Warning: Permanently added '10.128.10.21' (ECDSA) to the list of known hosts. 2021/03/22 03:12:59 fuzzer started 2021/03/22 03:13:00 dialing manager at 10.128.0.163:34997 2021/03/22 03:13:00 syscalls: 3557 2021/03/22 03:13:00 code coverage: enabled 2021/03/22 03:13:00 comparison tracing: enabled 2021/03/22 03:13:00 extra coverage: enabled 2021/03/22 03:13:00 setuid sandbox: enabled 2021/03/22 03:13:00 namespace sandbox: enabled 2021/03/22 03:13:00 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/22 03:13:00 fault injection: enabled 2021/03/22 03:13:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/22 03:13:00 net packet injection: enabled 2021/03/22 03:13:00 net device setup: enabled 2021/03/22 03:13:00 concurrency sanitizer: enabled 2021/03/22 03:13:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/22 03:13:00 USB emulation: enabled 2021/03/22 03:13:00 hci packet injection: enabled 2021/03/22 03:13:00 wifi device emulation: enabled 2021/03/22 03:13:00 802.15.4 emulation: enabled 2021/03/22 03:13:00 suppressing KCSAN reports in functions: '_prb_read_valid' 'alloc_pid' 'blk_mq_dispatch_rq_list' 'ext4_mb_regular_allocator' '__xa_clear_mark' 'do_signal_stop' 'ext4_free_inode' 2021/03/22 03:13:00 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/22 03:13:01 fetching corpus: 50, signal 28081/31384 (executing program) 2021/03/22 03:13:01 fetching corpus: 100, signal 45287/49531 (executing program) 2021/03/22 03:13:01 fetching corpus: 150, signal 52083/57392 (executing program) 2021/03/22 03:13:01 fetching corpus: 200, signal 59416/65560 (executing program) 2021/03/22 03:13:01 fetching corpus: 250, signal 67041/73811 (executing program) 2021/03/22 03:13:01 fetching corpus: 300, signal 72052/79513 (executing program) 2021/03/22 03:13:01 fetching corpus: 349, signal 77325/85329 (executing program) 2021/03/22 03:13:01 fetching corpus: 399, signal 84686/92783 (executing program) 2021/03/22 03:13:01 fetching corpus: 449, signal 89878/98169 (executing program) 2021/03/22 03:13:01 fetching corpus: 498, signal 93852/102436 (executing program) 2021/03/22 03:13:01 fetching corpus: 547, signal 99648/108131 (executing program) 2021/03/22 03:13:01 fetching corpus: 597, signal 104429/112814 (executing program) 2021/03/22 03:13:01 fetching corpus: 647, signal 107273/115816 (executing program) 2021/03/22 03:13:02 fetching corpus: 697, signal 111076/119444 (executing program) 2021/03/22 03:13:02 fetching corpus: 746, signal 116028/123905 (executing program) 2021/03/22 03:13:02 fetching corpus: 794, signal 118728/126501 (executing program) 2021/03/22 03:13:02 fetching corpus: 844, signal 124371/131235 (executing program) 2021/03/22 03:13:02 fetching corpus: 893, signal 126945/133567 (executing program) 2021/03/22 03:13:02 fetching corpus: 943, signal 130835/136820 (executing program) 2021/03/22 03:13:02 fetching corpus: 993, signal 133827/139304 (executing program) 2021/03/22 03:13:02 fetching corpus: 1043, signal 136603/141533 (executing program) 2021/03/22 03:13:02 fetching corpus: 1093, signal 141115/144971 (executing program) 2021/03/22 03:13:02 fetching corpus: 1143, signal 142933/146394 (executing program) 2021/03/22 03:13:02 fetching corpus: 1193, signal 145712/148397 (executing program) 2021/03/22 03:13:02 fetching corpus: 1243, signal 148434/150337 (executing program) 2021/03/22 03:13:03 fetching corpus: 1293, signal 149967/151373 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151937/152696 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151937/152727 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151937/152754 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151937/152783 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151937/152805 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/152839 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/152869 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/152899 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/152927 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/152949 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/152983 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153007 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153034 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153056 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153088 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153107 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153134 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153168 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153193 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153218 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153241 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153265 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153291 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153312 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153332 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153351 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153389 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153412 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153443 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153465 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153492 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153523 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153540 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153568 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153590 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153626 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153656 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153681 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153704 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153732 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153759 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153780 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153804 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153830 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153862 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153887 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153907 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153931 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153952 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153976 (executing program) 2021/03/22 03:13:03 fetching corpus: 1337, signal 151941/153976 (executing program) 2021/03/22 03:13:04 starting 6 fuzzer processes 03:13:05 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) inotify_init() 03:13:05 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x103382) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = dup3(r1, r2, 0x0) readv(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f00000004c0)=""/6, 0x6}], 0x2) 03:13:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "8572c43186f42de316856adae4a97a0596f410be39aa6698b851a8af20b3a988"}) 03:13:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 03:13:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000001c0)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\a\x00@\x00\x00\x00\x00\x00$\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 03:13:05 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000140)='GPL\x00', 0x6, 0x87, &(0x7f0000000180)=""/135, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syzkaller login: [ 36.249134][ T8381] IPVS: ftp: loaded support on port[0] = 21 [ 36.342410][ T8381] chnl_net:caif_netlink_parms(): no params data found [ 36.376494][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.383685][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.391218][ T8381] device bridge_slave_0 entered promiscuous mode [ 36.398858][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.405970][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.413395][ T8381] device bridge_slave_1 entered promiscuous mode [ 36.426728][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.437199][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.452997][ T8381] team0: Port device team_slave_0 added [ 36.459808][ T8381] team0: Port device team_slave_1 added [ 36.471872][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.479997][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.506062][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.518064][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.525268][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.551794][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.598856][ T8383] IPVS: ftp: loaded support on port[0] = 21 [ 36.598895][ T8385] IPVS: ftp: loaded support on port[0] = 21 [ 36.648378][ T8381] device hsr_slave_0 entered promiscuous mode [ 36.656203][ T8381] device hsr_slave_1 entered promiscuous mode [ 36.718193][ T8383] chnl_net:caif_netlink_parms(): no params data found [ 36.789967][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.798143][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.817695][ T8383] device bridge_slave_0 entered promiscuous mode [ 36.839196][ T8385] chnl_net:caif_netlink_parms(): no params data found [ 36.866730][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.873922][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.881753][ T8383] device bridge_slave_1 entered promiscuous mode [ 36.891891][ T8387] IPVS: ftp: loaded support on port[0] = 21 [ 36.897253][ T8381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.913735][ T8381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.936433][ T8381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.958027][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.972451][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.983970][ T8381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.028064][ T8389] IPVS: ftp: loaded support on port[0] = 21 [ 37.055089][ T8383] team0: Port device team_slave_0 added [ 37.062381][ T8383] team0: Port device team_slave_1 added [ 37.095823][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.102851][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.129997][ T8383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.164759][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.172492][ T8381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.179857][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.186929][ T8381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.201407][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.210773][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.218698][ T8385] device bridge_slave_0 entered promiscuous mode [ 37.226200][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.233153][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.260322][ T8383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.286726][ T8393] IPVS: ftp: loaded support on port[0] = 21 [ 37.292662][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.303669][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.311224][ T8385] device bridge_slave_1 entered promiscuous mode [ 37.336395][ T8383] device hsr_slave_0 entered promiscuous mode [ 37.343270][ T8383] device hsr_slave_1 entered promiscuous mode [ 37.350390][ T8383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.358090][ T8383] Cannot create hsr debugfs directory [ 37.376171][ T8385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.388499][ T8387] chnl_net:caif_netlink_parms(): no params data found [ 37.418514][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.426399][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.437742][ T8385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.473191][ T8385] team0: Port device team_slave_0 added [ 37.508563][ T8385] team0: Port device team_slave_1 added [ 37.523005][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.537416][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.563505][ T8385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.580095][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.587523][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.613788][ T8385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.636410][ T8381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.643569][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.654143][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.661941][ T8387] device bridge_slave_0 entered promiscuous mode [ 37.670056][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.677217][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.684897][ T8387] device bridge_slave_1 entered promiscuous mode [ 37.711237][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 37.734015][ T8381] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.745924][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.757715][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.773197][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.781661][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.797320][ T8393] chnl_net:caif_netlink_parms(): no params data found [ 37.814668][ T8383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.831351][ T8385] device hsr_slave_0 entered promiscuous mode [ 37.840191][ T8385] device hsr_slave_1 entered promiscuous mode [ 37.847148][ T8385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.854689][ T8385] Cannot create hsr debugfs directory [ 37.867387][ T8387] team0: Port device team_slave_0 added [ 37.877303][ T8383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.889592][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.898240][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.906835][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.913992][ T9157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.938854][ T8387] team0: Port device team_slave_1 added [ 37.949991][ T8381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.961469][ T8381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.973749][ T8383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.982668][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.991506][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.001679][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.009374][ T9157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.019430][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.029376][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.039251][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.049016][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.057522][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.066041][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.074681][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.083034][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.091334][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.099691][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.120197][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.127526][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.135749][ T8389] device bridge_slave_0 entered promiscuous mode [ 38.143227][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.150406][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.158028][ T8389] device bridge_slave_1 entered promiscuous mode [ 38.164637][ T8383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.172644][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.180377][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.195572][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.202533][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.228775][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.252562][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.260869][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.268947][ T8393] device bridge_slave_0 entered promiscuous mode [ 38.277324][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.284373][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.310730][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.314985][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 38.339834][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.350656][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.357945][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.366176][ T8393] device bridge_slave_1 entered promiscuous mode [ 38.383417][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.396786][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.415255][ T8387] device hsr_slave_0 entered promiscuous mode [ 38.422079][ T8387] device hsr_slave_1 entered promiscuous mode [ 38.428653][ T8387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.436422][ T8387] Cannot create hsr debugfs directory [ 38.442891][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.465530][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.472952][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.489030][ T8381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.514117][ T8389] team0: Port device team_slave_0 added [ 38.522421][ T8389] team0: Port device team_slave_1 added [ 38.528928][ T8385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.544261][ T8393] team0: Port device team_slave_0 added [ 38.553922][ T8393] team0: Port device team_slave_1 added [ 38.566170][ T8385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.575335][ T8385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.604840][ T8385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.614136][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.623333][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.634855][ T9157] Bluetooth: hci2: command 0x0409 tx timeout [ 38.651946][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.669061][ T9567] Bluetooth: hci1: command 0x0409 tx timeout [ 38.669108][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.683096][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.709418][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.720939][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.731237][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.740102][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.747511][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.774339][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.794724][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.802815][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.813638][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.821653][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.832740][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.840159][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.866971][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.875012][ T9157] Bluetooth: hci3: command 0x0409 tx timeout [ 38.879524][ T8381] device veth0_vlan entered promiscuous mode [ 38.910744][ T8387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.929095][ T8381] device veth1_vlan entered promiscuous mode [ 38.946223][ T8393] device hsr_slave_0 entered promiscuous mode [ 38.953274][ T8393] device hsr_slave_1 entered promiscuous mode [ 38.961388][ T8393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.969068][ T8393] Cannot create hsr debugfs directory [ 38.974514][ T8387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.997214][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.006051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.014148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.023958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.034736][ T9157] Bluetooth: hci4: command 0x0409 tx timeout [ 39.034906][ T8389] device hsr_slave_0 entered promiscuous mode [ 39.047311][ T8389] device hsr_slave_1 entered promiscuous mode [ 39.053683][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.061422][ T8389] Cannot create hsr debugfs directory [ 39.075221][ T8387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.085571][ T8387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.097101][ T8383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.106485][ T8381] device veth0_macvtap entered promiscuous mode [ 39.142506][ T8381] device veth1_macvtap entered promiscuous mode [ 39.155680][ T8383] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.175551][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.183869][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.193689][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.201456][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.204684][ T8975] Bluetooth: hci5: command 0x0409 tx timeout [ 39.231403][ T8385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.238643][ T8389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.250423][ T8389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.262792][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.273286][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.282119][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.289190][ T8975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.297217][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.305674][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.313952][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.320996][ T8975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.328663][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.337876][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.352200][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.366330][ T8389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.378073][ T8389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.389180][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.399355][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.407660][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.417735][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.426356][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.437607][ T8385] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.448237][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.466520][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.476345][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.485263][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.492319][ T9346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.502129][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.511387][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.520411][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.529368][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.538163][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.546728][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.555514][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.563612][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.574411][ T8381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.584918][ T8381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.593820][ T8381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.602847][ T8381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.621193][ T8383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.633859][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.646768][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.655946][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.663985][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.672896][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.681775][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.688857][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.696881][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.705558][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.713614][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.724002][ T8393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.752521][ T8393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.761463][ T8393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.770417][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.779900][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.787810][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.798000][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.806600][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.815497][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.823759][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.832540][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.845747][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.854111][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.868085][ T8383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.877272][ T8393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.893232][ T8385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.904782][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.923596][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.932696][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.970340][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.996671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.004167][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.041094][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.042167][ T605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.051343][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.071209][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.085584][ T605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.093137][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.105425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.117755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.125788][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.133621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.142105][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.153829][ T8383] device veth0_vlan entered promiscuous mode [ 40.168087][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.175748][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.183773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.198897][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.228052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 03:13:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) inotify_init() [ 40.241857][ T36] audit: type=1326 audit(1616382790.140:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9715 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.275522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.283247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.297529][ T36] audit: type=1326 audit(1616382790.