd8cb4b02b7b625b577bb053d4d5b5c5a85e66335438a07c71060b3132790", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf250f0000000eef00006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100060000f3070001007063690011000200303030303a30303a31302e300000000008004b00000000000600110002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8990}, 0x4000000) capget(&(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, [], 0x35}, @in6=@empty, 0x4e22, 0x8, 0x4e20, 0x0, 0x0, 0x20, 0xc0, 0x67}, {0x188, 0x8, 0x0, 0x5, 0x1ff, 0x1e, 0x7}, {0x10000, 0xfffffffffffffffa, 0x9, 0x947}, 0x5, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x0, 0x1, 0xfffffe01}}, 0xe8) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x97a5, @ipv4={[], [], @loopback}, 0xd07}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}}, @in6={0xa, 0x0, 0x0, @empty}, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}], 0x80) socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:21:17 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:17 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373) 07:21:17 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:17 executing program 5: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 07:21:18 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373) 07:21:18 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:18 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:18 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:18 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373) 07:21:18 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:18 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:18 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:18 executing program 3: r0 = syz_open_dev$evdev(0x0, 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:18 executing program 5: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 07:21:18 executing program 3: r0 = syz_open_dev$evdev(0x0, 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:18 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:18 executing program 3: r0 = syz_open_dev$evdev(0x0, 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:19 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:19 executing program 4: r0 = getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x80000000, 0x2, 0xff, 0x9, 0xfe01, 0xfff}, &(0x7f0000000700)=0x20) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100008400}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000fb9b96c6a58a688ff2437bf787f99e21e109501de22208ccfddbada4d27e0e7cc855f842abf1f426f583a9b7992ce38f46bee16daf90346c96e85477e765443947702be851716b39438748404445057e71d1bf6b358b4628567cc9741b7ba3d3b6466da9cab0510492f9d3d49d0aab2862b990d567269c46309d994421170d0b42f46aec34f3262fd8cb4b02b7b625b577bb053d4d5b5c5a85e66335438a07c71060b3132790", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf250f0000000eef00006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000500000006001100060000f3070001007063690011000200303030303a30303a31302e300000000008004b00000000000600110002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8990}, 0x4000000) capget(&(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, [], 0x35}, @in6=@empty, 0x4e22, 0x8, 0x4e20, 0x0, 0x0, 0x20, 0xc0, 0x67}, {0x188, 0x8, 0x0, 0x5, 0x1ff, 0x1e, 0x7}, {0x10000, 0xfffffffffffffffa, 0x9, 0x947}, 0x5, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x0, 0x1, 0xfffffe01}}, 0xe8) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x97a5, @ipv4={[], [], @loopback}, 0xd07}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}}, @in6={0xa, 0x0, 0x0, @empty}, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}], 0x80) socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:21:19 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:19 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 216.977095][ T8949] debugfs: Directory 'loop0' with parent 'block' already present! 07:21:19 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:19 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 07:21:19 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:19 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:19 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 217.410781][ T2534] usb 6-1: new high-speed USB device number 7 using dummy_hcd 07:21:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 217.720856][ T2534] usb 6-1: device descriptor read/64, error 18 07:21:20 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:20 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 217.916613][ T8993] debugfs: Directory 'loop0' with parent 'block' already present! [ 218.140708][ T2534] usb 6-1: device descriptor read/64, error 18 [ 218.410514][ T2534] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 218.720428][ T2534] usb 6-1: device descriptor read/64, error 18 [ 219.140346][ T2534] usb 6-1: device descriptor read/64, error 18 [ 219.260459][ T2534] usb usb6-port1: attempt power cycle [ 219.980169][ T2534] usb 6-1: new high-speed USB device number 9 using dummy_hcd 07:21:22 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 07:21:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x4000, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:22 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:22 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:22 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 220.162373][ T2534] usb 6-1: device descriptor read/8, error -71 07:21:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:22 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 220.380180][ T2534] usb 6-1: device descriptor read/8, error -71 07:21:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:22 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 220.891140][ T2534] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 221.080260][ T2534] usb 6-1: device descriptor read/8, error -61 [ 221.360000][ T2534] usb 6-1: device descriptor read/8, error -61 [ 221.490200][ T2534] usb usb6-port1: unable to enumerate USB device 07:21:25 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 07:21:25 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:25 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:25 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) semget$private(0x0, 0x20000000102, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:25 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:25 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x400, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 223.402201][ T9091] debugfs: Directory 'loop0' with parent 'block' already present! 07:21:25 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:25 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:25 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) semget$private(0x0, 0x20000000102, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 223.669572][ T2525] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 223.939632][ T2525] usb 6-1: device descriptor read/64, error 18 [ 224.368345][ T2525] usb 6-1: device descriptor read/64, error 18 [ 224.639607][ T2525] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 224.919412][ T2525] usb 6-1: device descriptor read/64, error 18 [ 225.309375][ T2525] usb 6-1: device descriptor read/64, error 18 [ 225.430796][ T2525] usb usb6-port1: attempt power cycle [ 226.139230][ T2525] usb 6-1: new high-speed USB device number 13 using dummy_hcd 07:21:28 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 07:21:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:21:28 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) semget$private(0x0, 0x20000000102, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:28 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0x9}], 0x1) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 226.328385][ T2525] usb 6-1: device descriptor read/8, error -71 07:21:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:21:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:21:28 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 226.549393][ T2525] usb 6-1: device descriptor read/8, error -71 07:21:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:29 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 227.039176][ T2525] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 227.219152][ T2525] usb 6-1: device descriptor read/8, error -61 [ 227.498368][ T2525] usb 6-1: device descriptor read/8, error -61 [ 227.620323][ T2525] usb usb6-port1: unable to enumerate USB device 07:21:31 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 07:21:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x2, 0x1ff}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RMKDIR(r4, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x10, 0x0, 0x7}}, 0x14) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f00000005c0)=""/96, 0x60}], 0x6) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="8ece49d0209a92d5dca6f9d2bcd3d3946b82e73dc146e05f5c7fb39c460c434d569b1327ec201a5000637bd1f1a806f37bb04a64f362a6bd50d4270614e60001aded82463238d7bd330f107d724712421383cf922dbe9dd4e2a9a62a7cf2833f5c7d63d672ae4988f26e571c9d5a9df27514ff0da0173676386f0f76668713464560f8021bed678c5255fd95febeebc58c9e615a75e9d44a73fb28b37c561e009071eb8b49c27ff6c47f1d1252832ff7043a3acc0c6a2bfed610ab4424f7f11ea7473d5aac5efdd31cce", @ANYRES32=r1, @ANYRESOCT=r3], 0x1c}, 0x1, 0xf0ffffff00000000, 0x0, 0x2000800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="2e00000025000511d25a802a8c63940d0424fc8037153e370a000c8000000000d1bd00dfa08dbc3fd8d1f4bd7700c920c078b82abed56b1267229718aa888d19c3802d1152", 0x45}, {&(0x7f0000000780)="2cde864fcf2f8217047fd7c506cd34886df058093b3cdb50ac5931533dd1165b13948b4cfdefca5465d356544eb08457e01b2fbf0145c734b7b85e49395fae3f70ffaf87ae5b564348f3bfba2fce8106", 0x50}], 0x2}, 0x0) 07:21:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {0x47, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:31 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:21:31 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 229.459249][ T9189] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x0, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:31 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:21:31 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:32 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:32 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 229.868648][ T2527] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 230.148759][ T2527] usb 6-1: device descriptor read/64, error 18 [ 230.538535][ T2527] usb 6-1: device descriptor read/64, error 18 [ 230.808502][ T2527] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 231.078521][ T2527] usb 6-1: device descriptor read/64, error 18 [ 231.468414][ T2527] usb 6-1: device descriptor read/64, error 18 [ 231.589493][ T2527] usb usb6-port1: attempt power cycle [ 232.298275][ T2527] usb 6-1: new high-speed USB device number 17 using dummy_hcd 07:21:34 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 07:21:34 executing program 0: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x0, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:34 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:34 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:34 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 232.488298][ T2527] usb 6-1: device descriptor read/8, error -71 07:21:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x0, 0x2}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:34 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:34 executing program 0: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 232.698320][ T2527] usb 6-1: device descriptor read/8, error -71 07:21:35 executing program 0: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:35 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 233.198165][ T2527] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 233.378162][ T2527] usb 6-1: device descriptor read/8, error -61 [ 233.648184][ T2527] usb 6-1: device descriptor read/8, error -61 [ 233.768758][ T2527] usb usb6-port1: unable to enumerate USB device 07:21:37 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904000000a8ff5500e7755724e1003baf71f64ff499340fd3ae5632958b887ac92028971bf8312a8e4c5bee2761caecdf080f7d4d0250d835a8b067a517a4ded74e"], 0x0) 07:21:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:37 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:37 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47}, @ramp={0xfffe, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0x0, 0x0, {0x0, 0xfffb, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:38 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 236.067883][ T17] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 236.507756][ T17] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 236.516800][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 236.547786][ T17] usb 6-1: SerialNumber: syz [ 236.553451][ T17] usb 6-1: config 0 descriptor?? [ 236.608837][ T17] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 236.617016][ T17] usb 6-1: Detected SIO [ 236.638968][ T17] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 236.817085][ T2525] usb 6-1: USB disconnect, device number 19 [ 236.854751][ T2525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 236.890108][ T2525] ftdi_sio 6-1:0.0: device disconnected 07:21:39 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0) 07:21:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp={0x0, 0x0, {0x0, 0x0, 0x6271}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:39 executing program 1: socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:39 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 237.687619][ T2527] usb 6-1: new high-speed USB device number 20 using dummy_hcd 07:21:39 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 237.987481][ T2527] usb 6-1: device descriptor read/64, error 18 [ 238.387534][ T2527] usb 6-1: device descriptor read/64, error 18 [ 238.677556][ T2527] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 238.967346][ T2527] usb 6-1: device descriptor read/64, error 18 [ 239.357324][ T2527] usb 6-1: device descriptor read/64, error 18 [ 239.478403][ T2527] usb usb6-port1: attempt power cycle [ 240.187211][ T2527] usb 6-1: new high-speed USB device number 22 using dummy_hcd 07:21:42 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0) 07:21:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:42 executing program 4: socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:42 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 240.357378][ T2527] usb 6-1: device descriptor read/8, error -61 07:21:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 240.588224][ T2527] usb 6-1: device descriptor read/8, error -71 07:21:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:42 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 241.087102][ T2527] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 241.267415][ T2527] usb 6-1: device descriptor read/8, error -61 [ 241.564637][ T2527] usb 6-1: device descriptor read/8, error -61 [ 241.697146][ T2527] usb usb6-port1: unable to enumerate USB device 07:21:45 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0) 07:21:45 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x2, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:45 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:45 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:45 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:46 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:46 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x0, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 243.977178][ T2527] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 244.126012][ T9510] debugfs: Directory 'loop0' with parent 'block' already present! [ 244.256867][ T2527] usb 6-1: device descriptor read/64, error 18 [ 244.646752][ T2527] usb 6-1: device descriptor read/64, error 18 [ 244.932720][ T2527] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 245.222228][ T2527] usb 6-1: device descriptor read/64, error 18 [ 245.636608][ T2527] usb 6-1: device descriptor read/64, error 18 [ 245.756778][ T2527] usb usb6-port1: attempt power cycle [ 246.466437][ T2527] usb 6-1: new high-speed USB device number 26 using dummy_hcd 07:21:48 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904000000a8ff5500e7755724e1003baf71f64f"], 0x0) 07:21:48 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x0, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:48 executing program 4: getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000340)=0x44) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, r3, 0x1, 0x0, 0x0, {0x45}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc}, {0xc}}]}, 0x50}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c01006f8d20c6f7a7410f89131891c43032b2d70192f93a3375b35ed2d7c25796614377856ae2a6f229b1188dcbaa028cffbe87f7181a2a303bd2bd7f0f1d3b21553b87e086e62678373b7343e6c0b5c66ab335b6642f7966e16a44997b698abbfc1e7e69d0280011c720ad8913768a301a095abcc6e55956f6d7c2820000", @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000100000006001100c300000008001300040000000500140000000000080001007063690011000200303030303a30303a31302e300000000008000b0000010000060011003bf50000080013000008000005000101000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0006000000060011000101000008001300ff0f00000500140000000000080001007063690011000200303030303a30303a31302e300000000008000b0000100000060011007f00000008001300ff00000005001400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000600110000040000080013001600000005001400000000000e0001006e657464657673696d0000000f0002006e65746465ec0e696d30000008000b005e220100060011008100000008001300398666230500140000000000"], 0x18c}, 0x1, 0x0, 0x0, 0x20040090}, 0x10000000) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000300)=0x4, 0x4) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x2, 0x39) syz_emit_ethernet(0x4b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb05fc0000000086dd6a478d1c048006ff00000000000000000000000000000000fe8000000000000000000000000000bb1a1c00000000000080e4aa159df996b57da7b44f98c241e4925e1f7e362799c4104dc82381ed9650dbf0e9d0048d4cd01750b2a4c348cd0f25628ba34bf97f96b1378a84c27a02268b18afe7d5a55234818196ffe9462b0f80899c985bdf742ef7a82f644c3f9070fd4b8161a6b47b38aca8e822a2ba458659d408caf030413a5770ab61511a587f9a66e5de804cf5114221847b5e255dc9b6c1ffaea91ad364821db1fb791cf7df2221f6e2e94695689ded244781e4d8b873d92c7fe2c7c08208c3aaa509d0edf3816e012458c84bcce756b7c5e8f2041ab4c05a9ab204fb44e2b48420158b9525acc2cbc558cf0000880500000000000005020002000100000100c204000000060401ffc910fe80000000000000000000000000002b05020000000000000000006216000000000000040108c910200100000000000000000000000000000740000000000e05060001000000000000000b00000000000000040000000000000004000000000000000300000000000000010000800000000005000000000000003f10bf06e784b2691ed2593ec2dc7371bd54010500000000000740000000030e050500cb000000000000000180000000000000050000000000000007000000000000000700000000000000010000000100000001000000000000000001000000005d10010600000000fc000000000000000000000000000000fe80000000000000000000000000001900000000000000000000000000000000ff010000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000aafe88000000000000000000000000010120010000000000000000000000000001870602cc0000000000000000000000000000000000000001fc0100000000000000000000000000fd000000000000000000000000000000018406001f00000000ff020000000000000000000000000001fc000000000000000000000000000000ff0100000000000000000000000000018804040281000101fc020000000000000000000000000001fe8000000000000000000000000000bb7308020400000000fe8000000000000000000000000000bbff020000000000000000000000000001ff020000000000000000000000000001fc0200000000000000000000000000004e244e22", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"], 0x0) [ 246.616709][ T2527] usb 6-1: device descriptor read/8, error -71 07:21:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x0, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffeffff, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000140)=""/190, &(0x7f00000000c0)=0xbe) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x799}, 0x8) close(r0) 07:21:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$evdev(r0, &(0x7f0000000040), 0x373) [ 246.783136][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:21:49 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 246.837923][ T2527] usb 6-1: device descriptor read/8, error -71 07:21:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x0, 0xfb7d, 0x1c5a000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg$can_raw(r4, &(0x7f00000002c0)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000140)=""/237, 0xed}], 0x2}, 0x2000) fallocate(r0, 0x100000003, 0x0, 0x28120001) [ 247.332237][ T2527] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 247.640555][ T2527] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 247.655269][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 247.665212][ T2527] usb 6-1: SerialNumber: syz [ 247.674015][ T2527] usb 6-1: config 0 descriptor?? [ 247.717367][ T2527] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 247.725549][ T2527] usb 6-1: Detected SIO [ 247.731559][ T2527] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 247.920190][ T2534] usb 6-1: USB disconnect, device number 27 [ 247.929585][ T2534] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 247.939736][ T2534] ftdi_sio 6-1:0.0: device disconnected 07:21:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:50 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:50 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904000000a8ff5500e7755724e1003baf71f64f"], 0x0) 07:21:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r4, 0xfffd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={r4, 0x7, "136a620f5db909"}, &(0x7f0000000080)=0xf) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ff, 0x0) socket$inet(0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r5) write$binfmt_misc(r5, &(0x7f0000000000)={'syz0', "b79673e346f83e626175"}, 0xe) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00006, 0x1, 0x0, 0x0, 0x2000000000002) socket(0x0, 0x0, 0x0) 07:21:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:50 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373) [ 248.578951][ T9628] mmap: syz-executor.4 (9628) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 07:21:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:50 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:50 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373) 07:21:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 248.856169][ T2525] usb 6-1: new high-speed USB device number 28 using dummy_hcd 07:21:51 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:51 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373) [ 249.316174][ T2525] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 249.325230][ T2525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 249.366046][ T2525] usb 6-1: SerialNumber: syz [ 249.373045][ T2525] usb 6-1: config 0 descriptor?? [ 249.437243][ T2525] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 249.446729][ T2525] usb 6-1: Detected SIO [ 249.463711][ T2525] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 249.642924][ T2487] usb 6-1: USB disconnect, device number 28 [ 249.662539][ T2487] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 249.682582][ T2487] ftdi_sio 6-1:0.0: device disconnected 07:21:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000081ce23a6f04a90d0a73c59bdd56494940"], 0x48}, 0x1, 0x0, 0x0, 0x1051}, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:52 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, 0x0, 0x0) 07:21:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000100)={0xf131, 0xf, [{0xa}, {0xf, 0x1}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x9}, {0x5, 0x1}, {0xd, 0x1}, {0xa, 0x1}, {0xc}, {}, {0x2, 0x1}, {0xa}]}) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) r7 = socket(0x11, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc) 07:21:52 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0) 07:21:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, 0x0, 0x0) 07:21:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:52 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000100)={0xf131, 0xf, [{0xa}, {0xf, 0x1}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x9}, {0x5, 0x1}, {0xd, 0x1}, {0xa, 0x1}, {0xc}, {}, {0x2, 0x1}, {0xa}]}) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) r7 = socket(0x11, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc) 07:21:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, 0x0, 0x0) 07:21:52 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 250.586005][ T23] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 250.598700][ T9748] debugfs: Directory 'loop0' with parent 'block' already present! 07:21:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:53 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 250.876024][ T23] usb 6-1: device descriptor read/64, error 18 [ 251.285817][ T23] usb 6-1: device descriptor read/64, error 18 [ 251.575925][ T23] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 251.865768][ T23] usb 6-1: device descriptor read/64, error 18 [ 252.255717][ T23] usb 6-1: device descriptor read/64, error 18 [ 252.376741][ T23] usb usb6-port1: attempt power cycle [ 253.095657][ T23] usb 6-1: new high-speed USB device number 31 using dummy_hcd 07:21:55 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0) 07:21:55 executing program 3 (fault-call:5 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000100)={0xf131, 0xf, [{0xa}, {0xf, 0x1}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x9}, {0x5, 0x1}, {0xd, 0x1}, {0xa, 0x1}, {0xc}, {}, {0x2, 0x1}, {0xa}]}) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) r7 = socket(0x11, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc) 07:21:55 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 253.275859][ T23] usb 6-1: device descriptor read/8, error -61 07:21:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:21:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 253.485818][ T23] usb 6-1: device descriptor read/8, error -71 07:21:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000100)={0xf131, 0xf, [{0xa}, {0xf, 0x1}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x9}, {0x5, 0x1}, {0xd, 0x1}, {0xa, 0x1}, {0xc}, {}, {0x2, 0x1}, {0xa}]}) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) r7 = socket(0x11, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc) 07:21:55 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x18) [ 253.975636][ T23] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 254.148107][ T23] usb 6-1: device descriptor read/8, error -61 [ 254.455672][ T23] usb 6-1: device descriptor read/8, error -61 [ 254.576330][ T23] usb usb6-port1: unable to enumerate USB device 07:21:58 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0) 07:21:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000100)={0xf131, 0xf, [{0xa}, {0xf, 0x1}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x9}, {0x5, 0x1}, {0xd, 0x1}, {0xa, 0x1}, {0xc}, {}, {0x2, 0x1}, {0xa}]}) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) socket(0x11, 0xa, 0x0) 07:21:58 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x30) 07:21:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x48) 07:21:58 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:21:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:21:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000100)={0xf131, 0xf, [{0xa}, {0xf, 0x1}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {0x9}, {0x5, 0x1}, {0xd, 0x1}, {0xa, 0x1}, {0xc}, {}, {0x2, 0x1}, {0xa}]}) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 256.845403][ T17] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 257.145199][ T17] usb 6-1: device descriptor read/64, error 18 [ 257.585174][ T17] usb 6-1: device descriptor read/64, error 18 [ 257.865072][ T17] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 258.135073][ T17] usb 6-1: device descriptor read/64, error 18 [ 258.525039][ T17] usb 6-1: device descriptor read/64, error 18 [ 258.645101][ T17] usb usb6-port1: attempt power cycle [ 259.354962][ T17] usb 6-1: new high-speed USB device number 35 using dummy_hcd 07:22:01 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e301090212000100"], 0x0) 07:22:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x60) 07:22:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:01 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 259.485104][ T17] usb 6-1: device descriptor read/8, error -71 07:22:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:22:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r5) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x78) 07:22:01 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 259.694994][ T17] usb 6-1: device descriptor read/8, error -71 [ 260.204841][ T17] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 260.415006][ T17] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.425184][ T17] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 260.505066][ T17] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 260.514138][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 260.524264][ T17] usb 6-1: SerialNumber: syz [ 260.530328][ T17] usb 6-1: config 0 descriptor?? [ 260.778354][ T23] usb 6-1: USB disconnect, device number 36 07:22:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:22:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:22:03 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:03 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e301090212000100"], 0x0) 07:22:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x90) 07:22:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:22:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:22:03 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0xa8) 07:22:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 07:22:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:03 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:03 executing program 2 (fault-call:8 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 261.654952][ T17] usb 6-1: new high-speed USB device number 37 using dummy_hcd 07:22:03 executing program 0 (fault-call:10 fault-nth:0): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 261.736561][T10013] FAULT_INJECTION: forcing a failure. [ 261.736561][T10013] name failslab, interval 1, probability 0, space 0, times 1 [ 261.800821][T10017] FAULT_INJECTION: forcing a failure. [ 261.800821][T10017] name failslab, interval 1, probability 0, space 0, times 1 [ 261.807483][T10013] CPU: 1 PID: 10013 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 261.822173][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.832222][T10013] Call Trace: [ 261.835521][T10013] dump_stack+0x18f/0x20d [ 261.839854][T10013] should_fail.cold+0x5/0x14 [ 261.844460][T10013] ? tomoyo_realpath_from_path+0xc3/0x620 [ 261.850181][T10013] should_failslab+0x5/0xf [ 261.854595][T10013] __kmalloc+0x27d/0x340 [ 261.858841][T10013] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 261.864393][T10013] tomoyo_realpath_from_path+0xc3/0x620 [ 261.869942][T10013] ? tomoyo_profile+0x42/0x50 [ 261.874636][T10013] tomoyo_path_number_perm+0x1cb/0x4d0 [ 261.880092][T10013] ? tomoyo_path_number_perm+0x183/0x4d0 [ 261.885727][T10013] ? tomoyo_execute_permission+0x470/0x470 [ 261.891549][T10013] ? lock_acquire+0x1f1/0xad0 [ 261.896227][T10013] ? delayed_put_pid+0x30/0x30 [ 261.900992][T10013] ? find_held_lock+0x2d/0x110 [ 261.905851][T10013] ? __mutex_unlock_slowpath+0xe2/0x610 [ 261.911391][T10013] ? lock_is_held_type+0xb0/0xe0 [ 261.916327][T10013] ? __fget_files+0x294/0x400 [ 261.921080][T10013] security_file_ioctl+0x50/0xb0 [ 261.926011][T10013] ksys_ioctl+0x50/0x180 [ 261.930249][T10013] __x64_sys_ioctl+0x6f/0xb0 [ 261.934828][T10013] ? lockdep_hardirqs_on+0x6a/0xe0 [ 261.939936][T10013] do_syscall_64+0x60/0xe0 [ 261.944385][T10013] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 261.950269][T10013] RIP: 0033:0x45c369 [ 261.954151][T10013] Code: Bad RIP value. [ 261.958213][T10013] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.966622][T10013] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 261.974587][T10013] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 261.982556][T10013] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 261.990522][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.998490][T10013] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 262.006472][T10017] CPU: 0 PID: 10017 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 262.015150][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.025217][T10017] Call Trace: [ 262.028507][T10017] dump_stack+0x18f/0x20d [ 262.032842][T10017] should_fail.cold+0x5/0x14 [ 262.037436][T10017] ? tomoyo_realpath_from_path+0xc3/0x620 [ 262.043156][T10017] should_failslab+0x5/0xf [ 262.047574][T10017] __kmalloc+0x27d/0x340 [ 262.051820][T10017] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 262.057372][T10017] tomoyo_realpath_from_path+0xc3/0x620 [ 262.062925][T10017] ? tomoyo_profile+0x42/0x50 [ 262.067070][T10013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.067599][T10017] tomoyo_path_number_perm+0x1cb/0x4d0 [ 262.067620][T10017] ? tomoyo_path_number_perm+0x183/0x4d0 [ 262.085324][T10017] ? tomoyo_execute_permission+0x470/0x470 [ 262.091129][T10017] ? lock_acquire+0x1f1/0xad0 [ 262.095804][T10017] ? delayed_put_pid+0x30/0x30 [ 262.100574][T10017] ? find_held_lock+0x2d/0x110 [ 262.105445][T10017] ? __mutex_unlock_slowpath+0xe2/0x610 [ 262.110987][T10017] ? lock_is_held_type+0xb0/0xe0 [ 262.115929][T10017] ? __fget_files+0x294/0x400 [ 262.120609][T10017] security_file_ioctl+0x50/0xb0 [ 262.125562][T10017] ksys_ioctl+0x50/0x180 [ 262.129817][T10017] __x64_sys_ioctl+0x6f/0xb0 [ 262.134487][T10017] ? lockdep_hardirqs_on+0x6a/0xe0 [ 262.139578][T10017] do_syscall_64+0x60/0xe0 [ 262.143976][T10017] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 262.149844][T10017] RIP: 0033:0x45c369 [ 262.153706][T10017] Code: Bad RIP value. [ 262.157746][T10017] RSP: 002b:00007fe07293fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.166161][T10017] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 262.174124][T10017] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 262.182069][T10017] RBP: 00007fe07293fca0 R08: 0000000000000000 R09: 0000000000000000 [ 262.190015][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.195625][ T17] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.197962][T10017] R13: 0000000000c9fb6f R14: 00007fe0729409c0 R15: 000000000078bf0c [ 262.201669][T10017] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.223916][ T17] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.304739][ T17] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 262.320959][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 262.344692][ T17] usb 6-1: SerialNumber: syz [ 262.350209][ T17] usb 6-1: config 0 descriptor?? [ 262.623065][ T17] usb 6-1: USB disconnect, device number 37 07:22:05 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e301090212000100"], 0x0) 07:22:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:05 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0xc0) 07:22:05 executing program 2 (fault-call:8 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:05 executing program 0 (fault-call:10 fault-nth:1): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 263.191603][T10043] FAULT_INJECTION: forcing a failure. [ 263.191603][T10043] name failslab, interval 1, probability 0, space 0, times 0 [ 263.216226][T10043] CPU: 0 PID: 10043 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 263.224914][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.234961][T10043] Call Trace: [ 263.238255][T10043] dump_stack+0x18f/0x20d [ 263.240005][T10055] FAULT_INJECTION: forcing a failure. [ 263.240005][T10055] name failslab, interval 1, probability 0, space 0, times 0 [ 263.242598][T10043] should_fail.cold+0x5/0x14 [ 263.242621][T10043] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.242641][T10043] should_failslab+0x5/0xf [ 263.269521][T10043] __kmalloc+0x27d/0x340 [ 263.273770][T10043] ? tomoyo_realpath_from_path+0xc3/0x620 [ 263.279496][T10043] tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.284714][T10043] ? tomoyo_realpath_from_path+0xc3/0x620 [ 263.290432][T10043] tomoyo_encode+0x28/0x50 [ 263.294838][T10043] tomoyo_realpath_from_path+0x186/0x620 [ 263.300474][T10043] tomoyo_path_number_perm+0x1cb/0x4d0 [ 263.305936][T10043] ? tomoyo_path_number_perm+0x183/0x4d0 [ 263.311572][T10043] ? tomoyo_execute_permission+0x470/0x470 [ 263.317381][T10043] ? lock_acquire+0x1f1/0xad0 [ 263.322056][T10043] ? delayed_put_pid+0x30/0x30 [ 263.326820][T10043] ? find_held_lock+0x2d/0x110 [ 263.331601][T10043] ? __mutex_unlock_slowpath+0xe2/0x610 [ 263.337136][T10043] ? lock_is_held_type+0xb0/0xe0 [ 263.342082][T10043] ? __fget_files+0x294/0x400 [ 263.346752][T10043] security_file_ioctl+0x50/0xb0 [ 263.351674][T10043] ksys_ioctl+0x50/0x180 [ 263.355916][T10043] __x64_sys_ioctl+0x6f/0xb0 [ 263.360485][T10043] ? lockdep_hardirqs_on+0x6a/0xe0 [ 263.365579][T10043] do_syscall_64+0x60/0xe0 [ 263.369988][T10043] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 263.375868][T10043] RIP: 0033:0x45c369 [ 263.379738][T10043] Code: Bad RIP value. [ 263.383785][T10043] RSP: 002b:00007fe07293fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.392183][T10043] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 263.400137][T10043] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 263.408096][T10043] RBP: 00007fe07293fca0 R08: 0000000000000000 R09: 0000000000000000 [ 263.416049][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.424001][T10043] R13: 0000000000c9fb6f R14: 00007fe0729409c0 R15: 000000000078bf0c [ 263.431982][T10055] CPU: 1 PID: 10055 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 263.441086][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.451133][T10055] Call Trace: [ 263.454425][T10055] dump_stack+0x18f/0x20d [ 263.458762][T10055] should_fail.cold+0x5/0x14 [ 263.459517][T10043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.463350][T10055] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.463367][T10055] should_failslab+0x5/0xf [ 263.463383][T10055] __kmalloc+0x27d/0x340 [ 263.463404][T10055] ? tomoyo_realpath_from_path+0xc3/0x620 [ 263.489732][T10055] tomoyo_encode2.part.0+0xe9/0x3a0 [ 263.494935][T10055] ? tomoyo_realpath_from_path+0xc3/0x620 [ 263.500783][T10055] tomoyo_encode+0x28/0x50 [ 263.505186][T10055] tomoyo_realpath_from_path+0x186/0x620 [ 263.510802][T10055] tomoyo_path_number_perm+0x1cb/0x4d0 [ 263.516246][T10055] ? tomoyo_path_number_perm+0x183/0x4d0 [ 263.521856][T10055] ? tomoyo_execute_permission+0x470/0x470 [ 263.527658][T10055] ? __lockdep_free_key_range+0x110/0x110 [ 263.533366][T10055] ? __mutex_unlock_slowpath+0xe2/0x610 [ 263.538885][T10055] ? lock_is_held_type+0xb0/0xe0 [ 263.543806][T10055] ? __fget_files+0x294/0x400 [ 263.548567][T10055] security_file_ioctl+0x50/0xb0 [ 263.553490][T10055] ksys_ioctl+0x50/0x180 [ 263.557732][T10055] __x64_sys_ioctl+0x6f/0xb0 [ 263.562299][T10055] ? lockdep_hardirqs_on+0x6a/0xe0 [ 263.567486][T10055] do_syscall_64+0x60/0xe0 [ 263.571881][T10055] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 263.577752][T10055] RIP: 0033:0x45c369 [ 263.581629][T10055] Code: Bad RIP value. [ 263.584528][ T2528] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 263.585675][T10055] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.585691][T10055] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 263.585700][T10055] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 263.585708][T10055] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 263.585724][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.633442][T10055] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac 07:22:05 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0xd8) [ 263.648447][T10055] ERROR: Out of memory at tomoyo_realpath_from_path. 07:22:06 executing program 2 (fault-call:8 fault-nth:2): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:06 executing program 0 (fault-call:10 fault-nth:2): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:06 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 263.946696][ T2528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.964141][T10078] FAULT_INJECTION: forcing a failure. [ 263.964141][T10078] name failslab, interval 1, probability 0, space 0, times 0 [ 263.978738][ T2528] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.991036][T10078] CPU: 0 PID: 10078 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 263.999721][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.009768][T10078] Call Trace: [ 264.013076][T10078] dump_stack+0x18f/0x20d [ 264.017424][T10078] should_fail.cold+0x5/0x14 [ 264.022037][T10078] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 264.027411][T10078] should_failslab+0x5/0xf [ 264.031830][T10078] __kmalloc+0x27d/0x340 [ 264.036098][T10078] ? tomoyo_realpath_from_path+0xc3/0x620 [ 264.041837][T10078] tomoyo_encode2.part.0+0xe9/0x3a0 [ 264.047037][T10078] ? tomoyo_realpath_from_path+0xc3/0x620 [ 264.052749][T10078] tomoyo_encode+0x28/0x50 [ 264.057146][T10078] tomoyo_realpath_from_path+0x186/0x620 [ 264.062850][T10078] tomoyo_path_number_perm+0x1cb/0x4d0 [ 264.068285][T10078] ? tomoyo_path_number_perm+0x183/0x4d0 [ 264.073894][T10078] ? tomoyo_execute_permission+0x470/0x470 [ 264.079683][T10078] ? lock_acquire+0x1f1/0xad0 [ 264.084358][T10078] ? delayed_put_pid+0x30/0x30 [ 264.089243][T10078] ? find_held_lock+0x2d/0x110 [ 264.094036][T10078] ? __mutex_unlock_slowpath+0xe2/0x610 [ 264.099571][T10078] ? lock_is_held_type+0xb0/0xe0 [ 264.104530][T10078] ? __fget_files+0x294/0x400 [ 264.109185][T10078] security_file_ioctl+0x50/0xb0 [ 264.114105][T10078] ksys_ioctl+0x50/0x180 [ 264.118328][T10078] __x64_sys_ioctl+0x6f/0xb0 [ 264.122908][T10078] ? lockdep_hardirqs_on+0x6a/0xe0 [ 264.128011][T10078] do_syscall_64+0x60/0xe0 [ 264.132411][T10078] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 264.138283][T10078] RIP: 0033:0x45c369 [ 264.142157][T10078] Code: Bad RIP value. [ 264.146210][T10078] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.154592][T10078] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 264.162535][T10078] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 264.170479][T10078] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 264.178431][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.186442][T10078] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 264.208607][T10078] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.218387][T10084] debugfs: Directory 'loop0' with parent 'block' already present! [ 264.284652][ T2528] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 264.302681][ T2528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 264.312391][ T2528] usb 6-1: SerialNumber: syz [ 264.319303][ T2528] usb 6-1: config 0 descriptor?? [ 264.567724][ T2487] usb 6-1: USB disconnect, device number 38 07:22:07 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904000000a8ff5500"], 0x0) 07:22:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0xf0) 07:22:07 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:07 executing program 2 (fault-call:8 fault-nth:3): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x0) 07:22:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x10, 0x0) 07:22:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 265.207071][T10110] FAULT_INJECTION: forcing a failure. [ 265.207071][T10110] name failslab, interval 1, probability 0, space 0, times 0 [ 265.268621][T10110] CPU: 1 PID: 10110 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 265.277307][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.287356][T10110] Call Trace: [ 265.290653][T10110] dump_stack+0x18f/0x20d [ 265.294992][T10110] should_fail.cold+0x5/0x14 [ 265.299589][T10110] should_failslab+0x5/0xf [ 