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9715 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=253 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.305006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.326450][ T36] audit: type=1326 audit(1616382790.140:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9715 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.353159][ T36] audit: type=1326 audit(1616382790.140:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9715 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.376069][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.383141][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.386179][ T36] audit: type=1326 audit(1616382790.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9715 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.413963][ T9689] Bluetooth: hci0: command 0x041b tx timeout [ 40.414707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.423436][ T36] audit: type=1326 audit(1616382790.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9717 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 03:13:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) inotify_init() [ 40.454515][ T36] audit: type=1326 audit(1616382790.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9717 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.459791][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.485688][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.487423][ T36] audit: type=1326 audit(1616382790.300:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9717 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=253 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.492737][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.516786][ T36] audit: type=1326 audit(1616382790.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9717 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.551343][ T36] audit: type=1326 audit(1616382790.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9717 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 40.576008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.593058][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.604219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.612615][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.621769][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.630452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.641999][ T8383] device veth1_vlan entered promiscuous mode 03:13:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) inotify_init() [ 40.659947][ T8389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.670555][ T8389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.693397][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.705305][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.713201][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.722323][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.730671][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.738790][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.747355][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.756361][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.765661][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.774047][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.782697][ T9157] Bluetooth: hci1: command 0x041b tx timeout [ 40.788979][ T9157] Bluetooth: hci2: command 0x041b tx timeout [ 40.796499][ T8387] 8021q: adding VLAN 0 to HW filter on device team0 03:13:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/402], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 40.823621][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.831992][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.841149][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.851559][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.860092][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.875700][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.884012][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.892550][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.902350][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.911495][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.918717][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.935313][ T8383] device veth0_macvtap entered promiscuous mode [ 40.955382][ T9690] Bluetooth: hci3: command 0x041b tx timeout [ 40.961441][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.970650][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.978792][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.986401][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.994713][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.003283][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.011771][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.018858][ T9346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.026677][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.035469][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.044390][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.053107][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.061757][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.069871][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.080883][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.091020][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.101638][ T8383] device veth1_macvtap entered promiscuous mode [ 41.114116][ T9690] Bluetooth: hci4: command 0x041b tx timeout [ 41.115191][ T8385] device veth0_vlan entered promiscuous mode [ 41.129536][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.137595][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.154196][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.163796][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.176209][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.185227][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.193926][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.202698][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.218648][ T8387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.229659][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.254381][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.264832][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.279526][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.288597][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.302498][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.309613][ T9732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.321963][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.331405][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.341329][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.348411][ T9732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.359389][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.369035][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.379315][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.387988][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.396992][ T9732] Bluetooth: hci5: command 0x041b tx timeout [ 41.401769][ T8383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.415155][ T8383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.428168][ T8383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.437955][ T8385] device veth1_vlan entered promiscuous mode [ 41.454150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.462060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.484361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.492723][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.514683][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.523264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.554487][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.563587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.594458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.605218][ T8383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.618593][ T8383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.629686][ T8383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.650112][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.663952][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.673264][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.686221][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.695974][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.703438][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.712036][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.721818][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.734032][ T8383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.743529][ T8383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.754550][ T8383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.763326][ T8383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.795654][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.805651][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.815432][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.824312][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.843546][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.861238][ T8385] device veth0_macvtap entered promiscuous mode [ 41.878020][ T8385] device veth1_macvtap entered promiscuous mode [ 41.895882][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.914056][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.921623][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.944131][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.952722][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.978961][ T8389] device veth0_vlan entered promiscuous mode [ 42.005520][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.014050][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.048812][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.057481][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.075113][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.083541][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.102605][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 42.134290][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 42.144856][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 42.156471][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.168151][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.176230][ T8387] device veth0_vlan entered promiscuous mode [ 42.183619][ T8389] device veth1_vlan entered promiscuous mode [ 42.193786][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.211611][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.219597][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.227926][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.238369][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.257952][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 