265.304009][T10110] kmem_cache_alloc_trace+0x240/0x2d0 [ 265.309380][T10110] ? loop_queue_rq+0x590/0x590 [ 265.314144][T10110] loop_add+0x4e/0x8b0 07:22:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x108) [ 265.318218][T10110] loop_control_ioctl+0x16c/0x480 [ 265.323242][T10110] ? loop_lookup+0x1d0/0x1d0 [ 265.327828][T10110] ? __fget_files+0x294/0x400 [ 265.332513][T10110] ? loop_lookup+0x1d0/0x1d0 [ 265.337101][T10110] ksys_ioctl+0x11a/0x180 [ 265.341438][T10110] __x64_sys_ioctl+0x6f/0xb0 [ 265.346022][T10110] ? lockdep_hardirqs_on+0x6a/0xe0 [ 265.351123][T10110] do_syscall_64+0x60/0xe0 [ 265.355528][T10110] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 265.361441][T10110] RIP: 0033:0x45c369 07:22:07 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 265.365324][T10110] Code: Bad RIP value. [ 265.369374][T10110] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.377762][T10110] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 265.385718][T10110] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 265.393678][T10110] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 265.401625][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 265.409572][T10110] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:07 executing program 2 (fault-call:8 fault-nth:4): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 265.467147][ T2528] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 265.558015][T10139] FAULT_INJECTION: forcing a failure. [ 265.558015][T10139] name failslab, interval 1, probability 0, space 0, times 0 [ 265.571093][T10139] CPU: 0 PID: 10139 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 265.579763][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.589810][T10139] Call Trace: [ 265.593108][T10139] dump_stack+0x18f/0x20d [ 265.597444][T10139] should_fail.cold+0x5/0x14 [ 265.602041][T10139] should_failslab+0x5/0xf 07:22:07 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 265.606466][T10139] kmem_cache_alloc_node_trace+0x27d/0x400 [ 265.612275][T10139] __kmalloc_node+0x38/0x60 [ 265.616781][T10139] blk_mq_alloc_tag_set+0x400/0xcd0 [ 265.621975][T10139] ? trace_kmalloc+0xfd/0x130 [ 265.626654][T10139] loop_add+0x26d/0x8b0 [ 265.630814][T10139] loop_control_ioctl+0x16c/0x480 [ 265.635839][T10139] ? loop_lookup+0x1d0/0x1d0 [ 265.640428][T10139] ? __fget_files+0x294/0x400 [ 265.645112][T10139] ? loop_lookup+0x1d0/0x1d0 [ 265.649690][T10139] ksys_ioctl+0x11a/0x180 [ 265.653995][T10139] __x64_sys_ioctl+0x6f/0xb0 [ 265.658561][T10139] ? lockdep_hardirqs_on+0x6a/0xe0 [ 265.663782][T10139] do_syscall_64+0x60/0xe0 [ 265.668193][T10139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 265.674055][T10139] RIP: 0033:0x45c369 [ 265.677918][T10139] Code: Bad RIP value. [ 265.681955][T10139] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.690346][T10139] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 265.698329][T10139] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 265.706272][T10139] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 265.714221][T10139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 265.722166][T10139] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 266.054396][ T2528] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 266.063430][ T2528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 266.076707][ T2528] usb 6-1: SerialNumber: syz [ 266.087851][ T2528] usb 6-1: config 0 descriptor?? [ 266.129263][ T2528] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 266.137855][ T2528] usb 6-1: Detected SIO [ 266.143141][ T2528] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 266.327101][ T2527] usb 6-1: USB disconnect, device number 39 [ 266.335848][ T2527] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 266.346153][ T2527] ftdi_sio 6-1:0.0: device disconnected 07:22:09 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e30109021200010000"], 0x0) 07:22:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c01, 0x0) 07:22:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:09 executing program 2 (fault-call:8 fault-nth:5): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x120) 07:22:09 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 266.895123][T10172] FAULT_INJECTION: forcing a failure. [ 266.895123][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 266.932980][T10172] CPU: 0 PID: 10172 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 266.942366][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.942386][T10172] Call Trace: [ 266.942403][T10172] dump_stack+0x18f/0x20d 07:22:09 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 266.942416][T10172] should_fail.cold+0x5/0x14 07:22:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:09 executing program 2 (fault-call:8 fault-nth:6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) [ 266.942434][T10172] should_failslab+0x5/0xf [ 266.942447][T10172] kmem_cache_alloc_node_trace+0x27d/0x400 07:22:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x138) [ 266.942467][T10172] __kmalloc_node+0x38/0x60 [ 266.942481][T10172] blk_mq_alloc_tag_set+0x400/0xcd0 [ 266.942490][T10172] ? trace_kmalloc+0xfd/0x130 [ 266.942505][T10172] loop_add+0x26d/0x8b0 [ 266.942521][T10172] loop_control_ioctl+0x16c/0x480 [ 266.942533][T10172] ? loop_lookup+0x1d0/0x1d0 [ 266.942547][T10172] ? __fget_files+0x294/0x400 [ 266.942562][T10172] ? loop_lookup+0x1d0/0x1d0 [ 266.942571][T10172] ksys_ioctl+0x11a/0x180 [ 266.942582][T10172] __x64_sys_ioctl+0x6f/0xb0 [ 266.942597][T10172] ? lockdep_hardirqs_on+0x6a/0xe0 [ 266.942607][T10172] do_syscall_64+0x60/0xe0 [ 266.942618][T10172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.942626][T10172] RIP: 0033:0x45c369 [ 266.942630][T10172] Code: Bad RIP value. [ 266.942638][T10172] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.942647][T10172] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 266.942653][T10172] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 266.942658][T10172] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 266.942663][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 266.942669][T10172] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 267.152484][T10199] FAULT_INJECTION: forcing a failure. [ 267.152484][T10199] name failslab, interval 1, probability 0, space 0, times 0 [ 267.184220][ T2487] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 267.226361][T10199] CPU: 1 PID: 10199 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 07:22:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c03, 0x0) [ 267.284373][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.284379][T10199] Call Trace: [ 267.284400][T10199] dump_stack+0x18f/0x20d [ 267.284421][T10199] should_fail.cold+0x5/0x14 [ 267.284442][T10199] should_failslab+0x5/0xf [ 267.284460][T10199] kmem_cache_alloc_node_trace+0x27d/0x400 [ 267.284480][T10199] blk_mq_init_tags+0x6a/0x2b0 [ 267.284501][T10199] blk_mq_alloc_rq_map+0x81/0x200 [ 267.284522][T10199] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 267.284544][T10199] blk_mq_alloc_tag_set+0x751/0xcd0 [ 267.284570][T10199] loop_add+0x26d/0x8b0 [ 267.284590][T10199] loop_control_ioctl+0x16c/0x480 [ 267.284607][T10199] ? loop_lookup+0x1d0/0x1d0 [ 267.284622][T10199] ? __fget_files+0x294/0x400 [ 267.284646][T10199] ? loop_lookup+0x1d0/0x1d0 [ 267.284661][T10199] ksys_ioctl+0x11a/0x180 [ 267.284678][T10199] __x64_sys_ioctl+0x6f/0xb0 [ 267.284692][T10199] ? lockdep_hardirqs_on+0x6a/0xe0 [ 267.284709][T10199] do_syscall_64+0x60/0xe0 [ 267.284726][T10199] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 267.284738][T10199] RIP: 0033:0x45c369 [ 267.284743][T10199] Code: Bad RIP value. [ 267.284751][T10199] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.284765][T10199] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 267.284780][T10199] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 267.284789][T10199] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 267.284798][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 267.284808][T10199] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 267.336820][T10199] blk-mq: reduced tag depth (128 -> 64) [ 267.806474][ T2487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.822359][ T2487] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.914364][ T2487] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 267.930190][ T2487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 267.951405][ T2487] usb 6-1: SerialNumber: syz [ 267.960940][ T2487] usb 6-1: config 0 descriptor?? [ 268.209432][ T2487] usb 6-1: USB disconnect, device number 40 07:22:10 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e30109021200010000"], 0x0) 07:22:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:10 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:10 executing program 2 (fault-call:8 fault-nth:7): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x150) 07:22:10 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c04, 0x0) 07:22:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 268.826781][T10236] FAULT_INJECTION: forcing a failure. [ 268.826781][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 268.862172][T10236] CPU: 0 PID: 10236 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 07:22:11 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 268.870853][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.880901][T10236] Call Trace: [ 268.884192][T10236] dump_stack+0x18f/0x20d [ 268.888528][T10236] should_fail.cold+0x5/0x14 [ 268.893133][T10236] should_failslab+0x5/0xf [ 268.897550][T10236] kmem_cache_alloc_node_trace+0x27d/0x400 [ 268.903364][T10236] __kmalloc_node+0x38/0x60 [ 268.907870][T10236] sbitmap_init_node+0x28e/0x4f0 [ 268.912809][T10236] ? mark_held_locks+0x9f/0xe0 [ 268.917580][T10236] sbitmap_queue_init_node+0x39/0x720 [ 268.922959][T10236] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 268.928507][T10236] ? kmem_cache_alloc_node_trace+0x3b0/0x400 [ 268.934491][T10236] blk_mq_init_tags+0x10d/0x2b0 [ 268.939346][T10236] blk_mq_alloc_rq_map+0x81/0x200 [ 268.944377][T10236] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 268.950361][T10236] blk_mq_alloc_tag_set+0x751/0xcd0 [ 268.955567][T10236] loop_add+0x26d/0x8b0 [ 268.959712][T10236] loop_control_ioctl+0x16c/0x480 [ 268.964728][T10236] ? loop_lookup+0x1d0/0x1d0 [ 268.969300][T10236] ? __fget_files+0x294/0x400 [ 268.973966][T10236] ? loop_lookup+0x1d0/0x1d0 [ 268.978530][T10236] ksys_ioctl+0x11a/0x180 [ 268.982836][T10236] __x64_sys_ioctl+0x6f/0xb0 [ 268.987400][T10236] ? lockdep_hardirqs_on+0x6a/0xe0 [ 268.992488][T10236] do_syscall_64+0x60/0xe0 [ 268.996881][T10236] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 269.002747][T10236] RIP: 0033:0x45c369 [ 269.006612][T10236] Code: Bad RIP value. [ 269.010654][T10236] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.019123][T10236] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 07:22:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x168) 07:22:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c05, 0x0) [ 269.027074][T10236] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 269.035022][T10236] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 269.042965][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 269.050913][T10236] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 269.070412][T10236] blk-mq: reduced tag depth (128 -> 64) 07:22:11 executing program 2 (fault-call:8 fault-nth:8): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 269.244137][ T23] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 269.295563][T10276] FAULT_INJECTION: forcing a failure. [ 269.295563][T10276] name failslab, interval 1, probability 0, space 0, times 0 [ 269.325071][T10276] CPU: 1 PID: 10276 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 269.333748][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.343799][T10276] Call Trace: [ 269.347095][T10276] dump_stack+0x18f/0x20d [ 269.351432][T10276] should_fail.cold+0x5/0x14 [ 269.356030][T10276] should_failslab+0x5/0xf [ 269.360456][T10276] kmem_cache_alloc_node_trace+0x27d/0x400 [ 269.366268][T10276] sbitmap_queue_init_node+0x29b/0x720 [ 269.371771][T10276] blk_mq_init_tags+0x16f/0x2b0 [ 269.376602][T10276] blk_mq_alloc_rq_map+0x81/0x200 [ 269.381605][T10276] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 269.387564][T10276] blk_mq_alloc_tag_set+0x751/0xcd0 [ 269.392749][T10276] loop_add+0x26d/0x8b0 [ 269.396888][T10276] loop_control_ioctl+0x16c/0x480 [ 269.401890][T10276] ? loop_lookup+0x1d0/0x1d0 [ 269.406455][T10276] ? __fget_files+0x294/0x400 [ 269.411116][T10276] ? loop_lookup+0x1d0/0x1d0 [ 269.415696][T10276] ksys_ioctl+0x11a/0x180 [ 269.420012][T10276] __x64_sys_ioctl+0x6f/0xb0 [ 269.424598][T10276] ? lockdep_hardirqs_on+0x6a/0xe0 [ 269.429684][T10276] do_syscall_64+0x60/0xe0 [ 269.434078][T10276] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 269.439955][T10276] RIP: 0033:0x45c369 [ 269.443826][T10276] Code: Bad RIP value. [ 269.447879][T10276] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.456264][T10276] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 269.464208][T10276] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 269.472156][T10276] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 269.480104][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 269.488052][T10276] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac [ 269.499913][T10276] blk-mq: reduced tag depth (128 -> 64) [ 269.753950][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.773925][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.854049][ T23] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 269.863078][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 269.884446][ T23] usb 6-1: SerialNumber: syz [ 269.890656][ T23] usb 6-1: config 0 descriptor?? [ 270.137844][ T2527] usb 6-1: USB disconnect, device number 41 07:22:12 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e30109021200010000"], 0x0) 07:22:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c06, 0x0) 07:22:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:12 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x180) 07:22:12 executing program 2 (fault-call:8 fault-nth:9): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:13 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x198) [ 270.824582][T10313] FAULT_INJECTION: forcing a failure. [ 270.824582][T10313] name failslab, interval 1, probability 0, space 0, times 0 07:22:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 270.869932][T10313] CPU: 0 PID: 10313 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 270.878613][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.888657][T10313] Call Trace: [ 270.891951][T10313] dump_stack+0x18f/0x20d [ 270.896287][T10313] should_fail.cold+0x5/0x14 [ 270.900881][T10313] should_failslab+0x5/0xf [ 270.905299][T10313] kmem_cache_alloc_node_trace+0x27d/0x400 [ 270.911110][T10313] sbitmap_queue_init_node+0x29b/0x720 [ 270.916578][T10313] blk_mq_init_tags+0x16f/0x2b0 [ 270.921437][T10313] blk_mq_alloc_rq_map+0x81/0x200 [ 270.926456][T10313] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 270.932414][T10313] blk_mq_alloc_tag_set+0x751/0xcd0 [ 270.937616][T10313] loop_add+0x26d/0x8b0 [ 270.941780][T10313] loop_control_ioctl+0x16c/0x480 [ 270.946810][T10313] ? loop_lookup+0x1d0/0x1d0 [ 270.951486][T10313] ? __fget_files+0x294/0x400 [ 270.956171][T10313] ? loop_lookup+0x1d0/0x1d0 [ 270.960763][T10313] ksys_ioctl+0x11a/0x180 [ 270.965094][T10313] __x64_sys_ioctl+0x6f/0xb0 07:22:13 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 270.969682][T10313] ? lockdep_hardirqs_on+0x6a/0xe0 [ 270.974797][T10313] do_syscall_64+0x60/0xe0 [ 270.979204][T10313] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 270.985069][T10313] RIP: 0033:0x45c369 [ 270.988935][T10313] Code: Bad RIP value. [ 270.992976][T10313] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.001363][T10313] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 271.009310][T10313] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 07:22:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c07, 0x0) [ 271.017268][T10313] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 271.025218][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 271.033165][T10313] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac [ 271.045830][T10313] blk-mq: reduced tag depth (128 -> 64) [ 271.194218][ T2525] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 271.553981][ T2525] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.573685][ T2525] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.683780][ T2525] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 271.692849][ T2525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 271.702037][ T2525] usb 6-1: SerialNumber: syz [ 271.710388][ T2525] usb 6-1: config 0 descriptor?? [ 271.958645][ T23] usb 6-1: USB disconnect, device number 42 07:22:14 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e30109021200010000000009040000"], 0x0) 07:22:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c08, 0x0) 07:22:14 executing program 2 (fault-call:8 fault-nth:10): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:14 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x1b0) 07:22:14 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40000) 07:22:14 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c09, 0x0) [ 272.589372][T10373] FAULT_INJECTION: forcing a failure. [ 272.589372][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 272.650432][T10373] CPU: 1 PID: 10373 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 272.659230][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.669279][T10373] Call Trace: [ 272.672573][T10373] dump_stack+0x18f/0x20d [ 272.676911][T10373] should_fail.cold+0x5/0x14 [ 272.681507][T10373] should_failslab+0x5/0xf [ 272.685929][T10373] kmem_cache_alloc_node_trace+0x27d/0x400 [ 272.691741][T10373] __kmalloc_node+0x38/0x60 [ 272.696254][T10373] blk_mq_alloc_rq_map+0x104/0x200 [ 272.701371][T10373] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 272.707359][T10373] blk_mq_alloc_tag_set+0x751/0xcd0 [ 272.712569][T10373] loop_add+0x26d/0x8b0 [ 272.716732][T10373] loop_control_ioctl+0x16c/0x480 [ 272.721757][T10373] ? loop_lookup+0x1d0/0x1d0 [ 272.726346][T10373] ? __fget_files+0x294/0x400 [ 272.731143][T10373] ? loop_lookup+0x1d0/0x1d0 [ 272.735733][T10373] ksys_ioctl+0x11a/0x180 [ 272.740068][T10373] __x64_sys_ioctl+0x6f/0xb0 [ 272.744657][T10373] ? lockdep_hardirqs_on+0x6a/0xe0 [ 272.749770][T10373] do_syscall_64+0x60/0xe0 [ 272.754193][T10373] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 272.760088][T10373] RIP: 0033:0x45c369 [ 272.763969][T10373] Code: Bad RIP value. [ 272.768027][T10373] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.776438][T10373] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 272.784411][T10373] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 272.792382][T10373] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 07:22:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x1c8) 07:22:15 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 272.800349][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 272.808316][T10373] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:15 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40000) [ 272.860395][T10373] blk-mq: reduced tag depth (128 -> 64) 07:22:15 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 272.973792][ T2527] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 273.457919][ T2527] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 273.476820][ T2527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 273.494699][ T2527] usb 6-1: SerialNumber: syz [ 273.500749][ T2527] usb 6-1: config 0 descriptor?? [ 273.565772][ T2527] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 273.595661][ T2527] usb 6-1: Detected SIO [ 273.606573][ T2527] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 273.767906][ T2525] usb 6-1: USB disconnect, device number 43 [ 273.776188][ T2525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 273.786578][ T2525] ftdi_sio 6-1:0.0: device disconnected 07:22:16 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000"], 0x0) 07:22:16 executing program 2 (fault-call:8 fault-nth:11): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0a, 0x0) 07:22:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x1e0) 07:22:16 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:16 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40000) 07:22:16 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 274.433574][T10451] FAULT_INJECTION: forcing a failure. [ 274.433574][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 274.481715][T10451] CPU: 0 PID: 10451 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 274.490401][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.500447][T10451] Call Trace: [ 274.503732][T10451] dump_stack+0x18f/0x20d [ 274.508072][T10451] should_fail.cold+0x5/0x14 [ 274.512673][T10451] should_failslab+0x5/0xf [ 274.517095][T10451] kmem_cache_alloc_node_trace+0x27d/0x400 [ 274.522903][T10451] __kmalloc_node+0x38/0x60 07:22:16 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x1f8) 07:22:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0b, 0x0) [ 274.527404][T10451] blk_mq_alloc_rq_map+0x104/0x200 [ 274.532507][T10451] __blk_mq_alloc_map_and_request+0xa3/0x3b0 [ 274.538489][T10451] blk_mq_alloc_tag_set+0x751/0xcd0 [ 274.543697][T10451] loop_add+0x26d/0x8b0 [ 274.547857][T10451] loop_control_ioctl+0x16c/0x480 [ 274.552872][T10451] ? loop_lookup+0x1d0/0x1d0 [ 274.557459][T10451] ? __fget_files+0x294/0x400 [ 274.562143][T10451] ? loop_lookup+0x1d0/0x1d0 [ 274.566747][T10451] ksys_ioctl+0x11a/0x180 [ 274.571084][T10451] __x64_sys_ioctl+0x6f/0xb0 [ 274.575673][T10451] ? lockdep_hardirqs_on+0x6a/0xe0 [ 274.580787][T10451] do_syscall_64+0x60/0xe0 [ 274.585205][T10451] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 274.591096][T10451] RIP: 0033:0x45c369 [ 274.594972][T10451] Code: Bad RIP value. [ 274.599015][T10451] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.607408][T10451] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 274.615365][T10451] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 274.623319][T10451] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 07:22:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 274.631273][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 274.639221][T10451] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac [ 274.665041][T10451] blk-mq: reduced tag depth (128 -> 64) [ 274.723582][ T2537] usb 6-1: new high-speed USB device number 44 using dummy_hcd 07:22:17 executing program 2 (fault-call:8 fault-nth:12): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 274.915329][T10481] FAULT_INJECTION: forcing a failure. [ 274.915329][T10481] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 274.965928][T10481] CPU: 1 PID: 10481 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 274.974744][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.984795][T10481] Call Trace: [ 274.988089][T10481] dump_stack+0x18f/0x20d [ 274.992491][T10481] should_fail.cold+0x5/0x14 [ 274.997114][T10481] __alloc_pages_nodemask+0x1a3/0x930 [ 275.002498][T10481] ? mark_lock+0xbc/0x1710 [ 275.006924][T10481] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 275.013702][T10481] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 275.019600][T10481] ? __cpu_to_node+0x7b/0xa0 [ 275.024191][T10481] ? blk_mq_hw_queue_to_node+0xe6/0x140 [ 275.029740][T10481] blk_mq_alloc_rqs+0x235/0x790 [ 275.034601][T10481] ? blk_mq_alloc_rq_map+0x8e/0x200 [ 275.039808][T10481] __blk_mq_alloc_map_and_request+0x15b/0x3b0 [ 275.045880][T10481] blk_mq_alloc_tag_set+0x751/0xcd0 [ 275.051092][T10481] loop_add+0x26d/0x8b0 [ 275.055252][T10481] loop_control_ioctl+0x16c/0x480 [ 275.060277][T10481] ? loop_lookup+0x1d0/0x1d0 [ 275.064866][T10481] ? __fget_files+0x294/0x400 [ 275.069552][T10481] ? loop_lookup+0x1d0/0x1d0 [ 275.074142][T10481] ksys_ioctl+0x11a/0x180 [ 275.078475][T10481] __x64_sys_ioctl+0x6f/0xb0 [ 275.083062][T10481] ? lockdep_hardirqs_on+0x6a/0xe0 [ 275.088174][T10481] do_syscall_64+0x60/0xe0 [ 275.092706][T10481] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 275.097393][ T2537] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.098594][T10481] RIP: 0033:0x45c369 [ 275.112505][T10481] Code: Bad RIP value. [ 275.116563][T10481] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.121596][ T2537] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.124962][T10481] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 275.124971][T10481] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 275.124979][T10481] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 275.124987][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 275.124995][T10481] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac [ 275.253539][ T2537] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 275.262579][ T2537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 275.272092][ T2537] usb 6-1: SerialNumber: syz [ 275.285419][ T2537] usb 6-1: config 0 descriptor?? [ 275.527439][ T2537] usb 6-1: USB disconnect, device number 44 07:22:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:18 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0c, 0x0) 07:22:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x210) 07:22:18 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:18 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000"], 0x0) 07:22:18 executing program 2 (fault-call:8 fault-nth:13): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:18 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0d, 0x0) [ 276.182808][T10519] FAULT_INJECTION: forcing a failure. [ 276.182808][T10519] name failslab, interval 1, probability 0, space 0, times 0 [ 276.206363][T10519] CPU: 0 PID: 10519 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 276.215054][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.225103][T10519] Call Trace: [ 276.228397][T10519] dump_stack+0x18f/0x20d [ 276.232733][T10519] should_fail.cold+0x5/0x14 [ 276.237327][T10519] should_failslab+0x5/0xf [ 276.241747][T10519] kmem_cache_alloc_node_trace+0x27d/0x400 [ 276.247561][T10519] __kmalloc_node+0x38/0x60 [ 276.252067][T10519] ? mempool_alloc+0x350/0x350 [ 276.256831][T10519] ? mempool_free+0x370/0x370 [ 276.261508][T10519] mempool_init_node+0x135/0x550 [ 276.266449][T10519] ? __free_object+0xdd0/0xdd0 [ 276.271218][T10519] ? wait_for_completion+0x260/0x260 [ 276.276509][T10519] ? mempool_alloc+0x350/0x350 07:22:18 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 276.281265][T10519] ? mempool_free+0x370/0x370 [ 276.285943][T10519] mempool_init+0x38/0x50 [ 276.290279][T10519] bioset_init+0x332/0x810 [ 276.294701][T10519] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 276.300167][T10519] __blk_alloc_queue+0xdc/0x700 [ 276.305028][T10519] blk_mq_init_queue+0x44/0xd0 [ 276.309796][T10519] loop_add+0x2cb/0x8b0 [ 276.313969][T10519] loop_control_ioctl+0x16c/0x480 [ 276.318996][T10519] ? loop_lookup+0x1d0/0x1d0 [ 276.323595][T10519] ? __fget_files+0x294/0x400 [ 276.328283][T10519] ? loop_lookup+0x1d0/0x1d0 [ 276.332873][T10519] ksys_ioctl+0x11a/0x180 [ 276.337207][T10519] __x64_sys_ioctl+0x6f/0xb0 [ 276.341793][T10519] ? lockdep_hardirqs_on+0x6a/0xe0 [ 276.346882][T10519] do_syscall_64+0x60/0xe0 [ 276.351289][T10519] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 276.357154][T10519] RIP: 0033:0x45c369 [ 276.361016][T10519] Code: Bad RIP value. [ 276.365061][T10519] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.373490][T10519] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 07:22:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x228) [ 276.381438][T10519] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 276.389382][T10519] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 276.397325][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 276.405270][T10519] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac 07:22:18 executing program 2 (fault-call:8 fault-nth:14): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:18 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0e, 0x0) 07:22:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 276.585169][T10539] FAULT_INJECTION: forcing a failure. [ 276.585169][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 276.598085][ T23] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 276.626794][T10539] CPU: 1 PID: 10539 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 276.635469][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.645518][T10539] Call Trace: [ 276.648812][T10539] dump_stack+0x18f/0x20d [ 276.653152][T10539] should_fail.cold+0x5/0x14 [ 276.657748][T10539] should_failslab+0x5/0xf [ 276.662167][T10539] kmem_cache_alloc_node_trace+0x27d/0x400 [ 276.667983][T10539] __kmalloc_node+0x38/0x60 [ 276.672491][T10539] ? mempool_alloc+0x350/0x350 [ 276.677274][T10539] ? mempool_free+0x370/0x370 [ 276.681953][T10539] mempool_init_node+0x135/0x550 [ 276.686893][T10539] ? __free_object+0xdd0/0xdd0 [ 276.691660][T10539] ? wait_for_completion+0x260/0x260 [ 276.697036][T10539] ? mempool_alloc+0x350/0x350 [ 276.701801][T10539] ? mempool_free+0x370/0x370 [ 276.706476][T10539] mempool_init+0x38/0x50 [ 276.710809][T10539] bioset_init+0x332/0x810 [ 276.715227][T10539] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 276.720698][T10539] __blk_alloc_queue+0xdc/0x700 [ 276.725559][T10539] blk_mq_init_queue+0x44/0xd0 [ 276.730324][T10539] loop_add+0x2cb/0x8b0 [ 276.734489][T10539] loop_control_ioctl+0x16c/0x480 [ 276.739515][T10539] ? loop_lookup+0x1d0/0x1d0 [ 276.744104][T10539] ? __fget_files+0x294/0x400 [ 276.748785][T10539] ? loop_lookup+0x1d0/0x1d0 [ 276.753376][T10539] ksys_ioctl+0x11a/0x180 [ 276.757809][T10539] __x64_sys_ioctl+0x6f/0xb0 [ 276.762415][T10539] ? lockdep_hardirqs_on+0x6a/0xe0 [ 276.767552][T10539] do_syscall_64+0x60/0xe0 [ 276.771970][T10539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 07:22:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x240) 07:22:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 276.777858][T10539] RIP: 0033:0x45c369 [ 276.781737][T10539] Code: Bad RIP value. [ 276.785794][T10539] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.794200][T10539] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 276.802166][T10539] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 276.810121][T10539] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 276.818070][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 276.826025][T10539] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:19 executing program 2 (fault-call:8 fault-nth:15): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 276.967793][T10552] FAULT_INJECTION: forcing a failure. [ 276.967793][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 276.982699][T10552] CPU: 0 PID: 10552 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 276.991371][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.001410][T10552] Call Trace: [ 277.004769][T10552] dump_stack+0x18f/0x20d [ 277.009079][T10552] should_fail.cold+0x5/0x14 [ 277.013648][T10552] should_failslab+0x5/0xf [ 277.018043][T10552] kmem_cache_alloc+0x2a9/0x3b0 [ 277.022884][T10552] ? mempool_alloc+0x350/0x350 [ 277.027627][T10552] ? mempool_free+0x370/0x370 [ 277.032276][T10552] mempool_init_node+0x2ce/0x550 [ 277.037196][T10552] ? __free_object+0xdd0/0xdd0 [ 277.041935][T10552] ? mempool_alloc+0x350/0x350 [ 277.046671][T10552] ? mempool_free+0x370/0x370 [ 277.051320][T10552] mempool_init+0x38/0x50 [ 277.055627][T10552] bioset_init+0x332/0x810 [ 277.060017][T10552] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 277.065452][T10552] __blk_alloc_queue+0xdc/0x700 [ 277.070283][T10552] blk_mq_init_queue+0x44/0xd0 [ 277.075071][T10552] loop_add+0x2cb/0x8b0 [ 277.079202][T10552] loop_control_ioctl+0x16c/0x480 [ 277.084199][T10552] ? loop_lookup+0x1d0/0x1d0 [ 277.088786][T10552] ? __fget_files+0x294/0x400 [ 277.093468][T10552] ? loop_lookup+0x1d0/0x1d0 [ 277.098030][T10552] ksys_ioctl+0x11a/0x180 [ 277.102334][T10552] __x64_sys_ioctl+0x6f/0xb0 [ 277.106921][T10552] ? lockdep_hardirqs_on+0x6a/0xe0 [ 277.112008][T10552] do_syscall_64+0x60/0xe0 [ 277.116399][T10552] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 277.122264][T10552] RIP: 0033:0x45c369 [ 277.126128][T10552] Code: Bad RIP value. [ 277.130176][T10552] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.138560][T10552] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 277.146506][T10552] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 277.154451][T10552] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 277.162398][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 277.170344][T10552] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 277.373535][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.393185][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.483804][ T23] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 277.492841][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 277.501278][ T23] usb 6-1: SerialNumber: syz [ 277.507193][ T23] usb 6-1: config 0 descriptor?? [ 277.756429][ T17] usb 6-1: USB disconnect, device number 45 07:22:20 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000"], 0x0) 07:22:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c0f, 0x0) 07:22:20 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:20 executing program 2 (fault-call:8 fault-nth:16): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x258) [ 278.351446][T10577] FAULT_INJECTION: forcing a failure. [ 278.351446][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 278.389433][T10577] CPU: 1 PID: 10577 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 278.398200][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.408248][T10577] Call Trace: [ 278.411542][T10577] dump_stack+0x18f/0x20d [ 278.415899][T10577] should_fail.cold+0x5/0x14 [ 278.420497][T10577] should_failslab+0x5/0xf [ 278.424916][T10577] kmem_cache_alloc_node_trace+0x27d/0x400 [ 278.430734][T10577] __kmalloc_node+0x38/0x60 [ 278.435240][T10577] ? mempool_alloc+0x350/0x350 [ 278.440002][T10577] ? mempool_free+0x370/0x370 [ 278.444676][T10577] mempool_init_node+0x135/0x550 [ 278.449626][T10577] ? mempool_alloc+0x350/0x350 [ 278.454392][T10577] ? mempool_free+0x370/0x370 [ 278.459071][T10577] mempool_init+0x38/0x50 [ 278.463398][T10577] bioset_init+0x52f/0x810 [ 278.467802][T10577] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 278.473270][T10577] __blk_alloc_queue+0xdc/0x700 [ 278.478129][T10577] blk_mq_init_queue+0x44/0xd0 [ 278.482897][T10577] loop_add+0x2cb/0x8b0 [ 278.487075][T10577] loop_control_ioctl+0x16c/0x480 [ 278.492100][T10577] ? loop_lookup+0x1d0/0x1d0 [ 278.496691][T10577] ? __fget_files+0x294/0x400 [ 278.501375][T10577] ? loop_lookup+0x1d0/0x1d0 [ 278.505973][T10577] ksys_ioctl+0x11a/0x180 [ 278.510342][T10577] __x64_sys_ioctl+0x6f/0xb0 [ 278.514955][T10577] ? lockdep_hardirqs_on+0x6a/0xe0 [ 278.520070][T10577] do_syscall_64+0x60/0xe0 [ 278.524488][T10577] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 278.530376][T10577] RIP: 0033:0x45c369 [ 278.534253][T10577] Code: Bad RIP value. [ 278.538294][T10577] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:22:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c10, 0x0) [ 278.546683][T10577] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 278.554631][T10577] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 278.562578][T10577] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 278.570523][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 278.578481][T10577] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:20 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:20 executing program 2 (fault-call:8 fault-nth:17): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 278.643311][ T2487] usb 6-1: new high-speed USB device number 46 using dummy_hcd 07:22:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x270) [ 278.768088][T10596] FAULT_INJECTION: forcing a failure. [ 278.768088][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 278.790587][T10596] CPU: 0 PID: 10596 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 278.799265][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.809312][T10596] Call Trace: [ 278.812603][T10596] dump_stack+0x18f/0x20d [ 278.816938][T10596] should_fail.cold+0x5/0x14 [ 278.821536][T10596] should_failslab+0x5/0xf [ 278.825953][T10596] kmem_cache_alloc+0x2a9/0x3b0 [ 278.830805][T10596] ? mempool_alloc+0x350/0x350 [ 278.835569][T10596] mempool_init_node+0x2ce/0x550 [ 278.840512][T10596] ? mempool_alloc+0x350/0x350 [ 278.845278][T10596] ? mempool_free+0x370/0x370 [ 278.849960][T10596] mempool_init+0x38/0x50 [ 278.854293][T10596] bioset_init+0x332/0x810 [ 278.858712][T10596] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 278.864176][T10596] __blk_alloc_queue+0xdc/0x700 [ 278.869034][T10596] blk_mq_init_queue+0x44/0xd0 [ 278.873802][T10596] loop_add+0x2cb/0x8b0 [ 278.877970][T10596] loop_control_ioctl+0x16c/0x480 [ 278.882996][T10596] ? loop_lookup+0x1d0/0x1d0 [ 278.887588][T10596] ? __fget_files+0x294/0x400 [ 278.892275][T10596] ? loop_lookup+0x1d0/0x1d0 [ 278.896868][T10596] ksys_ioctl+0x11a/0x180 [ 278.901214][T10596] __x64_sys_ioctl+0x6f/0xb0 [ 278.905800][T10596] ? lockdep_hardirqs_on+0x6a/0xe0 [ 278.910909][T10596] do_syscall_64+0x60/0xe0 [ 278.915324][T10596] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 278.921213][T10596] RIP: 0033:0x45c369 [ 278.925094][T10596] Code: Bad RIP value. [ 278.929149][T10596] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.937555][T10596] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 278.945521][T10596] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 278.953486][T10596] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 278.961454][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 278.969432][T10596] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 279.153215][ T2487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.172994][ T2487] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 279.279384][ T2487] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 279.293512][ T2487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 279.301678][ T2487] usb 6-1: SerialNumber: syz [ 279.311577][ T2487] usb 6-1: config 0 descriptor?? [ 279.560113][ T2487] usb 6-1: USB disconnect, device number 46 07:22:22 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904"], 0x0) 07:22:22 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x288) 07:22:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c11, 0x0) 07:22:22 executing program 2 (fault-call:8 fault-nth:18): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 280.137039][T10626] FAULT_INJECTION: forcing a failure. [ 280.137039][T10626] name failslab, interval 1, probability 0, space 0, times 0 [ 280.173063][T10626] CPU: 0 PID: 10626 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 280.181758][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.191811][T10626] Call Trace: [ 280.195109][T10626] dump_stack+0x18f/0x20d [ 280.199446][T10626] should_fail.cold+0x5/0x14 [ 280.204039][T10626] should_failslab+0x5/0xf [ 280.208469][T10626] kmem_cache_alloc+0x2a9/0x3b0 [ 280.213323][T10626] ? mempool_alloc+0x350/0x350 [ 280.218088][T10626] ? mempool_free+0x370/0x370 [ 280.222762][T10626] mempool_init_node+0x2ce/0x550 [ 280.227705][T10626] ? mempool_alloc+0x350/0x350 [ 280.232456][T10626] ? mempool_free+0x370/0x370 [ 280.237109][T10626] mempool_init+0x38/0x50 [ 280.241421][T10626] bioset_init+0x52f/0x810 [ 280.245816][T10626] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 280.251253][T10626] __blk_alloc_queue+0xdc/0x700 [ 280.256102][T10626] blk_mq_init_queue+0x44/0xd0 [ 280.260862][T10626] loop_add+0x2cb/0x8b0 [ 280.265012][T10626] loop_control_ioctl+0x16c/0x480 [ 280.270020][T10626] ? loop_lookup+0x1d0/0x1d0 [ 280.274584][T10626] ? __fget_files+0x294/0x400 [ 280.279263][T10626] ? loop_lookup+0x1d0/0x1d0 [ 280.283830][T10626] ksys_ioctl+0x11a/0x180 [ 280.288134][T10626] __x64_sys_ioctl+0x6f/0xb0 [ 280.292700][T10626] ? lockdep_hardirqs_on+0x6a/0xe0 [ 280.297785][T10626] do_syscall_64+0x60/0xe0 [ 280.302177][T10626] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 280.308042][T10626] RIP: 0033:0x45c369 [ 280.311907][T10626] Code: Bad RIP value. [ 280.315944][T10626] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.324326][T10626] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 07:22:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 280.332283][T10626] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 280.340228][T10626] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 280.348174][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 280.356124][T10626] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2a0) 07:22:22 executing program 2 (fault-call:8 fault-nth:19): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c12, 0x0) 07:22:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 280.523138][ T2487] usb 6-1: new high-speed USB device number 47 using dummy_hcd 07:22:22 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 280.566539][T10647] FAULT_INJECTION: forcing a failure. [ 280.566539][T10647] name failslab, interval 1, probability 0, space 0, times 0 [ 280.600448][T10647] CPU: 0 PID: 10647 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 280.609210][T10647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.619269][T10647] Call Trace: [ 280.622560][T10647] dump_stack+0x18f/0x20d [ 280.626982][T10647] should_fail.cold+0x5/0x14 [ 280.631575][T10647] should_failslab+0x5/0xf [ 280.635990][T10647] kmem_cache_alloc+0x2a9/0x3b0 [ 280.640833][T10647] ? mempool_alloc+0x350/0x350 [ 280.645575][T10647] mempool_init_node+0x2ce/0x550 [ 280.650511][T10647] ? mempool_alloc+0x350/0x350 [ 280.655260][T10647] ? mempool_free+0x370/0x370 [ 280.659910][T10647] mempool_init+0x38/0x50 [ 280.664304][T10647] bioset_init+0x52f/0x810 [ 280.668698][T10647] ? kmem_cache_alloc_node+0x36b/0x3c0 [ 280.674134][T10647] __blk_alloc_queue+0xdc/0x700 [ 280.678965][T10647] blk_mq_init_queue+0x44/0xd0 [ 280.683706][T10647] loop_add+0x2cb/0x8b0 [ 280.687841][T10647] loop_control_ioctl+0x16c/0x480 [ 280.692851][T10647] ? loop_lookup+0x1d0/0x1d0 [ 280.697428][T10647] ? __fget_files+0x294/0x400 [ 280.702082][T10647] ? loop_lookup+0x1d0/0x1d0 [ 280.706647][T10647] ksys_ioctl+0x11a/0x180 [ 280.710953][T10647] __x64_sys_ioctl+0x6f/0xb0 [ 280.715518][T10647] ? lockdep_hardirqs_on+0x6a/0xe0 [ 280.720609][T10647] do_syscall_64+0x60/0xe0 [ 280.725034][T10647] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 280.730911][T10647] RIP: 0033:0x45c369 [ 280.734778][T10647] Code: Bad RIP value. [ 280.738825][T10647] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.747208][T10647] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 280.755170][T10647] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 280.763142][T10647] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 280.771086][T10647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 280.779034][T10647] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 281.123177][ T2487] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 281.132215][ T2487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 281.151486][ T2487] usb 6-1: SerialNumber: syz [ 281.166869][ T2487] usb 6-1: config 0 descriptor?? [ 281.207892][ T2487] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 281.217111][ T2487] usb 6-1: Detected SIO [ 281.222428][ T2487] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 281.406082][ T2527] usb 6-1: USB disconnect, device number 47 [ 281.417797][ T2527] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 281.443245][ T2527] ftdi_sio 6-1:0.0: device disconnected 07:22:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2b8) 07:22:24 executing program 2 (fault-call:8 fault-nth:20): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:24 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c13, 0x0) 07:22:24 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e301090212000100000000"], 0x0) 07:22:24 