42.271111][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.281994][ T9755] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 42.282241][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 42.310376][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.322836][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.338485][ T8387] device veth1_vlan entered promiscuous mode [ 42.364084][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.371944][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.391828][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.400111][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.408567][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.417712][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.427388][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.436147][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.445061][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.456879][ T8385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.467677][ T8385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.476893][ T9690] Bluetooth: hci0: command 0x040f tx timeout [ 42.483625][ T8385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.496165][ T8385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 03:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 42.551400][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.564128][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.572378][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.588195][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.599073][ T8393] device veth0_vlan entered promiscuous mode [ 42.609998][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.610438][ T8389] device veth0_macvtap entered promiscuous mode [ 42.644408][ T8387] device veth0_macvtap entered promiscuous mode [ 42.676243][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.685016][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.692627][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.700800][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.711273][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.720269][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.730114][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 03:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 42.739255][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.749469][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.764212][ T8389] device veth1_macvtap entered promiscuous mode [ 42.771548][ T8387] device veth1_macvtap entered promiscuous mode 03:13:12 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x103382) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = dup3(r1, r2, 0x0) readv(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f00000004c0)=""/6, 0x6}], 0x2) [ 42.807679][ T9690] Bluetooth: hci1: command 0x040f tx timeout [ 42.808596][ T8393] device veth1_vlan entered promiscuous mode [ 42.841222][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.854695][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.878080][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.895648][ T9732] Bluetooth: hci2: command 0x040f tx timeout [ 42.900994][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 42.947760][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.993591][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.004274][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.015001][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.026288][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.036681][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 43.044930][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.055263][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.063081][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.069934][ T8393] device veth0_macvtap entered promiscuous mode [ 43.079078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.088571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.099496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.108056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.119302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.130277][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.144313][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.155968][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.166957][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.178725][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.193610][ T4820] Bluetooth: hci4: command 0x040f tx timeout [ 43.213543][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.225711][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.241659][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.268450][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.278960][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.290512][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.300602][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.311357][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.321226][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.331791][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.342532][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.352025][ T8393] device veth1_macvtap entered promiscuous mode [ 43.359534][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.367560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.375704][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.384456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.393256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.402109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.414036][ T8387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.422760][ T8387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.432082][ T8387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.433633][ T9346] Bluetooth: hci5: command 0x040f tx timeout [ 43.441324][ T8387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.461087][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.473655][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.483716][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.494368][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.504589][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.516340][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.526342][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.537005][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.547794][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.561953][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.572562][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.582718][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.593747][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.603797][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.614395][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.624788][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.635357][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.645435][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 43.655908][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.666929][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.683877][ T605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.691980][ T605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.699872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.710051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.719072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.727972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.736887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.746524][ T8389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.755834][ T8389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.764879][ T8389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.773733][ T8389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.788339][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.799404][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.809753][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.820370][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.830418][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.842511][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.852781][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.852796][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.852808][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 43.852819][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:13:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "8572c43186f42de316856adae4a97a0596f410be39aa6698b851a8af20b3a988"}) [ 43.856166][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.913807][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.923214][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.943935][ T8393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.952674][ T8393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.975997][ T8393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.988033][ T8393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.084539][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.092459][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.165903][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.180855][ T2030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.191308][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.199361][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.253657][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.261537][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.269787][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.286346][ T605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.293330][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.304887][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.315603][ T605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.341296][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 03:13:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) [ 44.351984][ T9891] hub 9-0:1.0: USB hub found [ 44.363169][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.369697][ T9891] hub 9-0:1.0: 8 ports detected [ 44.380672][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.393242][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.402068][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:13:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000001c0)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\a\x00@\x00\x00\x00\x00\x00$\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 03:13:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000140)='GPL\x00', 0x6, 0x87, &(0x7f0000000180)=""/135, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 03:13:14 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x103382) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = dup3(r1, r2, 0x0) readv(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f00000004c0)=""/6, 0x6}], 0x2) 03:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "8572c43186f42de316856adae4a97a0596f410be39aa6698b851a8af20b3a988"}) 03:13:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 03:13:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "8572c43186f42de316856adae4a97a0596f410be39aa6698b851a8af20b3a988"}) 03:13:14 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_enter\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x103382) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = dup3(r1, r2, 0x0) readv(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f00000004c0)=""/6, 0x6}], 0x2) 03:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000001c0)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\a\x00@\x00\x00\x00\x00\x00$\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 03:13:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000140)='GPL\x00', 0x6, 0x87, &(0x7f0000000180)=""/135, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 44.553273][ T9732] Bluetooth: hci0: command 0x0419 tx timeout [ 44.609346][ T9915] hub 9-0:1.0: USB hub found 03:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) [ 44.653706][ T9915] hub 9-0:1.0: 8 ports detected 03:13:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b36, &(0x7f00000001c0)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\a\x00@\x00\x00\x00\x00\x00$\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 03:13:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000140)='GPL\x00', 0x6, 0x87, &(0x7f0000000180)=""/135, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 03:13:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 44.799413][ T9941] hub 9-0:1.0: USB hub found [ 44.811799][ T9941] hub 9-0:1.0: 8 ports detected 03:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 44.878167][ T9732] Bluetooth: hci1: command 0x0419 tx timeout 03:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 44.953997][ T9732] Bluetooth: hci2: command 0x0419 tx timeout 03:13:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 45.119333][ T4820] Bluetooth: hci3: command 0x0419 tx timeout 03:13:15 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x97, 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) 03:13:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 45.273902][ T9157] Bluetooth: hci4: command 0x0419 tx timeout [ 45.321441][T10007] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 03:13:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)) 03:13:15 executing program 3: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 45.389131][T10024] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 03:13:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:13:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:13:15 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x8aaf, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000201010200000000000000e3c2a3"], 0x20}}, 0x0) 03:13:15 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x97, 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) 03:13:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)) [ 45.513365][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 45.527701][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 45.541581][T10036] IPVS: ftp: loaded support on port[0] = 21 03:13:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 45.578466][T10045] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 03:13:15 executing program 5: set_mempolicy(0x2, &(0x7f0000000080)=0x97, 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) 03:13:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)) 03:13:15 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x97, 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) [ 45.636160][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 03:13:15 executing program 3: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:13:15 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x8aaf, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000201010200000000000000e3c2a3"], 0x20}}, 0x0) 03:13:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)) 03:13:15 executing program 5: set_mempolicy(0x2, &(0x7f0000000080)=0x97, 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) [ 45.730816][T10078] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 45.764220][T10081] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 03:13:15 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x97, 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) 03:13:15 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x8aaf, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000201010200000000000000e3c2a3"], 0x20}}, 0x0) 03:13:15 executing program 1: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 45.836248][T10086] IPVS: ftp: loaded support on port[0] = 21 [ 45.846699][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 03:13:15 executing program 5: set_mempolicy(0x2, &(0x7f0000000080)=0x97, 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) [ 45.880969][T10092] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 45.924399][T10103] IPVS: ftp: loaded support on port[0] = 21 [ 45.932864][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 45.933462][T10109] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de 03:13:15 executing program 3: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:15 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x8aaf, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000201010200000000000000e3c2a3"], 0x20}}, 0x0) 03:13:15 executing program 0: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:16 executing program 5: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 46.030740][T10141] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 03:13:16 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x8aaf, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000201010200000000000000e3c2a3"], 0x20}}, 0x0) 03:13:16 executing program 1: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 46.125723][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 46.144871][T10149] IPVS: ftp: loaded support on port[0] = 21 [ 46.148838][T10147] IPVS: ftp: loaded support on port[0] = 21 [ 46.193142][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 46.214037][T10158] IPVS: ftp: loaded support on port[0] = 21 [ 46.221596][T10163] IPVS: ftp: loaded support on port[0] = 21 03:13:16 executing program 4: set_mempolicy(0x1, &(0x7f0000000000)=0x8aaf, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000201010200000000000000e3c2a3"], 0x20}}, 0x0) 03:13:16 executing program 0: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:16 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x8aaf, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000201010200000000000000e3c2a3"], 0x20}}, 0x0) 03:13:16 executing program 3: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:16 executing program 1: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 46.395811][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 46.408559][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 03:13:16 executing program 5: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 46.441346][T10247] IPVS: ftp: loaded support on port[0] = 21 03:13:16 executing program 2: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 46.520490][T10261] IPVS: ftp: loaded support on port[0] = 21 [ 46.535331][T10272] IPVS: ftp: loaded support on port[0] = 21 [ 46.557570][T10271] IPVS: ftp: loaded support on port[0] = 21 03:13:16 executing program 0: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:16 executing program 4: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 46.625476][T10287] IPVS: ftp: loaded support on port[0] = 21 03:13:16 executing program 5: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 46.735176][T10338] IPVS: ftp: loaded support on port[0] = 21 [ 46.744845][T10341] IPVS: ftp: loaded support on port[0] = 21 03:13:16 executing program 3: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:16 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:16 executing program 2: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:16 executing program 4: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:16 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./bus/file1\x00', 0x7) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) lsetxattr$system_posix_acl(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000040), 0x24, 0x0) [ 46.879411][T10403] IPVS: ftp: loaded support on port[0] = 21 [ 46.915607][T10413] IPVS: ftp: loaded support on port[0] = 21 [ 46.993148][ C1] hrtimer: interrupt took 27928 ns [ 47.007528][T10428] IPVS: ftp: loaded support on port[0] = 21 03:13:17 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x1) 03:13:17 executing program 3: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:17 executing program 2: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 47.239250][T10491] IPVS: ftp: loaded support on port[0] = 21 [ 47.243715][T10492] IPVS: ftp: loaded support on port[0] = 21 03:13:17 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x1) [ 47.295233][T10495] IPVS: ftp: loaded support on port[0] = 21 03:13:17 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x1) [ 47.349917][T10489] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:13:17 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:17 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./bus/file1\x00', 0x7) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) lsetxattr$system_posix_acl(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000040), 0x24, 0x0) 03:13:17 executing program 3: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:17 executing program 4: unshare(0x6a040000) r0 = socket$inet6(0x10, 0x5, 0x60) sendto$inet6(r0, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x94}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="3fc0e78cafdb816a09d86ac8541d2d735b3dd9ee3451eb2a6b3c5c3236fc5d95c84b8f957248b93fa11c257d725bfa22dc49c61a698b1d9ee1fb4578ee4fc4066f0d68ad225da66d01c7bb479cf64551e7dc6abc4f4500b5714fc53eb82b6639dadfabe7596ead828a2c1af206347f8384d58d09515077ffe84106e7bcbf74281c923b2d9605a8eaeeaca07b3067b1804699d58219b5be2cea7fe65690b2c75a50fb50363a5107099cae032c5c51aa5a00aa28bb3c8f996a85abc754ed54b9a149967d73e3000000000000e4ffffff0000", @ANYRES16=r0], 0x0, 0x2a}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="51be190c2000", 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 03:13:17 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfac91f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:17 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x1) [ 47.545584][T10568] IPVS: ftp: loaded support on port[0] = 21 [ 47.569842][T10570] IPVS: ftp: loaded support on port[0] = 21 03:13:17 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:17 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:17 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x1) 03:13:17 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:18 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./bus/file1\x00', 0x7) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) lsetxattr$system_posix_acl(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000040), 0x24, 0x0) 03:13:18 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x1) 03:13:18 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfac91f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:18 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:18 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x1) 03:13:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./bus/file1\x00', 0x7) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) lsetxattr$system_posix_acl(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000040), 0x24, 0x0) 03:13:18 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:18 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfac91f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:18 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000005000000", 0x58}], 0x1) 03:13:19 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfac91f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:19 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xfffffffd) getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x7, 0x6, 0x3, 0x1, 0x0, 0x1ff, 0x82000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x1000, 0x1000, 0xb687, 0x6, 0x101, 0x9, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x9012) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000140)=0x7ff, 0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000a00)="4c37d5e3271426ee55ada42d4747f19a1cff231ea8351601ab55504d9d739705ce83ee3bc49425db9783aed2d6d27fb97d2dcde94987382d3b3f2990c0191a5fb3fa4074341eab986596d0c00e1d3964d253b25fd96b41cb87023d02b31c2e93c91d28d819c32fd510cf1a1189580117360d3eeafa451168c0455a7d2ce5874d30f3040c80b93ca7b024679df20c182fbf9b2eebb202e5016dba8d", 0x9b) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x80000000, 0x1, 0x4}) write$binfmt_misc(r3, &(0x7f00000001c0)={'syz0', "1f077412fef2bd0a37e8fe09acd5f8c2cc19a51c2d6d158dd131db757d"}, 0x21) 03:13:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000005000000", 0x58}], 0x1) 03:13:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000005000000", 0x58}], 0x1) 03:13:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000005000000", 0x58}], 0x1) [ 49.526751][T10680] overlayfs: failed to resolve './file1': -2 03:13:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 03:13:19 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) 03:13:19 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x150, 0x150, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x20}}, @common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 03:13:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000005000000", 0x58}], 0x1) 03:13:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 03:13:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000005000000", 0x58}], 0x1) 03:13:19 