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 281.972652][T10690] FAULT_INJECTION: forcing a failure. [ 281.972652][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 281.972676][T10690] CPU: 1 PID: 10690 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 281.972685][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.972689][T10690] Call Trace: [ 281.972709][T10690] dump_stack+0x18f/0x20d [ 281.972729][T10690] should_fail.cold+0x5/0x14 [ 281.972749][T10690] should_failslab+0x5/0xf [ 281.972765][T10690] kmem_cache_alloc_trace+0x240/0x2d0 [ 281.972785][T10690] wb_congested_get_create+0x1a3/0x440 [ 281.972806][T10690] wb_init+0x508/0x880 [ 281.972825][T10690] bdi_init+0x2af/0x420 [ 281.972841][T10690] bdi_alloc+0x54/0x90 [ 281.972859][T10690] __blk_alloc_queue+0x100/0x700 [ 281.972877][T10690] blk_mq_init_queue+0x44/0xd0 [ 281.972893][T10690] loop_add+0x2cb/0x8b0 [ 281.972917][T10690] loop_control_ioctl+0x16c/0x480 [ 282.062431][T10690] ? loop_lookup+0x1d0/0x1d0 [ 282.062443][T10690] ? __fget_files+0x294/0x400 [ 282.062460][T10690] ? loop_lookup+0x1d0/0x1d0 [ 282.062471][T10690] ksys_ioctl+0x11a/0x180 [ 282.062483][T10690] __x64_sys_ioctl+0x6f/0xb0 07:22:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2d0) [ 282.062495][T10690] ? lockdep_hardirqs_on+0x6a/0xe0 [ 282.062507][T10690] do_syscall_64+0x60/0xe0 [ 282.062520][T10690] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 282.062529][T10690] RIP: 0033:0x45c369 [ 282.062533][T10690] Code: Bad RIP value. [ 282.062539][T10690] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.062551][T10690] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 282.062557][T10690] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 282.062564][T10690] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 282.062570][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 282.062577][T10690] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:24 executing program 2 (fault-call:8 fault-nth:21): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:24 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:24 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c14, 0x0) 07:22:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2e8) [ 282.410836][T10718] FAULT_INJECTION: forcing a failure. [ 282.410836][T10718] name failslab, interval 1, probability 0, space 0, times 0 [ 282.462432][T10718] CPU: 1 PID: 10718 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 282.471114][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.481159][T10718] Call Trace: [ 282.484451][T10718] dump_stack+0x18f/0x20d [ 282.488788][T10718] should_fail.cold+0x5/0x14 [ 282.493390][T10718] should_failslab+0x5/0xf [ 282.497808][T10718] kmem_cache_alloc_trace+0x240/0x2d0 [ 282.503183][T10718] blk_alloc_queue_stats+0x3c/0x110 [ 282.508385][T10718] __blk_alloc_queue+0x138/0x700 [ 282.513331][T10718] blk_mq_init_queue+0x44/0xd0 [ 282.518101][T10718] loop_add+0x2cb/0x8b0 [ 282.522260][T10718] loop_control_ioctl+0x16c/0x480 [ 282.527286][T10718] ? loop_lookup+0x1d0/0x1d0 [ 282.531960][T10718] ? __fget_files+0x294/0x400 [ 282.536644][T10718] ? loop_lookup+0x1d0/0x1d0 [ 282.541232][T10718] ksys_ioctl+0x11a/0x180 [ 282.545573][T10718] __x64_sys_ioctl+0x6f/0xb0 [ 282.550162][T10718] ? lockdep_hardirqs_on+0x6a/0xe0 [ 282.552790][ T2528] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 282.555269][T10718] do_syscall_64+0x60/0xe0 [ 282.555289][T10718] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 282.555302][T10718] RIP: 0033:0x45c369 [ 282.555307][T10718] Code: Bad RIP value. [ 282.555320][T10718] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.589416][T10718] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 282.597401][T10718] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 282.605370][T10718] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 07:22:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 282.613337][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 282.621303][T10718] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:24 executing program 2 (fault-call:8 fault-nth:22): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:24 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 282.807523][T10735] FAULT_INJECTION: forcing a failure. [ 282.807523][T10735] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.820736][T10735] CPU: 0 PID: 10735 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 282.829399][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.839446][T10735] Call Trace: [ 282.842754][T10735] dump_stack+0x18f/0x20d [ 282.847093][T10735] should_fail.cold+0x5/0x14 [ 282.851690][T10735] __alloc_pages_nodemask+0x1a3/0x930 [ 282.857061][T10735] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 282.863043][T10735] ? mark_lock+0xbc/0x1710 [ 282.867463][T10735] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 282.874227][T10735] ? lock_acquire+0x1f1/0xad0 [ 282.878900][T10735] ? fs_reclaim_acquire+0xf/0x40 [ 282.883836][T10735] ? find_held_lock+0x2d/0x110 [ 282.888603][T10735] cache_grow_begin+0x8c/0xb20 [ 282.893366][T10735] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 282.898840][T10735] cache_alloc_refill+0x27b/0x340 [ 282.903864][T10735] ? lockdep_hardirqs_off+0x66/0xa0 [ 282.909072][T10735] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 282.914885][T10735] bdi_alloc+0x3f/0x90 [ 282.918945][T10735] __blk_alloc_queue+0x100/0x700 [ 282.923861][T10735] blk_mq_init_queue+0x44/0xd0 [ 282.928602][T10735] loop_add+0x2cb/0x8b0 [ 282.932739][T10735] loop_control_ioctl+0x16c/0x480 [ 282.937740][T10735] ? loop_lookup+0x1d0/0x1d0 [ 282.942305][T10735] ? __fget_files+0x294/0x400 [ 282.946961][T10735] ? loop_lookup+0x1d0/0x1d0 [ 282.951537][T10735] ksys_ioctl+0x11a/0x180 [ 282.955841][T10735] __x64_sys_ioctl+0x6f/0xb0 [ 282.960541][T10735] ? lockdep_hardirqs_on+0x6a/0xe0 [ 282.965634][T10735] do_syscall_64+0x60/0xe0 [ 282.970031][T10735] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 282.975896][T10735] RIP: 0033:0x45c369 [ 282.979758][T10735] Code: Bad RIP value. [ 282.983796][T10735] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.992178][T10735] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 283.000121][T10735] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 283.008104][T10735] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 283.016051][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 283.024010][T10735] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 283.152887][ T2528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.172983][ T2528] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.255189][ T2528] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 283.274301][ T2528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 283.297491][ T2528] usb 6-1: SerialNumber: syz [ 283.309004][ T2528] usb 6-1: config 0 descriptor?? [ 283.555706][ T2527] usb 6-1: USB disconnect, device number 48 07:22:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x300) 07:22:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c15, 0x0) 07:22:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:26 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:26 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e301090212000100000000"], 0x0) 07:22:26 executing program 2 (fault-call:8 fault-nth:23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c16, 0x0) [ 284.202948][T10777] FAULT_INJECTION: forcing a failure. [ 284.202948][T10777] name failslab, interval 1, probability 0, space 0, times 0 [ 284.229335][T10777] CPU: 0 PID: 10777 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 284.238015][T10777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.248066][T10777] Call Trace: [ 284.251360][T10777] dump_stack+0x18f/0x20d [ 284.255701][T10777] should_fail.cold+0x5/0x14 [ 284.260305][T10777] should_failslab+0x5/0xf [ 284.264731][T10777] kmem_cache_alloc_trace+0x240/0x2d0 [ 284.270111][T10777] blk_alloc_queue_stats+0x3c/0x110 [ 284.275314][T10777] __blk_alloc_queue+0x138/0x700 [ 284.280260][T10777] blk_mq_init_queue+0x44/0xd0 [ 284.285026][T10777] loop_add+0x2cb/0x8b0 [ 284.289187][T10777] loop_control_ioctl+0x16c/0x480 [ 284.294212][T10777] ? loop_lookup+0x1d0/0x1d0 [ 284.298803][T10777] ? __fget_files+0x294/0x400 [ 284.303492][T10777] ? loop_lookup+0x1d0/0x1d0 [ 284.308084][T10777] ksys_ioctl+0x11a/0x180 [ 284.312418][T10777] __x64_sys_ioctl+0x6f/0xb0 [ 284.317009][T10777] ? lockdep_hardirqs_on+0x6a/0xe0 [ 284.322122][T10777] do_syscall_64+0x60/0xe0 [ 284.326544][T10777] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 284.332433][T10777] RIP: 0033:0x45c369 [ 284.336320][T10777] Code: Bad RIP value. [ 284.340383][T10777] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:22:26 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x0, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 284.348876][T10777] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 284.356856][T10777] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 284.364826][T10777] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 284.372793][T10777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 284.380763][T10777] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac 07:22:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x318) 07:22:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c17, 0x0) 07:22:26 executing program 2 (fault-call:8 fault-nth:24): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 284.542706][ T2528] usb 6-1: new high-speed USB device number 49 using dummy_hcd 07:22:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 284.586828][T10804] FAULT_INJECTION: forcing a failure. [ 284.586828][T10804] name failslab, interval 1, probability 0, space 0, times 0 07:22:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c18, 0x0) [ 284.662372][T10804] CPU: 0 PID: 10804 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 284.671163][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.681212][T10804] Call Trace: [ 284.684522][T10804] dump_stack+0x18f/0x20d [ 284.688860][T10804] should_fail.cold+0x5/0x14 [ 284.693541][T10804] should_failslab+0x5/0xf [ 284.698109][T10804] kmem_cache_alloc_trace+0x240/0x2d0 [ 284.703486][T10804] blk_alloc_queue_stats+0x3c/0x110 [ 284.708689][T10804] __blk_alloc_queue+0x138/0x700 [ 284.713633][T10804] blk_mq_init_queue+0x44/0xd0 [ 284.718400][T10804] loop_add+0x2cb/0x8b0 [ 284.722562][T10804] loop_control_ioctl+0x16c/0x480 [ 284.727586][T10804] ? loop_lookup+0x1d0/0x1d0 [ 284.732176][T10804] ? __fget_files+0x294/0x400 [ 284.736867][T10804] ? loop_lookup+0x1d0/0x1d0 [ 284.741456][T10804] ksys_ioctl+0x11a/0x180 [ 284.745784][T10804] __x64_sys_ioctl+0x6f/0xb0 [ 284.750379][T10804] ? lockdep_hardirqs_on+0x6a/0xe0 [ 284.755504][T10804] do_syscall_64+0x60/0xe0 [ 284.759911][T10804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 284.765778][T10804] RIP: 0033:0x45c369 [ 284.769650][T10804] Code: Bad RIP value. [ 284.773701][T10804] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.782087][T10804] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 284.790033][T10804] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 284.797977][T10804] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 284.805921][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 284.813872][T10804] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 285.062809][ T2528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.079386][ T2528] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.162740][ T2528] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 285.175485][ T2528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 285.203846][ T2528] usb 6-1: SerialNumber: syz [ 285.215485][ T2528] usb 6-1: config 0 descriptor?? [ 285.479327][ T2527] usb 6-1: USB disconnect, device number 49 07:22:28 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e301090212000100000000"], 0x0) 07:22:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x330) 07:22:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c19, 0x0) 07:22:28 executing program 2 (fault-call:8 fault-nth:25): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:28 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x0, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 286.042079][T10836] FAULT_INJECTION: forcing a failure. [ 286.042079][T10836] name failslab, interval 1, probability 0, space 0, times 0 [ 286.072211][T10836] CPU: 0 PID: 10836 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 286.080893][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.090923][T10836] Call Trace: [ 286.094196][T10836] dump_stack+0x18f/0x20d [ 286.098506][T10836] should_fail.cold+0x5/0x14 [ 286.103089][T10836] should_failslab+0x5/0xf [ 286.107481][T10836] kmem_cache_alloc_trace+0x240/0x2d0 [ 286.112833][T10836] blk_iolatency_init+0x47/0x2e0 [ 286.117762][T10836] blkcg_init_queue+0x15c/0x740 [ 286.122617][T10836] __blk_alloc_queue+0x4f0/0x700 [ 286.127559][T10836] blk_mq_init_queue+0x44/0xd0 [ 286.132326][T10836] loop_add+0x2cb/0x8b0 [ 286.136487][T10836] loop_control_ioctl+0x16c/0x480 [ 286.141518][T10836] ? loop_lookup+0x1d0/0x1d0 [ 286.146118][T10836] ? __fget_files+0x294/0x400 [ 286.150805][T10836] ? loop_lookup+0x1d0/0x1d0 [ 286.155377][T10836] ksys_ioctl+0x11a/0x180 [ 286.159686][T10836] __x64_sys_ioctl+0x6f/0xb0 [ 286.164253][T10836] ? lockdep_hardirqs_on+0x6a/0xe0 [ 286.169341][T10836] do_syscall_64+0x60/0xe0 [ 286.173749][T10836] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 286.179620][T10836] RIP: 0033:0x45c369 [ 286.183495][T10836] Code: Bad RIP value. 07:22:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) [ 286.187550][T10836] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.195969][T10836] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 286.203929][T10836] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 286.211877][T10836] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 286.219911][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 286.227858][T10836] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) 07:22:28 executing program 2 (fault-call:8 fault-nth:26): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:28 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x0, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x348) 07:22:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1a, 0x0) [ 286.435212][T10858] FAULT_INJECTION: forcing a failure. [ 286.435212][T10858] name failslab, interval 1, probability 0, space 0, times 0 [ 286.448077][T10858] CPU: 1 PID: 10858 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 286.456742][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.466787][T10858] Call Trace: [ 286.470077][T10858] dump_stack+0x18f/0x20d [ 286.474409][T10858] should_fail.cold+0x5/0x14 [ 286.479001][T10858] should_failslab+0x5/0xf [ 286.483424][T10858] kmem_cache_alloc_node_trace+0x58/0x400 [ 286.489148][T10858] iolatency_pd_alloc+0xaf/0x160 [ 286.494100][T10858] ? iolat_acquire_inflight+0x50/0x50 [ 286.499469][T10858] blkcg_activate_policy+0x228/0xee0 [ 286.504766][T10858] blk_iolatency_init+0x13f/0x2e0 [ 286.509806][T10858] blkcg_init_queue+0x15c/0x740 [ 286.514663][T10858] __blk_alloc_queue+0x4f0/0x700 [ 286.519626][T10858] blk_mq_init_queue+0x44/0xd0 [ 286.524378][T10858] loop_add+0x2cb/0x8b0 [ 286.528511][T10858] loop_control_ioctl+0x16c/0x480 [ 286.533524][T10858] ? loop_lookup+0x1d0/0x1d0 [ 286.538086][T10858] ? __fget_files+0x294/0x400 [ 286.542740][T10858] ? loop_lookup+0x1d0/0x1d0 [ 286.547302][T10858] ksys_ioctl+0x11a/0x180 [ 286.551604][T10858] __x64_sys_ioctl+0x6f/0xb0 [ 286.556174][T10858] ? lockdep_hardirqs_on+0x6a/0xe0 [ 286.561268][T10858] do_syscall_64+0x60/0xe0 [ 286.565673][T10858] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 286.571539][T10858] RIP: 0033:0x45c369 [ 286.575401][T10858] Code: Bad RIP value. [ 286.579439][T10858] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.587820][T10858] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 286.595764][T10858] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 286.603708][T10858] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 286.611657][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 286.619609][T10858] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 286.798402][ T2528] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 287.203447][ T2528] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.213580][ T2528] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.303034][ T2528] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 287.312186][ T2528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 287.321697][ T2528] usb 6-1: SerialNumber: syz [ 287.328524][ T2528] usb 6-1: config 0 descriptor?? [ 287.596761][ T23] usb 6-1: USB disconnect, device number 50 07:22:30 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e30109021200010000000009"], 0x0) 07:22:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1b, 0x0) 07:22:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x360) 07:22:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) 07:22:30 executing program 2 (fault-call:8 fault-nth:27): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:30 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x0, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1c, 0x0) [ 288.228264][T10901] FAULT_INJECTION: forcing a failure. [ 288.228264][T10901] name failslab, interval 1, probability 0, space 0, times 0 [ 288.243947][T10901] CPU: 1 PID: 10901 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 288.252717][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.262767][T10901] Call Trace: [ 288.266057][T10901] dump_stack+0x18f/0x20d [ 288.270402][T10901] should_fail.cold+0x5/0x14 [ 288.275006][T10901] should_failslab+0x5/0xf [ 288.279424][T10901] kmem_cache_alloc_trace+0x240/0x2d0 [ 288.284803][T10901] blk_iolatency_init+0x47/0x2e0 [ 288.289744][T10901] blkcg_init_queue+0x15c/0x740 [ 288.294603][T10901] __blk_alloc_queue+0x4f0/0x700 [ 288.299547][T10901] blk_mq_init_queue+0x44/0xd0 [ 288.304314][T10901] loop_add+0x2cb/0x8b0 [ 288.308478][T10901] loop_control_ioctl+0x16c/0x480 [ 288.313502][T10901] ? loop_lookup+0x1d0/0x1d0 [ 288.318099][T10901] ? __fget_files+0x294/0x400 [ 288.322783][T10901] ? loop_lookup+0x1d0/0x1d0 [ 288.327374][T10901] ksys_ioctl+0x11a/0x180 [ 288.331707][T10901] __x64_sys_ioctl+0x6f/0xb0 [ 288.336295][T10901] ? lockdep_hardirqs_on+0x6a/0xe0 [ 288.341409][T10901] do_syscall_64+0x60/0xe0 [ 288.345831][T10901] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 288.351721][T10901] RIP: 0033:0x45c369 [ 288.355607][T10901] Code: Bad RIP value. [ 288.359669][T10901] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.368081][T10901] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 07:22:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 07:22:30 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x0, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 288.376048][T10901] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 288.384020][T10901] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 288.391985][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 288.399952][T10901] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:30 executing program 2 (fault-call:8 fault-nth:28): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1d, 0x0) 07:22:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x378) [ 288.582233][ T17] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 288.600492][T10925] FAULT_INJECTION: forcing a failure. [ 288.600492][T10925] name failslab, interval 1, probability 0, space 0, times 0 [ 288.613170][T10925] CPU: 0 PID: 10925 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 288.621845][T10925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.631891][T10925] Call Trace: [ 288.635183][T10925] dump_stack+0x18f/0x20d [ 288.639521][T10925] should_fail.cold+0x5/0x14 [ 288.644119][T10925] should_failslab+0x5/0xf [ 288.648538][T10925] kmem_cache_alloc_node_trace+0x58/0x400 [ 288.654266][T10925] iolatency_pd_alloc+0xaf/0x160 [ 288.659777][T10925] ? iolat_acquire_inflight+0x50/0x50 [ 288.665164][T10925] blkcg_activate_policy+0x228/0xee0 [ 288.670466][T10925] blk_iolatency_init+0x13f/0x2e0 [ 288.675493][T10925] blkcg_init_queue+0x15c/0x740 [ 288.680346][T10925] __blk_alloc_queue+0x4f0/0x700 [ 288.685288][T10925] blk_mq_init_queue+0x44/0xd0 [ 288.690060][T10925] loop_add+0x2cb/0x8b0 [ 288.694221][T10925] loop_control_ioctl+0x16c/0x480 [ 288.699263][T10925] ? loop_lookup+0x1d0/0x1d0 [ 288.703863][T10925] ? __fget_files+0x294/0x400 [ 288.708550][T10925] ? loop_lookup+0x1d0/0x1d0 [ 288.713138][T10925] ksys_ioctl+0x11a/0x180 [ 288.717463][T10925] __x64_sys_ioctl+0x6f/0xb0 [ 288.722046][T10925] ? lockdep_hardirqs_on+0x6a/0xe0 [ 288.727154][T10925] do_syscall_64+0x60/0xe0 [ 288.731582][T10925] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 288.737467][T10925] RIP: 0033:0x45c369 [ 288.741351][T10925] Code: Bad RIP value. [ 288.745410][T10925] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.754175][T10925] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 288.754184][T10925] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 288.754193][T10925] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 288.754202][T10925] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 288.754210][T10925] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 289.112249][ T17] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.202277][ T17] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 289.211316][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 289.219687][ T17] usb 6-1: SerialNumber: syz [ 289.230090][ T17] usb 6-1: config 0 descriptor?? [ 289.484111][ T2534] usb 6-1: USB disconnect, device number 51 07:22:32 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e30109021200010000000009"], 0x0) 07:22:32 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x0, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 07:22:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x200003b3) 07:22:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c1e, 0x0) 07:22:32 executing program 2 (fault-call:8 