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x150, 0x150, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x20}}, @common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 03:13:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 03:13:20 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x150, 0x150, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x20}}, @common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) [ 50.033902][T10697] xt_l2tp: missing protocol rule (udp|l2tpip) 03:13:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) [ 50.097290][T10706] xt_l2tp: missing protocol rule (udp|l2tpip) 03:13:20 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x150, 0x150, 0x0, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x20}}, @common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 03:13:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000005000000", 0x58}], 0x1) 03:13:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) [ 50.175086][T10712] xt_l2tp: missing protocol rule (udp|l2tpip) [ 50.192269][ T9567] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 50.279539][T10719] xt_l2tp: missing protocol rule (udp|l2tpip) [ 50.822196][ T9567] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 50.831283][ T9567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.853944][ T9567] usb 1-1: Product: syz [ 50.864352][ T9567] usb 1-1: Manufacturer: syz [ 50.875165][ T9567] usb 1-1: SerialNumber: syz [ 50.955756][ T9567] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 51.712061][ T9567] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 52.125597][ T9689] usb 1-1: USB disconnect, device number 2 [ 52.801920][ T9567] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 52.809069][ T9567] ath9k_htc: Failed to initialize the device [ 52.815455][ T9689] usb 1-1: ath9k_htc: USB layer deinitialized 03:13:23 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) 03:13:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 03:13:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x74}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 03:13:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1241, 0x5015, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "8072ab39"}]}}, 0x0}, 0x0) 03:13:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 03:13:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) [ 53.201885][ T9689] usb 1-1: new high-speed USB device number 3 using dummy_hcd 03:13:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x74}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 03:13:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 03:13:23 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) 03:13:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x74}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 03:13:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 03:13:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x74}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) [ 53.561808][ T8975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.651814][ T9689] usb 1-1: device descriptor read/64, error -71 [ 53.711798][ T9746] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 53.922584][ T9689] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.941785][ T8975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.952954][ T8975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.963204][ T8975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.976085][ T8975] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 53.985615][ T8975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.994701][ T8975] usb 5-1: config 0 descriptor?? [ 54.301846][ T9746] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 54.311263][ T9746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.319593][ T9746] usb 3-1: Product: syz [ 54.324144][ T9746] usb 3-1: Manufacturer: syz [ 54.328733][ T9746] usb 3-1: SerialNumber: syz [ 54.372194][ T9746] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 54.482522][ T8975] holtek 0003:1241:5015.0001: item fetching failed at offset 0/1 [ 54.490450][ T8975] holtek 0003:1241:5015.0001: parse failed [ 54.496854][ T8975] holtek: probe of 0003:1241:5015.0001 failed with error -22 [ 54.504597][ T9689] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 54.514577][ T9689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.522893][ T9689] usb 1-1: Product: syz [ 54.527075][ T9689] usb 1-1: Manufacturer: syz [ 54.531859][ T9689] usb 1-1: SerialNumber: syz [ 54.572203][ T9689] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 54.697538][ T4820] usb 5-1: USB disconnect, device number 2 [ 55.061671][ T9746] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 55.251760][ T9689] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 55.473631][ T19] usb 3-1: USB disconnect, device number 2 [ 55.491971][ T9567] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.659519][ T9572] usb 1-1: USB disconnect, device number 4 [ 55.901818][ T9567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.912772][ T9567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.922936][ T9567] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.935912][ T9567] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 55.945001][ T9567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.953555][ T9567] usb 5-1: config 0 descriptor?? [ 56.071539][ T9746] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 56.078466][ T9746] ath9k_htc: Failed to initialize the device [ 56.084685][ T19] usb 3-1: ath9k_htc: USB layer deinitialized 03:13:26 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) 03:13:26 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) 03:13:26 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 03:13:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1241, 0x5015, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "8072ab39"}]}}, 0x0}, 0x0) 03:13:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e512d40000000000109022400010000000009040000010301020009211000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) 03:13:26 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) [ 56.321559][ T9689] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 56.329427][ T9689] ath9k_htc: Failed to initialize the device [ 56.337909][ T9572] usb 1-1: ath9k_htc: USB layer deinitialized [ 56.381747][ T9567] usbhid 5-1:0.0: can't add hid device: -71 [ 56.387730][ T9567] usbhid: probe of 5-1:0.0 failed with error -71 [ 56.399075][ T9567] usb 5-1: USB disconnect, device number 3 [ 56.481506][ T3612] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.511515][ T8975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.561505][ T4820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 56.721888][ T9572] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 56.729490][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 56.771496][ T9567] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.791481][ T8975] usb 2-1: Using ep0 maxpacket: 8 [ 56.921759][ T4820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.932957][ T4820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.943426][ T4820] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 56.952895][ T4820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.964948][ T4820] usb 4-1: config 0 descriptor?? [ 57.001520][ T3612] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.001541][ T8975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 57.015087][ T3612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.023162][ T8975] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 57.041072][ T3612] usb 6-1: Product: syz [ 57.047336][ T3612] usb 6-1: Manufacturer: syz [ 57.054502][ T3612] usb 6-1: SerialNumber: syz [ 57.092140][ T3612] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 57.161481][ T9567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.172716][ T9567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.182975][ T9567] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.196190][ T9567] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 57.205732][ T9567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.215329][ T9567] usb 5-1: config 0 descriptor?? [ 57.222448][ T8975] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 57.234734][ T8975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.243051][ T8975] usb 2-1: Product: syz [ 57.247259][ T8975] usb 2-1: Manufacturer: syz [ 57.257001][ T8975] usb 2-1: SerialNumber: syz [ 57.361492][ T9572] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.370700][ T19] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.380164][ T9572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.389190][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.397553][ T9572] usb 1-1: Product: syz [ 57.403002][ T19] usb 3-1: Product: syz [ 57.407167][ T19] usb 3-1: Manufacturer: syz [ 57.412413][ T9572] usb 1-1: Manufacturer: syz [ 57.417007][ T9572] usb 1-1: SerialNumber: syz [ 57.422254][ T19] usb 3-1: SerialNumber: syz [ 57.461745][ T19] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 57.470208][ T9572] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 57.472325][ T4820] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.10 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 57.507116][ T9689] usb 2-1: USB disconnect, device number 2 [ 57.661401][ T3612] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 57.681470][ T4820] koneplus 0003:1E7D:2D51.0002: couldn't init struct koneplus_device [ 57.689566][ T4820] koneplus 0003:1E7D:2D51.0002: couldn't install mouse [ 57.693320][ T9567] holtek 0003:1241:5015.0003: item fetching failed at offset 0/1 [ 57.702796][ T4820] koneplus: probe of 0003:1E7D:2D51.0002 failed with error -71 [ 57.713632][ T4820] usb 4-1: USB disconnect, device number 2 [ 57.721891][ T9567] holtek 0003:1241:5015.0003: parse failed [ 57.735527][ T9567] holtek: probe of 0003:1241:5015.0003 failed with error -22 [ 57.919321][ T9567] usb 5-1: USB disconnect, device number 4 [ 58.073908][ T9689] usb 6-1: USB disconnect, device number 2 [ 58.161364][ T9572] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 58.170441][ T19] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 58.291504][ T8975] usb 2-1: new high-speed USB device number 3 using dummy_hcd 03:13:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1241, 0x5015, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "8072ab39"}]}}, 0x0}, 0x0) [ 58.441297][ T4820] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 58.551317][ T8975] usb 2-1: Using ep0 maxpacket: 8 03:13:28 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) [ 58.574231][ T5] usb 1-1: USB disconnect, device number 5 [ 58.595586][ T9157] usb 3-1: USB disconnect, device number 3 [ 58.711292][ T3612] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 58.718572][ T3612] ath9k_htc: Failed to initialize the device [ 58.725575][ T9689] usb 6-1: ath9k_htc: USB layer deinitialized [ 58.751326][ T9732] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.801319][ T8975] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.811253][ T8975] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 58.811292][ T4820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.824255][ T4820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.843373][ T4820] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 58.853230][ T4820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.862497][ T4820] usb 4-1: config 0 descriptor?? 