fault-nth:29): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 290.107515][T10966] FAULT_INJECTION: forcing a failure. [ 290.107515][T10966] name failslab, interval 1, probability 0, space 0, times 0 [ 290.120123][T10966] CPU: 0 PID: 10966 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 290.128783][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.138827][T10966] Call Trace: [ 290.142120][T10966] dump_stack+0x18f/0x20d [ 290.146463][T10966] should_fail.cold+0x5/0x14 [ 290.151059][T10966] should_failslab+0x5/0xf [ 290.155480][T10966] kmem_cache_alloc_node_trace+0x58/0x400 [ 290.161205][T10966] ? throtl_pd_free+0x40/0x40 [ 290.165887][T10966] throtl_pd_alloc+0xb3/0xa40 [ 290.170565][T10966] blkcg_activate_policy+0x228/0xee0 [ 290.175863][T10966] ? lockdep_init_map_waits+0x26a/0x890 [ 290.181413][T10966] blk_throtl_init+0x43a/0x650 [ 290.186185][T10966] ? blk_iolatency_init+0x17a/0x2e0 [ 290.191388][T10966] blkcg_init_queue+0x270/0x740 [ 290.196245][T10966] __blk_alloc_queue+0x4f0/0x700 [ 290.201199][T10966] blk_mq_init_queue+0x44/0xd0 [ 290.205966][T10966] loop_add+0x2cb/0x8b0 [ 290.210128][T10966] loop_control_ioctl+0x16c/0x480 [ 290.215149][T10966] ? loop_lookup+0x1d0/0x1d0 [ 290.219740][T10966] ? __fget_files+0x294/0x400 [ 290.224524][T10966] ? loop_lookup+0x1d0/0x1d0 [ 290.229111][T10966] ksys_ioctl+0x11a/0x180 [ 290.233437][T10966] __x64_sys_ioctl+0x6f/0xb0 [ 290.238023][T10966] ? lockdep_hardirqs_on+0x6a/0xe0 [ 290.243133][T10966] do_syscall_64+0x60/0xe0 [ 290.247552][T10966] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 290.253438][T10966] RIP: 0033:0x45c369 [ 290.257320][T10966] Code: Bad RIP value. [ 290.261374][T10966] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.269776][T10966] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 290.277742][T10966] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 290.285703][T10966] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 290.293665][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d 07:22:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 290.301626][T10966] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac 07:22:32 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c21, 0x0) 07:22:32 executing program 2 (fault-call:8 fault-nth:30): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) 07:22:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c22, 0x0) [ 290.622816][ T17] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 290.723100][T10987] FAULT_INJECTION: forcing a failure. [ 290.723100][T10987] name failslab, interval 1, probability 0, space 0, times 0 [ 290.784216][T10987] CPU: 0 PID: 10987 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 290.792911][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.802954][T10987] Call Trace: [ 290.806231][T10987] dump_stack+0x18f/0x20d [ 290.810549][T10987] should_fail.cold+0x5/0x14 [ 290.815146][T10987] ? blk_mq_has_request+0xb0/0xb0 [ 290.820172][T10987] ? blk_mq_has_request+0xb0/0xb0 [ 290.825194][T10987] should_failslab+0x5/0xf [ 290.829611][T10987] kmem_cache_alloc_trace+0x240/0x2d0 [ 290.834987][T10987] ? blk_mq_quiesce_queue+0x1d0/0x1d0 [ 290.840358][T10987] ? blk_mq_has_request+0xb0/0xb0 [ 290.845384][T10987] blk_stat_alloc_callback+0x54/0x290 [ 290.850761][T10987] blk_mq_init_allocated_queue+0x8d/0x13f0 [ 290.856567][T10987] ? blkcg_init_queue+0x183/0x740 [ 290.861589][T10987] ? blk_queue_dma_alignment+0xc/0x50 [ 290.866955][T10987] ? blk_set_default_limits+0x9/0x5d0 [ 290.872321][T10987] ? __blk_alloc_queue+0x527/0x700 [ 290.877433][T10987] blk_mq_init_queue+0x81/0xd0 [ 290.882196][T10987] loop_add+0x2cb/0x8b0 [ 290.886353][T10987] loop_control_ioctl+0x16c/0x480 [ 290.891371][T10987] ? loop_lookup+0x1d0/0x1d0 [ 290.895964][T10987] ? __fget_files+0x294/0x400 [ 290.900642][T10987] ? loop_lookup+0x1d0/0x1d0 [ 290.905226][T10987] ksys_ioctl+0x11a/0x180 [ 290.909556][T10987] __x64_sys_ioctl+0x6f/0xb0 [ 290.914140][T10987] ? lockdep_hardirqs_on+0x6a/0xe0 [ 290.919249][T10987] do_syscall_64+0x60/0xe0 [ 290.923661][T10987] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 290.929557][T10987] RIP: 0033:0x45c369 [ 290.933437][T10987] Code: Bad RIP value. [ 290.937495][T10987] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.945896][T10987] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 290.953856][T10987] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 290.961818][T10987] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 290.969781][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 290.977742][T10987] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 291.172169][ T17] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.288345][ T17] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 291.300858][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 291.337653][ T17] usb 6-1: SerialNumber: syz [ 291.358280][ T17] usb 6-1: config 0 descriptor?? [ 291.609596][ T2527] usb 6-1: USB disconnect, device number 52 07:22:34 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e30109021200010000000009"], 0x0) 07:22:34 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c23, 0x0) 07:22:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) [ 292.501910][ T2487] usb 6-1: new high-speed USB device number 53 using dummy_hcd 07:22:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0xe, 0x44, &(0x7f0000000040)="555b6e6b920e4e3129d4dcd68a0471aa881cdca1350f5a29771b5521d61758e1be800fd460b778666e162dc58eb4daa69b9da5c9c64e3bc0b30b452ba6fa9c61dcdc7e27"}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:22:34 executing program 2 (fault-call:8 fault-nth:31): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:34 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) 07:22:34 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c24, 0x0) [ 292.788575][T11030] FAULT_INJECTION: forcing a failure. [ 292.788575][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 292.821086][T11030] CPU: 0 PID: 11030 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 07:22:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}}, 0x0) [ 292.829765][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.839811][T11030] Call Trace: [ 292.843102][T11030] dump_stack+0x18f/0x20d [ 292.847443][T11030] should_fail.cold+0x5/0x14 [ 292.852040][T11030] should_failslab+0x5/0xf [ 292.856461][T11030] kmem_cache_alloc_trace+0x240/0x2d0 [ 292.861847][T11030] blk_mq_init_allocated_queue+0xfe/0x13f0 [ 292.867656][T11030] ? blkcg_init_queue+0x183/0x740 [ 292.872682][T11030] ? blk_queue_dma_alignment+0xc/0x50 [ 292.878051][T11030] ? blk_set_default_limits+0x9/0x5d0 [ 292.883432][T11030] ? __blk_alloc_queue+0x527/0x700 [ 292.888571][T11030] blk_mq_init_queue+0x81/0xd0 [ 292.893320][T11030] loop_add+0x2cb/0x8b0 [ 292.897476][T11030] loop_control_ioctl+0x16c/0x480 [ 292.902513][T11030] ? loop_lookup+0x1d0/0x1d0 [ 292.907079][T11030] ? __fget_files+0x294/0x400 [ 292.911748][T11030] ? loop_lookup+0x1d0/0x1d0 [ 292.916330][T11030] ksys_ioctl+0x11a/0x180 [ 292.920672][T11030] __x64_sys_ioctl+0x6f/0xb0 [ 292.925258][T11030] ? lockdep_hardirqs_on+0x6a/0xe0 [ 292.930354][T11030] do_syscall_64+0x60/0xe0 [ 292.934747][T11030] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 292.940611][T11030] RIP: 0033:0x45c369 [ 292.944479][T11030] Code: Bad RIP value. [ 292.948525][T11030] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.956921][T11030] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 292.964866][T11030] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 292.972947][T11030] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 292.980899][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 292.988857][T11030] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 293.042273][ T2487] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 07:22:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}}, 0x0) 07:22:35 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:35 executing program 2 (fault-call:8 fault-nth:32): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 293.122073][ T2487] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 293.142172][ T2487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 293.154173][ T2487] usb 6-1: SerialNumber: syz [ 293.159940][ T2487] usb 6-1: config 0 descriptor?? [ 293.237384][T11047] FAULT_INJECTION: forcing a failure. [ 293.237384][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 293.279862][T11047] CPU: 0 PID: 11047 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 293.288639][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.298690][T11047] Call Trace: [ 293.301985][T11047] dump_stack+0x18f/0x20d [ 293.306323][T11047] should_fail.cold+0x5/0x14 [ 293.310924][T11047] should_failslab+0x5/0xf [ 293.315342][T11047] kmem_cache_alloc_node_trace+0x27d/0x400 [ 293.321156][T11047] __kmalloc_node+0x38/0x60 [ 293.325668][T11047] blk_mq_realloc_hw_ctxs+0x109/0x1540 [ 293.331132][T11047] ? lockdep_init_map_waits+0x26a/0x890 [ 293.336688][T11047] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 293.342584][T11047] ? blkcg_init_queue+0x183/0x740 [ 293.347609][T11047] ? blk_queue_dma_alignment+0xc/0x50 [ 293.352986][T11047] ? blk_set_default_limits+0x9/0x5d0 [ 293.358371][T11047] blk_mq_init_queue+0x81/0xd0 [ 293.363126][T11047] loop_add+0x2cb/0x8b0 [ 293.367283][T11047] loop_control_ioctl+0x16c/0x480 [ 293.372309][T11047] ? loop_lookup+0x1d0/0x1d0 [ 293.376900][T11047] ? __fget_files+0x294/0x400 [ 293.381586][T11047] ? loop_lookup+0x1d0/0x1d0 [ 293.386182][T11047] ksys_ioctl+0x11a/0x180 [ 293.390513][T11047] __x64_sys_ioctl+0x6f/0xb0 [ 293.395102][T11047] ? lockdep_hardirqs_on+0x6a/0xe0 [ 293.400213][T11047] do_syscall_64+0x60/0xe0 [ 293.404630][T11047] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 293.410515][T11047] RIP: 0033:0x45c369 [ 293.414527][T11047] Code: Bad RIP value. [ 293.418566][T11047] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.426951][T11047] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 293.434895][T11047] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 293.442839][T11047] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 293.450803][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 293.458774][T11047] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 293.478698][ T2487] usb 6-1: USB disconnect, device number 53 07:22:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}}, 0x0) 07:22:36 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c25, 0x0) 07:22:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r6, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r6, 0x618, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8248}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0xc6d7336a368dd10e}, 0x0) write$evdev(r0, &(0x7f0000000040), 0x373) 07:22:36 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:36 executing program 2 (fault-call:8 fault-nth:33): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:36 executing program 5: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 294.084501][T11076] FAULT_INJECTION: forcing a failure. [ 294.084501][T11076] name failslab, interval 1, probability 0, space 0, times 0 07:22:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x20}}, 0x0) [ 294.173103][T11076] CPU: 0 PID: 11076 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 294.181793][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.191847][T11076] Call Trace: [ 294.195144][T11076] dump_stack+0x18f/0x20d [ 294.199484][T11076] should_fail.cold+0x5/0x14 [ 294.204082][T11076] should_failslab+0x5/0xf [ 294.208511][T11076] kmem_cache_alloc_node_trace+0x27d/0x400 [ 294.214326][T11076] __kmalloc_node+0x38/0x60 [ 294.218837][T11076] blk_mq_realloc_hw_ctxs+0x92d/0x1540 [ 294.224303][T11076] ? lockdep_init_map_waits+0x26a/0x890 [ 294.229857][T11076] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 294.235756][T11076] ? blkcg_init_queue+0x183/0x740 [ 294.240779][T11076] ? blk_queue_dma_alignment+0xc/0x50 [ 294.246204][T11076] ? blk_set_default_limits+0x9/0x5d0 [ 294.251584][T11076] blk_mq_init_queue+0x81/0xd0 [ 294.256351][T11076] loop_add+0x2cb/0x8b0 [ 294.260520][T11076] loop_control_ioctl+0x16c/0x480 [ 294.265552][T11076] ? loop_lookup+0x1d0/0x1d0 [ 294.270142][T11076] ? __fget_files+0x294/0x400 [ 294.274836][T11076] ? loop_lookup+0x1d0/0x1d0 [ 294.279425][T11076] ksys_ioctl+0x11a/0x180 [ 294.283758][T11076] __x64_sys_ioctl+0x6f/0xb0 [ 294.288348][T11076] ? lockdep_hardirqs_on+0x6a/0xe0 [ 294.293461][T11076] do_syscall_64+0x60/0xe0 [ 294.297898][T11076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 294.303786][T11076] RIP: 0033:0x45c369 [ 294.307668][T11076] Code: Bad RIP value. [ 294.311734][T11076] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:22:36 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c26, 0x0) 07:22:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x80000) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000001c0)=0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) getpeername(r2, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000180)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 294.320153][T11076] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 294.328125][T11076] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 294.336096][T11076] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 294.344065][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 294.352037][T11076] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:36 executing program 5: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:36 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:36 executing program 2 (fault-call:8 fault-nth:34): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x20}}, 0x0) 07:22:36 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c27, 0x0) [ 294.617285][T11109] FAULT_INJECTION: forcing a failure. [ 294.617285][T11109] name failslab, interval 1, probability 0, space 0, times 0 [ 294.724087][T11109] CPU: 1 PID: 11109 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 294.732781][T11109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.742831][T11109] Call Trace: [ 294.746125][T11109] dump_stack+0x18f/0x20d [ 294.750461][T11109] should_fail.cold+0x5/0x14 [ 294.755056][T11109] should_failslab+0x5/0xf [ 294.759475][T11109] kmem_cache_alloc_node_trace+0x27d/0x400 [ 294.765287][T11109] __kmalloc_node+0x38/0x60 [ 294.769799][T11109] blk_mq_realloc_hw_ctxs+0xbe4/0x1540 [ 294.775278][T11109] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 294.781178][T11109] ? blkcg_init_queue+0x183/0x740 [ 294.786206][T11109] ? blk_queue_dma_alignment+0xc/0x50 [ 294.791578][T11109] ? blk_set_default_limits+0x9/0x5d0 [ 294.796964][T11109] blk_mq_init_queue+0x81/0xd0 [ 294.801735][T11109] loop_add+0x2cb/0x8b0 [ 294.805900][T11109] loop_control_ioctl+0x16c/0x480 [ 294.810926][T11109] ? loop_lookup+0x1d0/0x1d0 [ 294.815521][T11109] ? __fget_files+0x294/0x400 [ 294.820208][T11109] ? loop_lookup+0x1d0/0x1d0 [ 294.824799][T11109] ksys_ioctl+0x11a/0x180 [ 294.829134][T11109] __x64_sys_ioctl+0x6f/0xb0 [ 294.833723][T11109] ? lockdep_hardirqs_on+0x6a/0xe0 [ 294.838838][T11109] do_syscall_64+0x60/0xe0 [ 294.843257][T11109] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 294.849237][T11109] RIP: 0033:0x45c369 [ 294.853125][T11109] Code: Bad RIP value. [ 294.857185][T11109] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.865594][T11109] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 07:22:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$reject(0x13, 0x0, 0xfff, 0x5a2, r6) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000040), 0x373) 07:22:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x20}}, 0x0) 07:22:37 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 294.873561][T11109] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 294.881528][T11109] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 294.889524][T11109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 294.897494][T11109] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:37 executing program 5: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c28, 0x0) 07:22:37 executing program 2 (fault-call:8 fault-nth:35): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 295.204578][T11141] FAULT_INJECTION: forcing a failure. [ 295.204578][T11141] name failslab, interval 1, probability 0, space 0, times 0 07:22:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 295.300651][T11141] CPU: 0 PID: 11141 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 295.309351][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.319401][T11141] Call Trace: [ 295.322695][T11141] dump_stack+0x18f/0x20d [ 295.327038][T11141] should_fail.cold+0x5/0x14 [ 295.331632][T11141] should_failslab+0x5/0xf [ 295.336048][T11141] kmem_cache_alloc_node_trace+0x27d/0x400 [ 295.341871][T11141] __kmalloc_node+0x38/0x60 07:22:37 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 295.346376][T11141] sbitmap_init_node+0x28e/0x4f0 [ 295.351313][T11141] ? kasan_unpoison_shadow+0x33/0x40 [ 295.356601][T11141] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 295.362503][T11141] blk_mq_realloc_hw_ctxs+0xc56/0x1540 [ 295.367978][T11141] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 295.373869][T11141] ? blkcg_init_queue+0x183/0x740 [ 295.378891][T11141] ? blk_queue_dma_alignment+0xc/0x50 [ 295.384259][T11141] ? blk_set_default_limits+0x9/0x5d0 [ 295.389640][T11141] blk_mq_init_queue+0x81/0xd0 [ 295.394408][T11141] loop_add+0x2cb/0x8b0 [ 295.398566][T11141] loop_control_ioctl+0x16c/0x480 [ 295.403584][T11141] ? loop_lookup+0x1d0/0x1d0 [ 295.408165][T11141] ? __fget_files+0x294/0x400 [ 295.412843][T11141] ? loop_lookup+0x1d0/0x1d0 [ 295.417426][T11141] ksys_ioctl+0x11a/0x180 [ 295.421749][T11141] __x64_sys_ioctl+0x6f/0xb0 [ 295.426339][T11141] ? lockdep_hardirqs_on+0x6a/0xe0 [ 295.431445][T11141] do_syscall_64+0x60/0xe0 [ 295.435859][T11141] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 295.441744][T11141] RIP: 0033:0x45c369 [ 295.445620][T11141] Code: Bad RIP value. 07:22:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c29, 0x0) [ 295.449677][T11141] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.458080][T11141] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 295.466044][T11141] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 295.474007][T11141] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 295.481985][T11141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 295.489947][T11141] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2a, 0x0) 07:22:37 executing program 2 (fault-call:8 fault-nth:36): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 295.790734][T11159] FAULT_INJECTION: forcing a failure. [ 295.790734][T11159] name failslab, interval 1, probability 0, space 0, times 0 [ 295.872213][T11159] CPU: 1 PID: 11159 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 295.880907][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.890951][T11159] Call Trace: [ 295.894234][T11159] dump_stack+0x18f/0x20d [ 295.898557][T11159] should_fail.cold+0x5/0x14 [ 295.903144][T11159] should_failslab+0x5/0xf [ 295.907572][T11159] kmem_cache_alloc_node_trace+0x27d/0x400 [ 295.913384][T11159] __alloc_disk_node+0x69/0x3a0 [ 295.918242][T11159] loop_add+0x388/0x8b0 [ 295.922493][T11159] loop_control_ioctl+0x16c/0x480 [ 295.927504][T11159] ? loop_lookup+0x1d0/0x1d0 [ 295.932079][T11159] ? __fget_files+0x294/0x400 [ 295.936760][T11159] ? loop_lookup+0x1d0/0x1d0 [ 295.941337][T11159] ksys_ioctl+0x11a/0x180 [ 295.945644][T11159] __x64_sys_ioctl+0x6f/0xb0 [ 295.950219][T11159] ? lockdep_hardirqs_on+0x6a/0xe0 [ 295.955330][T11159] do_syscall_64+0x60/0xe0 [ 295.959751][T11159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 295.965653][T11159] RIP: 0033:0x45c369 [ 295.969538][T11159] Code: Bad RIP value. [ 295.973597][T11159] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.982004][T11159] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 295.989976][T11159] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 295.997949][T11159] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 296.006043][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 296.014013][T11159] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 07:22:38 executing program 5: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x0, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2b, 0x0) 07:22:38 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:38 executing program 2 (fault-call:8 fault-nth:37): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 296.213357][T11178] FAULT_INJECTION: forcing a failure. [ 296.213357][T11178] name failslab, interval 1, probability 0, space 0, times 0 07:22:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="25000000000000000000010000"], 0x20}}, 0x0) [ 296.287960][T11178] CPU: 1 PID: 11178 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 296.296754][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.306805][T11178] Call Trace: [ 296.310097][T11178] dump_stack+0x18f/0x20d [ 296.314440][T11178] should_fail.cold+0x5/0x14 [ 296.319037][T11178] should_failslab+0x5/0xf [ 296.323455][T11178] kmem_cache_alloc_node_trace+0x27d/0x400 [ 296.329267][T11178] __kmalloc_node+0x38/0x60 [ 296.333777][T11178] blk_mq_realloc_hw_ctxs+0x109/0x1540 [ 296.339245][T11178] ? lockdep_init_map_waits+0x26a/0x890 [ 296.344806][T11178] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 296.350706][T11178] ? blkcg_init_queue+0x183/0x740 [ 296.355736][T11178] ? blk_queue_dma_alignment+0xc/0x50 [ 296.361115][T11178] ? blk_set_default_limits+0x9/0x5d0 [ 296.366493][T11178] blk_mq_init_queue+0x81/0xd0 [ 296.371259][T11178] loop_add+0x2cb/0x8b0 [ 296.375424][T11178] loop_control_ioctl+0x16c/0x480 [ 296.380450][T11178] ? loop_lookup+0x1d0/0x1d0 [ 296.385040][T11178] ? __fget_files+0x294/0x400 [ 296.389730][T11178] ? loop_lookup+0x1d0/0x1d0 [ 296.394335][T11178] ksys_ioctl+0x11a/0x180 [ 296.398693][T11178] __x64_sys_ioctl+0x6f/0xb0 [ 296.403286][T11178] ? lockdep_hardirqs_on+0x6a/0xe0 [ 296.408402][T11178] do_syscall_64+0x60/0xe0 [ 296.412824][T11178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 