03:13:29 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) 03:13:29 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) [ 59.011323][ T8975] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.022233][ T8975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.030353][ T8975] usb 2-1: Product: syz [ 59.034722][ T8975] usb 2-1: Manufacturer: syz [ 59.039342][ T8975] usb 2-1: SerialNumber: syz [ 59.096319][ T9689] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.112654][ T9732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.125729][ T9732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 03:13:29 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) [ 59.137796][ T9732] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.151082][ T9732] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 59.162747][ T9732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.174900][ T4820] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.10 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 59.191529][ T9732] usb 5-1: config 0 descriptor?? [ 59.201567][ T9572] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 59.208608][ T19] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 59.214393][ T9690] usb 2-1: USB disconnect, device number 3 [ 59.217000][ T9572] ath9k_htc: Failed to initialize the device [ 59.232207][ T19] ath9k_htc: Failed to initialize the device 03:13:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e512d40000000000109022400010000000009040000010301020009211000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) [ 59.247099][ T9157] usb 3-1: ath9k_htc: USB layer deinitialized [ 59.257755][ T5] usb 1-1: ath9k_htc: USB layer deinitialized [ 59.311299][ T4820] koneplus 0003:1E7D:2D51.0004: couldn't init struct koneplus_device [ 59.319755][ T4820] koneplus 0003:1E7D:2D51.0004: couldn't install mouse [ 59.353527][ T4820] koneplus: probe of 0003:1E7D:2D51.0004 failed with error -71 [ 59.363106][ T4820] usb 4-1: USB disconnect, device number 3 [ 59.631203][ T9157] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 59.638732][ T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 59.671393][ T9689] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 59.671835][ T9732] holtek 0003:1241:5015.0005: item fetching failed at offset 0/1 [ 59.689497][ T9689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.690167][ T9690] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 59.706379][ T9732] holtek 0003:1241:5015.0005: parse failed [ 59.714150][ T9732] holtek: probe of 0003:1241:5015.0005 failed with error -22 [ 59.719662][ T9689] usb 6-1: Product: syz [ 59.726655][ T9689] usb 6-1: Manufacturer: syz [ 59.731548][ T4820] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 59.733052][ T9689] usb 6-1: SerialNumber: syz [ 59.791745][ T9689] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 59.913369][ T3612] usb 5-1: USB disconnect, device number 5 [ 59.941961][ T9690] usb 2-1: Using ep0 maxpacket: 8 [ 60.091222][ T4820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.107012][ T4820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.117532][ T4820] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 60.127528][ T4820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.136518][ T4820] usb 4-1: config 0 descriptor?? [ 60.145526][ T9690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.156051][ T9690] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.181481][ T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 60.190673][ T9157] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 60.203053][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.212023][ T9157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.220376][ T5] usb 1-1: Product: syz [ 60.225361][ T9157] usb 3-1: Product: syz [ 60.230411][ T5] usb 1-1: Manufacturer: syz [ 60.235600][ T9157] usb 3-1: Manufacturer: syz [ 60.240220][ T9157] usb 3-1: SerialNumber: syz [ 60.245544][ T5] usb 1-1: SerialNumber: syz [ 60.291711][ T9157] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 60.300687][ T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 60.332690][ T9690] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 60.341830][ T9690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.349877][ T9690] usb 2-1: Product: syz [ 60.356268][ T9690] usb 2-1: Manufacturer: syz [ 60.360879][ T9690] usb 2-1: SerialNumber: syz 03:13:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1241, 0x5015, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "8072ab39"}]}}, 0x0}, 0x0) [ 60.421222][ T9689] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 60.612963][ T9157] usb 2-1: USB disconnect, device number 4 [ 60.642488][ T4820] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.10 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 60.731424][ T9572] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 60.851126][ T3612] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 60.865079][ T4820] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device [ 60.875756][ T4820] koneplus 0003:1E7D:2D51.0006: couldn't install mouse [ 60.882724][ T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 60.905646][ T9157] usb 6-1: USB disconnect, device number 3 [ 60.912103][ T4820] koneplus: probe of 0003:1E7D:2D51.0006 failed with error -71 [ 60.926273][ T4820] usb 4-1: USB disconnect, device number 4 03:13:31 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) [ 61.111131][ T9572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.124713][ T9572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.136582][ T9572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.171063][ T9572] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 61.180162][ T9572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.189828][ T9572] usb 5-1: config 0 descriptor?? [ 61.258600][ T9690] usb 3-1: USB disconnect, device number 4 [ 61.290405][ T19] usb 1-1: USB disconnect, device number 6 03:13:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e512d40000000000109022400010000000009040000010301020009211000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) 03:13:31 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=@generic={0x0, 0x2, 0x0, "2e48559a"}) [ 61.431308][ T9689] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 61.431280][ T4820] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 61.439258][ T9689] ath9k_htc: Failed to initialize the device [ 61.455327][ T9157] usb 6-1: ath9k_htc: USB layer deinitialized 03:13:31 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) [ 61.681050][ T9567] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 61.701807][ T9572] holtek 0003:1241:5015.0007: item fetching failed at offset 0/1 [ 61.709585][ T9572] holtek 0003:1241:5015.0007: parse failed [ 61.715709][ T9572] holtek: probe of 0003:1241:5015.0007 failed with error -22 [ 61.721239][ T4820] usb 2-1: Using ep0 maxpacket: 8 03:13:31 executing program 0: bpf$MAP_CREATE(0x15, &(0x7f0000000080), 0x40) 03:13:31 executing program 0: bpf$MAP_CREATE(0x15, &(0x7f0000000080), 0x40) [ 61.831108][ T9157] usb 6-1: new high-speed USB device number 4 using dummy_hcd 03:13:31 executing program 0: bpf$MAP_CREATE(0x15, &(0x7f0000000080), 0x40) 03:13:31 executing program 0: bpf$MAP_CREATE(0x15, &(0x7f0000000080), 0x40) [ 61.906832][ T9746] usb 5-1: USB disconnect, device number 6 [ 61.911138][ T5] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 61.920777][ T3612] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 61.929116][ T4820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.941601][ T5] ath9k_htc: Failed to initialize the device [ 61.947713][ T19] usb 1-1: ath9k_htc: USB layer deinitialized 03:13:31 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061103c0000000000c60000000000e7ff950000000000000035a9f4a8186d2f5cea4d9a5b3fc8b84468137d91352fa4024734828f6741acd356b10280ed8e05396ab92a4e7564aa3e3dd82261bf9c6f20d00e86c7d742539e9522993c839addd35406b6656e888fcc232ca6bc351cee520f2135a78ed4fd2a50c2882aa8b284cf8a2b88650e36d76f1108adce4fa61568405b0700111a5a414e45a074b872f87434169357481c0bee522cdcdd0c6a78a5b572da9d8e9c008248d5785ea7133a9bd448fd15fe57a08da8576ac3b9ce722f9d8bfab837b60d558df2dd312b2007892d1d95b32d4b70918f333bf60282eb621dea5f5144ed90b8e56ae26cfd3c1e0b09aa349da98a7ad9f90b13b9a3f57a6d5b095c65a8d31d65151b5876394b3cf2dedc1b5d508b22be523d2d1484c6bd60c60b3317d03e00"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) [ 61.957102][ T3612] ath9k_htc: Failed to initialize the device [ 61.972353][ T4820] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 61.982787][ T9690] usb 3-1: ath9k_htc: USB layer deinitialized 03:13:32 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061103c0000000000c60000000000e7ff950000000000000035a9f4a8186d2f5cea4d9a5b3fc8b84468137d91352fa4024734828f6741acd356b10280ed8e05396ab92a4e7564aa3e3dd82261bf9c6f20d00e86c7d742539e9522993c839addd35406b6656e888fcc232ca6bc351cee520f2135a78ed4fd2a50c2882aa8b284cf8a2b88650e36d76f1108adce4fa61568405b0700111a5a414e45a074b872f87434169357481c0bee522cdcdd0c6a78a5b572da9d8e9c008248d5785ea7133a9bd448fd15fe57a08da8576ac3b9ce722f9d8bfab837b60d558df2dd312b2007892d1d95b32d4b70918f333bf60282eb621dea5f5144ed90b8e56ae26cfd3c1e0b09aa349da98a7ad9f90b13b9a3f57a6d5b095c65a8d31d65151b5876394b3cf2dedc1b5d508b22be523d2d1484c6bd60c60b3317d03e00"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) [ 62.061231][ T9567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.083494][ T9567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 03:13:32 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061103c0000000000c60000000000e7ff950000000000000035a9f4a8186d2f5cea4d9a5b3fc8b84468137d91352fa4024734828f6741acd356b10280ed8e05396ab92a4e7564aa3e3dd82261bf9c6f20d00e86c7d742539e9522993c839addd35406b6656e888fcc232ca6bc351cee520f2135a78ed4fd2a50c2882aa8b284cf8a2b88650e36d76f1108adce4fa61568405b0700111a5a414e45a074b872f87434169357481c0bee522cdcdd0c6a78a5b572da9d8e9c008248d5785ea7133a9bd448fd15fe57a08da8576ac3b9ce722f9d8bfab837b60d558df2dd312b2007892d1d95b32d4b70918f333bf60282eb621dea5f5144ed90b8e56ae26cfd3c1e0b09aa349da98a7ad9f90b13b9a3f57a6d5b095c65a8d31d65151b5876394b3cf2dedc1b5d508b22be523d2d1484c6bd60c60b3317d03e00"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) [ 62.118610][ T9567] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 62.132651][ T9567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.142867][ T9567] usb 4-1: config 0 descriptor?? [ 62.151463][ T4820] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.160859][ T4820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.181082][ T4820] usb 2-1: Product: syz [ 62.185344][ T4820] usb 2-1: Manufacturer: syz [ 62.201008][ T4820] usb 2-1: SerialNumber: syz [ 62.331243][ T9690] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 62.351488][ T9157] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.360549][ T9157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.369070][ T9157] usb 6-1: Product: syz [ 62.374118][ T9157] usb 6-1: Manufacturer: syz 03:13:32 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) [ 62.378853][ T9157] usb 6-1: SerialNumber: syz [ 62.421407][ T9157] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 62.484774][ T4820] usb 2-1: USB disconnect, device number 5 [ 62.571202][ T9690] usb 3-1: Using ep0 maxpacket: 8 [ 62.632403][ T9567] koneplus 0003:1E7D:2D51.0008: hidraw0: USB HID v0.10 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 62.772194][ T9690] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.782374][ T9690] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 62.861033][ T9567] koneplus 0003:1E7D:2D51.0008: couldn't init struct koneplus_device [ 62.873631][ T9567] koneplus 0003:1E7D:2D51.0008: couldn't install mouse [ 62.891045][ T9567] koneplus: probe of 0003:1E7D:2D51.0008 failed with error -71 [ 62.899757][ T9567] usb 4-1: USB disconnect, device number 5 03:13:32 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) [ 62.951116][ T9690] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.961154][ T9690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.969934][ T9690] usb 3-1: Product: syz [ 62.975150][ T9690] usb 3-1: Manufacturer: syz [ 62.979811][ T9690] usb 3-1: SerialNumber: syz [ 62.990993][ T9732] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 63.232392][ T9567] usb 3-1: USB disconnect, device number 5 03:13:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e512d40000000000109022400010000000009040000010301020009211000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) [ 63.320948][ T9689] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 63.398717][ T19] usb 6-1: USB disconnect, device number 4 [ 63.590938][ T9689] usb 2-1: Using ep0 maxpacket: 8 [ 63.630975][ T4820] usb 4-1: new high-speed USB device number 6 using dummy_hcd 03:13:33 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061103c0000000000c60000000000e7ff950000000000000035a9f4a8186d2f5cea4d9a5b3fc8b84468137d91352fa4024734828f6741acd356b10280ed8e05396ab92a4e7564aa3e3dd82261bf9c6f20d00e86c7d742539e9522993c839addd35406b6656e888fcc232ca6bc351cee520f2135a78ed4fd2a50c2882aa8b284cf8a2b88650e36d76f1108adce4fa61568405b0700111a5a414e45a074b872f87434169357481c0bee522cdcdd0c6a78a5b572da9d8e9c008248d5785ea7133a9bd448fd15fe57a08da8576ac3b9ce722f9d8bfab837b60d558df2dd312b2007892d1d95b32d4b70918f333bf60282eb621dea5f5144ed90b8e56ae26cfd3c1e0b09aa349da98a7ad9f90b13b9a3f57a6d5b095c65a8d31d65151b5876394b3cf2dedc1b5d508b22be523d2d1484c6bd60c60b3317d03e00"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) 03:13:33 