296.418712][T11178] RIP: 0033:0x45c369 [ 296.422595][T11178] Code: Bad RIP value. [ 296.426657][T11178] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.435068][T11178] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 296.443040][T11178] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 296.451004][T11178] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 296.458968][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 296.466934][T11178] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2c, 0x0) 07:22:38 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:38 executing program 2 (fault-call:8 fault-nth:38): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r4, 0x423, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) [ 296.637099][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:22:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="25000000000000000000010000"], 0x20}}, 0x0) 07:22:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2d, 0x0) 07:22:39 executing program 5: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 296.790804][T11200] FAULT_INJECTION: forcing a failure. [ 296.790804][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 296.830152][T11200] CPU: 0 PID: 11200 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 296.838833][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.848882][T11200] Call Trace: [ 296.852176][T11200] dump_stack+0x18f/0x20d [ 296.856513][T11200] should_fail.cold+0x5/0x14 [ 296.861108][T11200] should_failslab+0x5/0xf [ 296.865528][T11200] kmem_cache_alloc_trace+0x240/0x2d0 [ 296.870915][T11200] blk_mq_init_allocated_queue+0xfe/0x13f0 [ 296.876725][T11200] ? blkcg_init_queue+0x183/0x740 [ 296.881748][T11200] ? blk_queue_dma_alignment+0xc/0x50 [ 296.887118][T11200] ? blk_set_default_limits+0x9/0x5d0 [ 296.892494][T11200] ? __blk_alloc_queue+0x527/0x700 [ 296.897608][T11200] blk_mq_init_queue+0x81/0xd0 [ 296.902371][T11200] loop_add+0x2cb/0x8b0 [ 296.906530][T11200] loop_control_ioctl+0x16c/0x480 [ 296.911564][T11200] ? loop_lookup+0x1d0/0x1d0 [ 296.916148][T11200] ? __fget_files+0x294/0x400 [ 296.920815][T11200] ? loop_lookup+0x1d0/0x1d0 [ 296.922659][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.925398][T11200] ksys_ioctl+0x11a/0x180 [ 296.938966][T11200] __x64_sys_ioctl+0x6f/0xb0 07:22:39 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 296.943571][T11200] ? lockdep_hardirqs_on+0x6a/0xe0 [ 296.948682][T11200] do_syscall_64+0x60/0xe0 [ 296.953094][T11200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 296.958966][T11200] RIP: 0033:0x45c369 [ 296.962838][T11200] Code: Bad RIP value. [ 296.966888][T11200] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.975286][T11200] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 296.983245][T11200] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 07:22:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="25000000000000000000010000"], 0x20}}, 0x0) [ 296.991191][T11200] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 296.999133][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 297.007086][T11200] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:22:39 executing program 2 (fault-call:8 fault-nth:39): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 297.074941][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:22:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2e, 0x0) 07:22:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250000000000000000000100000009"], 0x20}}, 0x0) [ 297.243563][T11224] FAULT_INJECTION: forcing a failure. [ 297.243563][T11224] name failslab, interval 1, probability 0, space 0, times 0 [ 297.291300][T11224] CPU: 0 PID: 11224 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 297.299988][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.310040][T11224] Call Trace: [ 297.313334][T11224] dump_stack+0x18f/0x20d [ 297.317687][T11224] should_fail.cold+0x5/0x14 [ 297.322305][T11224] should_failslab+0x5/0xf [ 297.326734][T11224] kmem_cache_alloc_node_trace+0x27d/0x400 [ 297.332552][T11224] blk_alloc_flush_queue+0x88/0x370 [ 297.337763][T11224] blk_mq_realloc_hw_ctxs+0xdc1/0x1540 [ 297.343239][T11224] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 297.349134][T11224] ? blkcg_init_queue+0x183/0x740 [ 297.354160][T11224] ? blk_queue_dma_alignment+0xc/0x50 [ 297.359531][T11224] ? blk_set_default_limits+0x9/0x5d0 [ 297.364908][T11224] blk_mq_init_queue+0x81/0xd0 [ 297.369675][T11224] loop_add+0x2cb/0x8b0 [ 297.373933][T11224] loop_control_ioctl+0x16c/0x480 [ 297.378961][T11224] ? loop_lookup+0x1d0/0x1d0 [ 297.383553][T11224] ? __fget_files+0x294/0x400 [ 297.388235][T11224] ? loop_lookup+0x1d0/0x1d0 [ 297.392824][T11224] ksys_ioctl+0x11a/0x180 [ 297.397159][T11224] __x64_sys_ioctl+0x6f/0xb0 [ 297.401867][T11224] ? lockdep_hardirqs_on+0x6a/0xe0 [ 297.406988][T11224] do_syscall_64+0x60/0xe0 [ 297.411409][T11224] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 297.417288][T11224] RIP: 0033:0x45c369 [ 297.421153][T11224] Code: Bad RIP value. [ 297.425198][T11224] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.433599][T11224] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 07:22:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250000000000000000000100000009"], 0x20}}, 0x0) 07:22:39 executing program 5: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 297.441586][T11224] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 297.449538][T11224] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 297.457483][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 297.465432][T11224] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:39 executing program 2 (fault-call:8 fault-nth:40): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:39 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c2f, 0x0) 07:22:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250000000000000000000100000009"], 0x20}}, 0x0) 07:22:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, &(0x7f0000000080)=0x84) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r3) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) [ 297.708674][T11246] FAULT_INJECTION: forcing a failure. [ 297.708674][T11246] name failslab, interval 1, probability 0, space 0, times 0 [ 297.802126][T11246] CPU: 0 PID: 11246 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 297.810817][T11246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.820862][T11246] Call Trace: [ 297.824152][T11246] dump_stack+0x18f/0x20d [ 297.828489][T11246] should_fail.cold+0x5/0x14 [ 297.833084][T11246] should_failslab+0x5/0xf [ 297.837507][T11246] kmem_cache_alloc_node_trace+0x27d/0x400 [ 297.843319][T11246] __alloc_disk_node+0x69/0x3a0 [ 297.848175][T11246] loop_add+0x388/0x8b0 [ 297.852335][T11246] loop_control_ioctl+0x16c/0x480 [ 297.857359][T11246] ? loop_lookup+0x1d0/0x1d0 [ 297.861947][T11246] ? __fget_files+0x294/0x400 [ 297.866633][T11246] ? loop_lookup+0x1d0/0x1d0 [ 297.871223][T11246] ksys_ioctl+0x11a/0x180 [ 297.875566][T11246] __x64_sys_ioctl+0x6f/0xb0 [ 297.880154][T11246] ? lockdep_hardirqs_on+0x6a/0xe0 [ 297.885267][T11246] do_syscall_64+0x60/0xe0 [ 297.889695][T11246] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 297.895586][T11246] RIP: 0033:0x45c369 07:22:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="25000000000000000000010000000900"], 0x20}}, 0x0) 07:22:40 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c30, 0x0) [ 297.899466][T11246] Code: Bad RIP value. [ 297.903520][T11246] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.911926][T11246] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 297.919890][T11246] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 297.927868][T11246] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 297.935836][T11246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 [ 297.943801][T11246] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:40 executing program 2 (fault-call:8 fault-nth:41): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c31, 0x0) 07:22:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/124) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x20) write$evdev(r0, &(0x7f0000000040), 0x373) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x40, 0x80) [ 298.168593][T11269] FAULT_INJECTION: forcing a failure. [ 298.168593][T11269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.181797][T11269] CPU: 0 PID: 11269 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 298.190447][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.200479][T11269] Call Trace: [ 298.203762][T11269] dump_stack+0x18f/0x20d [ 298.208080][T11269] should_fail.cold+0x5/0x14 [ 298.212656][T11269] __alloc_pages_nodemask+0x1a3/0x930 [ 298.218010][T11269] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 298.223970][T11269] ? lockdep_hardirqs_on+0x6a/0xe0 [ 298.229065][T11269] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 298.235803][T11269] ? sbitmap_resize+0x32e/0x410 [ 298.240636][T11269] ? lock_acquire+0x1f1/0xad0 [ 298.245294][T11269] ? fs_reclaim_acquire+0xf/0x40 [ 298.250213][T11269] ? find_held_lock+0x2d/0x110 [ 298.254970][T11269] cache_grow_begin+0x8c/0xb20 [ 298.259718][T11269] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 298.265158][T11269] cache_alloc_refill+0x27b/0x340 [ 298.270163][T11269] ? lockdep_hardirqs_off+0x66/0xa0 [ 298.275344][T11269] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 298.281143][T11269] __alloc_disk_node+0x69/0x3a0 [ 298.285987][T11269] loop_add+0x388/0x8b0 [ 298.290131][T11269] loop_control_ioctl+0x16c/0x480 [ 298.295133][T11269] ? loop_lookup+0x1d0/0x1d0 [ 298.299702][T11269] ? __fget_files+0x294/0x400 [ 298.304365][T11269] ? loop_lookup+0x1d0/0x1d0 [ 298.308932][T11269] ksys_ioctl+0x11a/0x180 [ 298.313245][T11269] __x64_sys_ioctl+0x6f/0xb0 [ 298.317825][T11269] ? lockdep_hardirqs_on+0x6a/0xe0 [ 298.322917][T11269] do_syscall_64+0x60/0xe0 [ 298.327312][T11269] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 298.333181][T11269] RIP: 0033:0x45c369 [ 298.337048][T11269] Code: Bad RIP value. [ 298.341091][T11269] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.349478][T11269] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 298.357427][T11269] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 298.365376][T11269] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 298.373339][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 298.381284][T11269] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:40 executing program 5: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40000) 07:22:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="25000000000000000000010000000900"], 0x20}}, 0x0) 07:22:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c32, 0x0) 07:22:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="25000000000000000000010000000900"], 0x20}}, 0x0) 07:22:40 executing program 2 (fault-call:8 fault-nth:42): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2000}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$cgroup_ro(r6, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:22:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c33, 0x0) 07:22:40 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 298.845563][T11301] FAULT_INJECTION: forcing a failure. [ 298.845563][T11301] name failslab, interval 1, probability 0, space 0, times 0 [ 298.907733][T11301] CPU: 1 PID: 11301 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 298.916425][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.926471][T11301] Call Trace: [ 298.929764][T11301] dump_stack+0x18f/0x20d [ 298.934106][T11301] should_fail.cold+0x5/0x14 [ 298.938699][T11301] should_failslab+0x5/0xf [ 298.943125][T11301] kmem_cache_alloc_node_trace+0x27d/0x400 [ 298.948944][T11301] __alloc_disk_node+0x69/0x3a0 [ 298.953800][T11301] loop_add+0x388/0x8b0 [ 298.957967][T11301] loop_control_ioctl+0x16c/0x480 [ 298.962994][T11301] ? loop_lookup+0x1d0/0x1d0 [ 298.967584][T11301] ? __fget_files+0x294/0x400 [ 298.972271][T11301] ? loop_lookup+0x1d0/0x1d0 [ 298.976866][T11301] ksys_ioctl+0x11a/0x180 [ 298.981197][T11301] __x64_sys_ioctl+0x6f/0xb0 [ 298.985788][T11301] ? lockdep_hardirqs_on+0x6a/0xe0 [ 298.990902][T11301] do_syscall_64+0x60/0xe0 [ 298.995322][T11301] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 299.001208][T11301] RIP: 0033:0x45c369 07:22:41 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd3090400000000000000"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10400, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000100)=""/254) r5 = openat$cgroup_ro(r3, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) 07:22:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:41 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 299.005086][T11301] Code: Bad RIP value. [ 299.009146][T11301] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.017554][T11301] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 299.025523][T11301] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 299.033490][T11301] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 299.041456][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 299.049422][T11301] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac 07:22:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x1412, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4801) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:22:41 executing program 2 (fault-call:8 fault-nth:43): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:41 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c34, 0x0) [ 299.247983][T11319] FAULT_INJECTION: forcing a failure. [ 299.247983][T11319] name failslab, interval 1, probability 0, space 0, times 0 [ 299.328377][T11319] CPU: 0 PID: 11319 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 299.337071][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.347122][T11319] Call Trace: [ 299.350416][T11319] dump_stack+0x18f/0x20d [ 299.354754][T11319] should_fail.cold+0x5/0x14 [ 299.359354][T11319] should_failslab+0x5/0xf [ 299.363775][T11319] kmem_cache_alloc_node_trace+0x27d/0x400 [ 299.369597][T11319] blk_alloc_flush_queue+0x88/0x370 07:22:41 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x2f) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103009a8247a900000000001b0015fd57361de1999ca3f68cb6e22356060fde5ea32c6193ba08000100", @ANYRES32=r6, @ANYBLOB="96ec50cb6a0800568f6cd8a16e0000000031a5270f"], 0x20}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000480)={0x2, @pix_mp={0x1, 0xffffffe0, 0x52424752, 0x5, 0xb, [{0xc30, 0x4}, {0xffffffba, 0xd5}, {0x0, 0x3}, {0x3ff, 0x8}, {0x6, 0x100}, {0x0, 0x1}, {0x1}, {0xf3c, 0x80000001}], 0x2e, 0x2, 0x1, 0x1, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="66024000", @ANYRES16=r4, @ANYBLOB="000429bd7000fcdbdf250a000000a000028004000100430005002676b419e29a6b66948c2d5f8173493efc6e6ed9aa77e966b6189c3264839492266f0fe32b7381e7389a85b3963ba2b6a1d66e329b5a27f02cc9531d7e89c800040001001f000500837de7a55cff01c321be9eb8b913a3464e3ab3777161e329d57734002e0004005c3090e7be7c0647069c882c3c4c6346a3f06018cb7582672b8df182c6c6f8c4a31cae7642c1e3a50d65000004000280d800028004000100080002000200008032000500d5daf562d22f08fb8145336411301de926760a515b5d4599938ce40118f45bd725dd65ef58f2995cdfe6d1b7d97c00004d00050083320b61525ea2a752c0e2351e91363d5dff766e45254c7064935caa1b8a088efbe81d5e468cb2aa34d47abec49e21de889a1eaa8b9814000373369edfd3569b7ad52bbcd6f722d96900000008000200080000003c000400762fc39948bcd27f06362197324cded7320aeb80a65db062d58af3239ab85c565069f81d227564f453b8196bba90f30cc5438c391513a88aef00030067ab92ed71515f432b437203f5136e06a9f71c0080b0a34797ce21edaf117ac22871224ba599483bedcc6fee16a9746b734c9b0561cd0094f1dbec15733dceb5e000dac4b57bc635e7560b91f854562ff0fb900ba8b3b5bd7bc431f28094d3947cbe8c24cb0d562b0e38d5ef97da4338d580e988df5eb4f0058854c4138f3d77c706e715ad649c7bf1464303eb74247a2e1e39dc8dddf8fb9701ab0ddd9612e00ea6e56be93491597035734c5fecbf29bb1c776d61537805b3708785da02b12cf17616e447e78ff8500be08cc82485aa4e98492e95da2d4951ecde435dc3dd3cfe8c1ee92400000000000000", @ANYRES64], 0x280}, 0x1, 0x0, 0x0, 0x4044000}, 0x48d0) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 299.374801][T11319] blk_mq_realloc_hw_ctxs+0xdc1/0x1540 [ 299.380281][T11319] blk_mq_init_allocated_queue+0x32f/0x13f0 [ 299.386178][T11319] ? blkcg_init_queue+0x183/0x740 [ 299.391202][T11319] ? blk_queue_dma_alignment+0xc/0x50 [ 299.396570][T11319] ? blk_set_default_limits+0x9/0x5d0 [ 299.401948][T11319] blk_mq_init_queue+0x81/0xd0 [ 299.406715][T11319] loop_add+0x2cb/0x8b0 [ 299.410882][T11319] loop_control_ioctl+0x16c/0x480 [ 299.415911][T11319] ? loop_lookup+0x1d0/0x1d0 [ 299.420515][T11319] ? __fget_files+0x294/0x400 07:22:41 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 299.425198][T11319] ? loop_lookup+0x1d0/0x1d0 [ 299.429781][T11319] ksys_ioctl+0x11a/0x180 [ 299.434105][T11319] __x64_sys_ioctl+0x6f/0xb0 [ 299.438711][T11319] ? lockdep_hardirqs_on+0x6a/0xe0 [ 299.443825][T11319] do_syscall_64+0x60/0xe0 [ 299.448245][T11319] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 299.454127][T11319] RIP: 0033:0x45c369 [ 299.458008][T11319] Code: Bad RIP value. [ 299.462066][T11319] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.470462][T11319] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 07:22:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 299.478409][T11319] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 299.486355][T11319] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 299.494299][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 299.502243][T11319] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c 07:22:41 executing program 2 (fault-call:8 fault-nth:44): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:41 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c35, 0x0) 07:22:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 299.697394][ T2534] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 299.734273][T11343] FAULT_INJECTION: forcing a failure. [ 299.734273][T11343] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.747473][T11343] CPU: 0 PID: 11343 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 299.756222][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.766272][T11343] Call Trace: [ 299.769564][T11343] dump_stack+0x18f/0x20d [ 299.773887][T11343] should_fail.cold+0x5/0x14 [ 299.778460][T11343] __alloc_pages_nodemask+0x1a3/0x930 [ 299.783815][T11343] ? fs_reclaim_acquire+0xf/0x40 [ 299.788736][T11343] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 299.795488][T11343] ? mark_lock+0xbc/0x1710 [ 299.799913][T11343] ? mark_held_locks+0x9f/0xe0 [ 299.804687][T11343] cache_grow_begin+0x8c/0xb20 [ 299.809470][T11343] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 299.815105][T11343] cache_alloc_refill+0x27b/0x340 [ 299.820129][T11343] ? lockdep_hardirqs_off+0x66/0xa0 [ 299.825332][T11343] kmem_cache_alloc_node_trace+0x3ea/0x400 [ 299.831133][T11343] __kmalloc_node+0x38/0x60 [ 299.835634][T11343] blk_mq_alloc_rq_map+0xc3/0x200 [ 299.840659][T11343] ? trace_hardirqs_on+0x5f/0x220 [ 299.845685][T11343] blk_mq_init_sched+0x20a/0xb50 [ 299.850634][T11343] elevator_init_mq+0x2e2/0x400 [ 299.855487][T11343] __device_add_disk+0x985/0x1200 [ 299.860508][T11343] ? sprintf+0xc0/0x100 [ 299.864645][T11343] ? blk_alloc_devt+0x4b0/0x4b0 [ 299.869476][T11343] ? __init_waitqueue_head+0x97/0x110 [ 299.874829][T11343] ? pm_runtime_init+0x2cf/0x3b0 [ 299.879744][T11343] ? lockdep_init_map_waits+0x26a/0x890 [ 299.885267][T11343] loop_add+0x616/0x8b0 [ 299.889413][T11343] loop_control_ioctl+0x16c/0x480 [ 299.894433][T11343] ? loop_lookup+0x1d0/0x1d0 [ 299.899001][T11343] ? __fget_files+0x294/0x400 [ 299.903695][T11343] ? loop_lookup+0x1d0/0x1d0 [ 299.908273][T11343] ksys_ioctl+0x11a/0x180 [ 299.912587][T11343] __x64_sys_ioctl+0x6f/0xb0 [ 299.917161][T11343] ? lockdep_hardirqs_on+0x6a/0xe0 [ 299.922258][T11343] do_syscall_64+0x60/0xe0 [ 299.926651][T11343] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 299.932557][T11343] RIP: 0033:0x45c369 [ 299.936419][T11343] Code: Bad RIP value. [ 299.940465][T11343] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.948861][T11343] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 299.956806][T11343] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 299.964751][T11343] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 299.972846][T11343] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c [ 299.980792][T11343] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 300.251365][ T2534] usb 6-1: device descriptor read/64, error 18 [ 300.671365][ T2534] usb 6-1: device descriptor read/64, error 18 [ 300.961346][ T2534] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 301.251367][ T2534] usb 6-1: device descriptor read/64, error 18 [ 301.671241][ T2534] usb 6-1: device descriptor read/64, error 18 [ 301.802112][ T2534] usb usb6-port1: attempt power cycle [ 302.042505][ T0] NOHZ: local_softirq_pending 08 07:22:44 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/137, 0x89) 07:22:44 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c36, 0x0) 07:22:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:44 executing program 2 (fault-call:8 fault-nth:45): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c37, 0x0) 07:22:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 302.491308][T11385] FAULT_INJECTION: forcing a failure. [ 302.491308][T11385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.526141][T11385] CPU: 0 PID: 11385 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 302.534824][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.544874][T11385] Call Trace: [ 302.548179][T11385] dump_stack+0x18f/0x20d [ 302.552519][T11385] should_fail.cold+0x5/0x14 [ 302.557118][T11385] __alloc_pages_nodemask+0x1a3/0x930 [ 302.562494][T11385] ? mark_lock+0xbc/0x1710 [ 302.566915][T11385] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 302.573678][T11385] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 302.579570][T11385] ? __cpu_to_node+0x7b/0xa0 [ 302.584156][T11385] ? blk_mq_hw_queue_to_node+0xe6/0x140 [ 302.589709][T11385] blk_mq_alloc_rqs+0x235/0x790 [ 302.594555][T11385] ? blk_mq_alloc_rq_map+0x8e/0x200 [ 302.599743][T11385] blk_mq_init_sched+0x25d/0xb50 [ 302.604688][T11385] elevator_init_mq+0x2e2/0x400 [ 302.609527][T11385] __device_add_disk+0x985/0x1200 [ 302.614547][T11385] ? sprintf+0xc0/0x100 [ 302.618707][T11385] ? blk_alloc_devt+0x4b0/0x4b0 [ 302.623662][T11385] ? __init_waitqueue_head+0x97/0x110 [ 302.629032][T11385] ? pm_runtime_init+0x2cf/0x3b0 [ 302.633980][T11385] ? lockdep_init_map_waits+0x26a/0x890 [ 302.639533][T11385] loop_add+0x616/0x8b0 [ 302.643695][T11385] loop_control_ioctl+0x16c/0x480 [ 302.648719][T11385] ? loop_lookup+0x1d0/0x1d0 [ 302.653311][T11385] ? __fget_files+0x294/0x400 [ 302.657992][T11385] ? loop_lookup+0x1d0/0x1d0 [ 302.662578][T11385] ksys_ioctl+0x11a/0x180 [ 302.666907][T11385] __x64_sys_ioctl+0x6f/0xb0 [ 302.671494][T11385] ? lockdep_hardirqs_on+0x6a/0xe0 [ 302.676604][T11385] do_syscall_64+0x60/0xe0 [ 302.681021][T11385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 302.686911][T11385] RIP: 0033:0x45c369 [ 302.690790][T11385] Code: Bad RIP value. [ 302.694849][T11385] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.703261][T11385] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 302.711228][T11385] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 302.719205][T11385] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 302.727169][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 302.735134][T11385] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac 07:22:45 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:45 executing program 2 (fault-call:8 fault-nth:46): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:45 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c38, 0x0) [ 302.831150][ T2534] usb 6-1: new high-speed USB device number 56 using dummy_hcd 07:22:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 303.031448][T11407] FAULT_INJECTION: forcing a failure. [ 303.031448][T11407] name failslab, interval 1, probability 0, space 0, times 0 [ 303.073366][T11407] CPU: 0 PID: 11407 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 303.082051][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.092099][T11407] Call Trace: [ 303.095390][T11407] dump_stack+0x18f/0x20d [ 303.099726][T11407] should_fail.cold+0x5/0x14 [ 303.104323][T11407] should_failslab+0x5/0xf [ 303.108742][T11407] kmem_cache_alloc_node_trace+0x27d/0x400 [ 303.114556][T11407] __kmalloc_node+0x38/0x60 [ 303.119064][T11407] blk_mq_alloc_rq_map+0x104/0x200 [ 303.124172][T11407] ? trace_hardirqs_on+0x5f/0x220 [ 303.129196][T11407] blk_mq_init_sched+0x20a/0xb50 [ 303.134143][T11407] elevator_init_mq+0x2e2/0x400 [ 303.139002][T11407] __device_add_disk+0x985/0x1200 [ 303.144033][T11407] ? sprintf+0xc0/0x100 [ 303.148192][T11407] ? blk_alloc_devt+0x4b0/0x4b0 [ 303.153051][T11407] ? __init_waitqueue_head+0x97/0x110 [ 303.158419][T11407] ? pm_runtime_init+0x2cf/0x3b0 [ 303.163359][T11407] ? lockdep_init_map_waits+0x26a/0x890 [ 303.168908][T11407] loop_add+0x616/0x8b0 [ 303.173071][T11407] loop_control_ioctl+0x16c/0x480 [ 303.178096][T11407] ? loop_lookup+0x1d0/0x1d0 [ 303.182691][T11407] ? __fget_files+0x294/0x400 [ 303.187376][T11407] ? loop_lookup+0x1d0/0x1d0 [ 303.192068][T11407] ksys_ioctl+0x11a/0x180 [ 303.196405][T11407] __x64_sys_ioctl+0x6f/0xb0 [ 303.200995][T11407] ? lockdep_hardirqs_on+0x6a/0xe0 [ 303.206123][T11407] do_syscall_64+0x60/0xe0 [ 303.210542][T11407] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 303.216427][T11407] RIP: 0033:0x45c369 [ 303.220307][T11407] Code: Bad RIP value. [ 303.224361][T11407] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.232766][T11407] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 303.240730][T11407] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 303.248697][T11407] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 303.256664][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e [ 303.264636][T11407] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac 07:22:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 303.341369][ T2534] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 303.356412][T11407] "mq-deadline" elevator initialization failed, falling back to "none" [ 303.358400][ T2534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 303.465479][ T2534] usb 6-1: SerialNumber: syz [ 303.487526][ T2534] usb 6-1: config 0 descriptor?? [ 303.562144][ T2534] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 303.570283][ T2534] usb 6-1: Detected SIO [ 303.595107][ T2534] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 303.769799][ T2537] usb 6-1: USB disconnect, device number 56 [ 303.787940][ T2537] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 303.811173][ T2537] ftdi_sio 6-1:0.0: device disconnected [ 304.555716][ T2537] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 305.001216][ T2537] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 305.010271][ T2537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 305.030944][ T2537] usb 6-1: SerialNumber: syz [ 305.039940][ T2537] usb 6-1: config 0 descriptor?? [ 305.098153][ T2537] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 305.118655][ T2537] usb 6-1: Detected SIO [ 305.127617][ T2537] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 305.304649][ T17] usb 6-1: USB disconnect, device number 57 [ 305.327075][ T17] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 07:22:47 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cbd31b40030473ed59010000e3010902120001000000000904"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) epoll_create1(0x88a9840fccf6125d) 07:22:47 executing program 2 (fault-call:8 fault-nth:47): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:47 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:47 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c39, 0x0) 07:22:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 305.368399][ T17] ftdi_sio 6-1:0.0: device disconnected 07:22:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 305.521097][T11460] FAULT_INJECTION: forcing a failure. [ 305.521097][T11460] name failslab, interval 1, probability 0, space 0, times 0 [ 305.560924][T11460] CPU: 0 PID: 11460 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 305.569614][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.579769][T11460] Call Trace: [ 305.583063][T11460] dump_stack+0x18f/0x20d [ 305.587401][T11460] should_fail.cold+0x5/0x14 [ 305.591997][T11460] should_failslab+0x5/0xf [ 305.596412][T11460] kmem_cache_alloc_node_trace+0x27d/0x400 [ 305.602226][T11460] elevator_alloc+0x78/0x170 [ 305.606821][T11460] dd_init_queue+0x20/0x440 [ 305.611331][T11460] blk_mq_init_sched+0x5b0/0xb50 [ 305.616282][T11460] elevator_init_mq+0x2e2/0x400 07:22:47 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 305.621141][T11460] __device_add_disk+0x985/0x1200 [ 305.626176][T11460] ? sprintf+0xc0/0x100 [ 305.630334][T11460] ? blk_alloc_devt+0x4b0/0x4b0 [ 305.635192][T11460] ? __init_waitqueue_head+0x97/0x110 [ 305.640651][T11460] ? pm_runtime_init+0x2cf/0x3b0 [ 305.645606][T11460] ? lockdep_init_map_waits+0x26a/0x890 [ 305.651133][T11460] loop_add+0x616/0x8b0 [ 305.655273][T11460] loop_control_ioctl+0x16c/0x480 [ 305.660274][T11460] ? loop_lookup+0x1d0/0x1d0 [ 305.664855][T11460] ? __fget_files+0x294/0x400 [ 305.669544][T11460] ? loop_lookup+0x1d0/0x1d0 [ 305.674124][T11460] ksys_ioctl+0x11a/0x180 [ 305.678438][T11460] __x64_sys_ioctl+0x6f/0xb0 [ 305.683007][T11460] ? lockdep_hardirqs_on+0x6a/0xe0 [ 305.688106][T11460] do_syscall_64+0x60/0xe0 [ 305.692515][T11460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 305.698392][T11460] RIP: 0033:0x45c369 [ 305.702257][T11460] Code: Bad RIP value. [ 305.706295][T11460] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.714685][T11460] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 305.722639][T11460] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 305.730604][T11460] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 305.738551][T11460] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f [ 305.746496][T11460] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 305.829258][T11460] "mq-deadline" elevator initialization failed, falling back to "none" 07:22:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:48 executing program 2 (fault-call:8 fault-nth:48): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c3a, 0x0) [ 306.060944][ T17] usb 6-1: new high-speed USB device number 58 using dummy_hcd 07:22:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 306.211850][T11499] FAULT_INJECTION: forcing a failure. [ 306.211850][T11499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.255645][T11499] CPU: 1 PID: 11499 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 306.264331][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.274379][T11499] Call Trace: [ 306.277676][T11499] dump_stack+0x18f/0x20d [ 306.282116][T11499] should_fail.cold+0x5/0x14 [ 306.286713][T11499] __alloc_pages_nodemask+0x1a3/0x930 [ 306.292098][T11499] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 306.298864][T11499] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 306.304763][T11499] ? __cpu_to_node+0x7b/0xa0 [ 306.309362][T11499] blk_mq_alloc_rqs+0x235/0x790 [ 306.314225][T11499] blk_mq_init_sched+0x25d/0xb50 [ 306.319170][T11499] elevator_init_mq+0x2e2/0x400 [ 306.324025][T11499] __device_add_disk+0x985/0x1200 [ 306.329055][T11499] ? sprintf+0xc0/0x100 [ 306.333209][T11499] ? blk_alloc_devt+0x4b0/0x4b0 [ 306.338064][T11499] ? __init_waitqueue_head+0x97/0x110 [ 306.343432][T11499] ? pm_runtime_init+0x2cf/0x3b0 [ 306.348371][T11499] ? lockdep_init_map_waits+0x26a/0x890 [ 306.354532][T11499] loop_add+0x616/0x8b0 [ 306.358694][T11499] loop_control_ioctl+0x16c/0x480 [ 306.363730][T11499] ? loop_lookup+0x1d0/0x1d0 [ 306.368317][T11499] ? __fget_files+0x294/0x400 [ 306.373000][T11499] ? loop_lookup+0x1d0/0x1d0 [ 306.377589][T11499] ksys_ioctl+0x11a/0x180 [ 306.381923][T11499] __x64_sys_ioctl+0x6f/0xb0 [ 306.386948][T11499] ? lockdep_hardirqs_on+0x6a/0xe0 [ 306.392059][T11499] do_syscall_64+0x60/0xe0 [ 306.396476][T11499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 306.402361][T11499] RIP: 0033:0x45c369 [ 306.406243][T11499] Code: Bad RIP value. [ 306.410300][T11499] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.418705][T11499] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 306.426687][T11499] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 306.434659][T11499] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 306.442624][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030 [ 306.450591][T11499] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac 07:22:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 306.766969][ T17] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 306.779489][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 306.809974][ T17] usb 6-1: SerialNumber: syz [ 306.836948][ T17] usb 6-1: config 0 descriptor?? [ 306.897574][ T17] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 306.909879][ T17] usb 6-1: Detected SIO [ 306.920708][ T17] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 307.103642][ T17] usb 6-1: USB disconnect, device number 58 [ 307.113886][ T17] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 307.144424][ T17] ftdi_sio 6-1:0.0: device disconnected [ 307.884595][ T17] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 308.361865][ T17] usb 6-1: New USB device found, idVendor=0403, idProduct=ed73, bcdDevice= 1.59 [ 308.374374][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=227 [ 308.392811][ T17] usb 6-1: SerialNumber: syz [ 308.400324][ T17] usb 6-1: config 0 descriptor?? 07:22:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c3b, 0x0) 07:22:50 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 07:22:50 executing program 2 (fault-call:8 fault-nth:49): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="4bbf145719908af8971394b8b475d506e180b8527815431ecf2feba861815522b252c967305cf54098c3e3226a99e0c2eaf5d8f1fce21951985b05a76828fbde3f7eb4d5cbb472"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r6, 0xfffd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r6, 0x8001, 0x20}, &(0x7f0000000180)=0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f00000001c0)={0x10001, 0x0, 0xd44, 0x1}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) recvfrom$rxrpc(r8, &(0x7f0000000000)=""/143, 0x8f, 0x101, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) [ 308.490841][ T17] usb 6-1: can't set config #0, error -71 [ 308.526361][ T17] usb 6-1: USB disconnect, device number 59 07:22:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c3c, 0x0) [ 308.682299][T11549] FAULT_INJECTION: forcing a failure. [ 308.682299][T11549] name failslab, interval 1, probability 0, space 0, times 0 [ 308.710752][T11549] CPU: 0 PID: 11549 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 308.719438][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.729492][T11549] Call Trace: [ 308.732783][T11549] dump_stack+0x18f/0x20d [ 308.737122][T11549] should_fail.cold+0x5/0x14 [ 308.741722][T11549] should_failslab+0x5/0xf [ 308.746145][T11549] kmem_cache_alloc_node_trace+0x27d/0x400 [ 308.751961][T11549] elevator_alloc+0x78/0x170 [ 308.757162][T11549] dd_init_queue+0x20/0x440 [ 308.761668][T11549] blk_mq_init_sched+0x5b0/0xb50 [ 308.766611][T11549] elevator_init_mq+0x2e2/0x400 [ 308.771469][T11549] __device_add_disk+0x985/0x1200 [ 308.776508][T11549] ? sprintf+0xc0/0x100 07:22:51 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}]}, 0x30}}, 0x40000) [ 308.780665][T11549] ? blk_alloc_devt+0x4b0/0x4b0 [ 308.785526][T11549] ? __init_waitqueue_head+0x97/0x110 [ 308.790896][T11549] ? pm_runtime_init+0x2cf/0x3b0 [ 308.795837][T11549] ? lockdep_init_map_waits+0x26a/0x890 [ 308.801390][T11549] loop_add+0x616/0x8b0 [ 308.805556][T11549] loop_control_ioctl+0x16c/0x480 [ 308.810575][T11549] ? loop_lookup+0x1d0/0x1d0 [ 308.815161][T11549] ? __fget_files+0x294/0x400 [ 308.819846][T11549] ? loop_lookup+0x1d0/0x1d0 [ 308.824439][T11549] ksys_ioctl+0x11a/0x180 07:22:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000040)={0x800, 0x1, 0xfffffff7}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0xa331}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)={r5, r6}) [ 308.828773][T11549] __x64_sys_ioctl+0x6f/0xb0 [ 308.833363][T11549] ? lockdep_hardirqs_on+0x6a/0xe0 [ 308.838477][T11549] do_syscall_64+0x60/0xe0 [ 308.842903][T11549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 308.848787][T11549] RIP: 0033:0x45c369 [ 308.852669][T11549] Code: Bad RIP value. [ 308.856754][T11549] RSP: 002b:00007fee9446dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.865161][T11549] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 308.873127][T11549] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 308.881096][T11549] RBP: 00007fee9446dca0 R08: 0000000000000000 R09: 0000000000000000 [ 308.889071][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 308.897064][T11549] R13: 0000000000c9fb6f R14: 00007fee9446e9c0 R15: 000000000078bf0c [ 308.929862][T11549] "mq-deadline" elevator initialization failed, falling back to "none" 07:22:51 executing program 2 (fault-call:8 fault-nth:50): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 07:22:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x6) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @ramp}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) getrandom(&(0x7f0000000080)=""/19, 0x13, 0x2) 07:22:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x467, 0x0, 0x0, 0x0, 0x10, "3817029006b933aa1004e19e26d7ae83fb3906"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c3d, 0x0) 07:22:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) [ 309.121211][ T17] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 309.241103][T11584] FAULT_INJECTION: forcing a failure. [ 309.241103][T11584] name failslab, interval 1, probability 0, space 0, times 0 [ 309.270667][T11584] CPU: 0 PID: 11584 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 309.279354][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:22:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r4, @ANYBLOB="2500000000000000000001000000090001"], 0x20}}, 0x0) 07:22:51 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x1405, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}]}, 0x30}}, 0x40000) [ 309.289403][T11584] Call Trace: [ 309.292698][T11584] dump_stack+0x18f/0x20d [ 309.297033][T11584] should_fail.cold+0x5/0x14 [ 309.301627][T11584] should_failslab+0x5/0xf [ 309.306045][T11584] kmem_cache_alloc_trace+0x240/0x2d0 [ 309.311420][T11584] device_create_groups_vargs+0x8a/0x280 [ 309.317048][T11584] device_create+0xdf/0x120 [ 309.321557][T11584] ? device_create_groups_vargs+0x280/0x280 [ 309.327454][T11584] ? pointer+0x970/0x970 [ 309.331700][T11584] ? elevator_init_mq+0x2f4/0x400 [ 309.336733][T11584] bdi_register_va.part.0+0x9c/0x860 [ 309.342018][T11584] ? cgwb_kill+0x450/0x450 [ 309.346427][T11584] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 309.352211][T11584] ? __wake_up_common_lock+0xde/0x130 [ 309.357566][T11584] bdi_register+0x12a/0x140 [ 309.362046][T11584] ? bdi_register_va.part.0+0x860/0x860 [ 309.367576][T11584] __device_add_disk+0xdf7/0x1200 [ 309.372579][T11584] ? sprintf+0xc0/0x100 [ 309.376710][T11584] ? blk_alloc_devt+0x4b0/0x4b0 [ 309.381537][T11584] ? __init_waitqueue_head+0x97/0x110 [ 309.386902][T11584] ? pm_runtime_init+0x2cf/0x3b0 [ 309.391841][T11584] ? lockdep_init_map_waits+0x26a/0x890 [ 309.397391][T11584] loop_add+0x616/0x8b0 [ 309.401557][T11584] loop_control_ioctl+0x16c/0x480 [ 309.406581][T11584] ? loop_lookup+0x1d0/0x1d0 [ 309.411165][T11584] ? __fget_files+0x294/0x400 [ 309.415844][T11584] ? loop_lookup+0x1d0/0x1d0 [ 309.420428][T11584] ksys_ioctl+0x11a/0x180 [ 309.424747][T11584] __x64_sys_ioctl+0x6f/0xb0 [ 309.429312][T11584] ? lockdep_hardirqs_on+0x6a/0xe0 [ 309.434396][T11584] do_syscall_64+0x60/0xe0 [ 309.438789][T11584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 309.444653][T11584] RIP: 0033:0x45c369 [ 309.448514][T11584] Code: Bad RIP value. [ 309.452555][T11584] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.460984][T11584] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 309.468937][T11584] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 309.476884][T11584] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 07:22:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x7, {0x1, 0x100000000000001}, {0x47, 0x2}, @ramp={0x0, 0x0, {0x1000}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0xf4}, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x4e20, @multicast1}}) [ 309.484830][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 309.492774][T11584] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac [ 309.521231][T11584] ------------[ cut here ]------------ [ 309.526711][T11584] WARNING: CPU: 0 PID: 11584 at block/genhd.c:827 __device_add_disk+0xf7e/0x1200 [ 309.536178][T11584] Kernel panic - not syncing: panic_on_warn set ... [ 309.542773][T11584] CPU: 0 PID: 11584 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 309.551429][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.561466][T11584] Call Trace: [ 309.564731][T11584] dump_stack+0x18f/0x20d [ 309.569039][T11584] panic+0x2e3/0x75c [ 309.572908][T11584] ? __warn_printk+0xf3/0xf3 [ 309.577472][T11584] ? printk+0xba/0xed [ 309.581439][T11584] ? log_store.cold+0x16/0x16 [ 309.586090][T11584] ? elevator_init_mq+0x2f4/0x400 [ 309.591095][T11584] ? __warn.cold+0x5/0x45 [ 309.595411][T11584] ? __device_add_disk+0xf7e/0x1200 [ 309.600589][T11584] __warn.cold+0x20/0x45 [ 309.604809][T11584] ? __device_add_disk+0xf7e/0x1200 [ 309.609981][T11584] report_bug+0x1bd/0x210 [ 309.614303][T11584] handle_bug+0x38/0x90 [ 309.618446][T11584] exc_invalid_op+0x13/0x40 [ 309.622922][T11584] asm_exc_invalid_op+0x12/0x20 [ 309.627748][T11584] RIP: 0010:__device_add_disk+0xf7e/0x1200 [ 309.633531][T11584] Code: f1 ff ff e8 c4 f8 eb fd 0f 0b e9 9f f8 ff ff 48 89 7c 24 10 e8 b3 f8 eb fd 0f 0b 48 8b 7c 24 10 e9 f3 f4 ff ff e8 a2 f8 eb fd <0f> 0b e9 8b fe ff ff 4c 89 ef e8 e3 5d 2b fe e9 dc f1 ff ff e8 f9 [ 309.653107][T11584] RSP: 0018:ffffc900022f7cd0 EFLAGS: 00010246 [ 309.659156][T11584] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000db7b000 [ 309.667102][T11584] RDX: 0000000000040000 RSI: ffffffff8387c3ee RDI: 0000000000000005 [ 309.675047][T11584] RBP: ffff8880a33cc000 R08: 0000000000000dc0 R09: ffffffff89c7daf3 [ 309.682993][T11584] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200045efa3 [ 309.690938][T11584] R13: ffff8880a33cc638 R14: ffff8880a33cc0a0 R15: ffff888097a14000 [ 309.698925][T11584] ? __device_add_disk+0xf7e/0x1200 [ 309.704114][T11584] ? sprintf+0xc0/0x100 [ 309.708245][T11584] ? blk_alloc_devt+0x4b0/0x4b0 [ 309.713071][T11584] ? __init_waitqueue_head+0x97/0x110 [ 309.718417][T11584] ? pm_runtime_init+0x2cf/0x3b0 [ 309.723329][T11584] ? lockdep_init_map_waits+0x26a/0x890 [ 309.728854][T11584] loop_add+0x616/0x8b0 [ 309.732986][T11584] loop_control_ioctl+0x16c/0x480 [ 309.737985][T11584] ? loop_lookup+0x1d0/0x1d0 [ 309.742547][T11584] ? __fget_files+0x294/0x400 [ 309.747201][T11584] ? loop_lookup+0x1d0/0x1d0 [ 309.751763][T11584] ksys_ioctl+0x11a/0x180 [ 309.756068][T11584] __x64_sys_ioctl+0x6f/0xb0 [ 309.760631][T11584] ? lockdep_hardirqs_on+0x6a/0xe0 [ 309.765728][T11584] do_syscall_64+0x60/0xe0 [ 309.770137][T11584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 309.776010][T11584] RIP: 0033:0x45c369 [ 309.779873][T11584] Code: Bad RIP value. [ 309.783913][T11584] RSP: 002b:00007fee9444cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.792297][T11584] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045c369 [ 309.800389][T11584] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 309.808353][T11584] RBP: 00007fee9444cca0 R08: 0000000000000000 R09: 0000000000000000 [ 309.816334][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 309.824280][T11584] R13: 0000000000c9fb6f R14: 00007fee9444d9c0 R15: 000000000078bfac [ 309.833624][T11584] Kernel Offset: disabled [ 309.838034][T11584] Rebooting in 86400 seconds..