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) 03:13:33 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 03:13:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) [ 63.830968][ T9689] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.840843][ T9689] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 03:13:33 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) 03:13:33 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) 03:13:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) [ 64.000934][ T4820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.013570][ T4820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.027082][ T4820] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 64.031129][ T9689] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 03:13:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) 03:13:34 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) [ 64.045094][ T4820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.070941][ T9732] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 64.076891][ T9689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.077829][ T9732] ath9k_htc: Failed to initialize the device 03:13:34 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/330], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r2, r1, 0x7}, 0x10) [ 64.103430][ T4820] usb 4-1: config 0 descriptor?? [ 64.126201][ T19] usb 6-1: ath9k_htc: USB layer deinitialized [ 64.139133][ T9689] usb 2-1: Product: syz [ 64.161981][ T9689] usb 2-1: Manufacturer: syz [ 64.176318][ T9689] usb 2-1: SerialNumber: syz [ 64.280891][ T3612] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 64.476398][ T19] usb 2-1: USB disconnect, device number 6 [ 64.520884][ T3612] usb 3-1: Using ep0 maxpacket: 8 [ 64.591914][ T4820] koneplus 0003:1E7D:2D51.0009: hidraw0: USB HID v0.10 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 64.720893][ T3612] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 64.730845][ T3612] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 64.791306][ T3247] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.797689][ T3247] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.804375][ T4820] koneplus 0003:1E7D:2D51.0009: couldn't init struct koneplus_device [ 64.812766][ T4820] koneplus 0003:1E7D:2D51.0009: couldn't install mouse [ 64.822459][ T4820] koneplus: probe of 0003:1E7D:2D51.0009 failed with error -71 [ 64.836725][ T4820] usb 4-1: USB disconnect, device number 6 03:13:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866302c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xe0}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 64.890899][ T3612] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 64.899958][ T3612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.909910][ T3612] usb 3-1: Product: syz [ 64.914154][ T3612] usb 3-1: Manufacturer: syz [ 64.918824][ T3612] usb 3-1: SerialNumber: syz [ 65.166333][ T4820] usb 3-1: USB disconnect, device number 6 03:13:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866302c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xe0}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 03:13:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) 03:13:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000)=0x1, 0x4) 03:13:35 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 03:13:35 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201080049db2e08450c10105d6d0000000109021b000100000000090400000103030000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)='R', 0x1) write$char_usb(r1, &(0x7f0000001380)="89", 0x1) syz_usb_disconnect(r0) 03:13:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866302c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xe0}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 03:13:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000)=0x1, 0x4) 03:13:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866302c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xe0}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 03:13:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000)=0x1, 0x4) 03:13:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000)=0x1, 0x4) 03:13:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866302c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xe0}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 03:13:36 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 66.002585][ T8975] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 66.040797][ T3612] usb 3-1: new high-speed USB device number 7 using dummy_hcd 03:13:36 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x347700) fallocate(r0, 0x0, 0x0, 0x0) 03:13:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866302c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xe0}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 66.250806][ T8975] usb 2-1: Using ep0 maxpacket: 8 [ 66.300773][ T3612] usb 3-1: Using ep0 maxpacket: 8 [ 66.380814][ T8975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.390942][ T8975] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.404030][ T8975] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 66.413265][ T8975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.423712][ T8975] usb 2-1: config 0 descriptor?? [ 66.475350][ T8975] yurex 2-1:0.0: Could not find endpoints [ 66.482495][ T8975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 66.500970][ T3612] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 66.510806][ T3612] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 66.673045][ T4820] usb 2-1: USB disconnect, device number 7 [ 66.681567][ T3612] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.696300][ T3612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.706465][ T3612] usb 3-1: Product: syz [ 66.710659][ T3612] usb 3-1: Manufacturer: syz [ 66.716223][ T3612] usb 3-1: SerialNumber: syz [ 66.972381][ T8975] usb 3-1: USB disconnect, device number 7 03:13:37 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 67.660726][ T3612] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 67.910704][ T3612] usb 2-1: Using ep0 maxpacket: 8 [ 68.030993][ T3612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.041134][ T3612] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.054730][ T3612] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 68.064401][ T3612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.074678][ T3612] usb 2-1: config 0 descriptor?? [ 68.123384][ T3612] yurex 2-1:0.0: Could not find endpoints [ 68.129942][ T3612] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 68.322534][ T3612] usb 2-1: USB disconnect, device number 8 03:13:38 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201080049db2e08450c10105d6d0000000109021b000100000000090400000103030000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)='R', 0x1) write$char_usb(r1, &(0x7f0000001380)="89", 0x1) syz_usb_disconnect(r0) 03:13:38 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x347700) fallocate(r0, 0x0, 0x0, 0x0) 03:13:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866302c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xe0}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc310e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 03:13:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:38 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 03:13:38 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:38 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 03:13:38 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x347700) fallocate(r0, 0x0, 0x0, 0x0) 03:13:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:38 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x347700) fallocate(r0, 0x0, 0x0, 0x0) 03:13:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 03:13:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x24048450) [ 68.860674][ T3612] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 69.100687][ T3612] usb 2-1: Using ep0 maxpacket: 8 [ 69.220693][ T3612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.230922][ T3612] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.243869][ T3612] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 69.253006][ T3612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.263155][ T3612] usb 2-1: config 0 descriptor?? [ 69.303545][ T3612] yurex 2-1:0.0: Could not find endpoints [ 69.310101][ T3612] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 69.505067][ T3612] usb 2-1: USB disconnect, device number 9 03:13:40 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201080049db2e08450c10105d6d0000000109021b000100000000090400000103030000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)='R', 0x1) write$char_usb(r1, &(0x7f0000001380)="89", 0x1) syz_usb_disconnect(r0) 03:13:40 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB='.'], &(0x7f0000000380)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2210424, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 03:13:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 03:13:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:40 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB='.'], &(0x7f0000000380)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2210424, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 03:13:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') 03:13:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b26, &(0x7f0000000040)='wlan1\x00') [ 70.286173][T11491] EXT4-fs (sda1): Cannot specify journal on remount 03:13:40 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB='.'], &(0x7f0000000380)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2210424, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 03:13:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0xd, 0x4, 0x5}]}) [ 70.372891][T11510] EXT4-fs (sda1): Cannot specify journal on remount 03:13:40 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB='.'], &(0x7f0000000380)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2210424, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) [ 70.459124][T11521] EXT4-fs (sda1): Cannot specify journal on remount [ 70.552599][ T3612] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 70.574105][T11527] EXT4-fs (sda1): Cannot specify journal on remount [ 70.790624][ T3612] usb 2-1: Using ep0 maxpacket: 8 [ 70.910814][ T3612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.922397][ T3612] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.935805][ T3612] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 70.946176][ T3612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.955195][ T3612] usb 2-1: config 0 descriptor?? [ 71.005344][ T3612] yurex 2-1:0.0: Could not find endpoints [ 71.012170][ T3612] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 71.209070][ T8975] usb 2-1: USB disconnect, device number 10 03:13:41 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x2}, 0x2}, 0x6d) 03:13:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0xd, 0x4, 0x5}]}) 03:13:41 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201080049db2e08450c10105d6d0000000109021b000100000000090400000103030000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)='R', 0x1) write$char_usb(r1, &(0x7f0000001380)="89", 0x1) syz_usb_disconnect(r0) 03:13:41 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000100)=0x20) 03:13:41 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x2}, 0x2}, 0x6d) 03:13:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0xd, 0x4, 0x5}]}) 03:13:41 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x2}, 0x2}, 0x6d) 03:13:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0xd, 0x4, 0x5}]}) 03:13:42 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x2}, 0x2}, 0x6d) 03:13:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000040)) 03:13:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000040)) [ 72.270514][ T8975] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 72.520505][ T8975] usb 2-1: Using ep0 maxpacket: 8 [ 72.641698][ T8975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.652489][ T8975] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.666318][ T8975] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 72.676112][ T8975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.687054][ T8975] usb 2-1: config 0 descriptor?? [ 72.733990][ T8975] yurex 2-1:0.0: Could not find endpoints [ 72.740410][ T8975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 72.935315][ T8975] usb 2-1: USB disconnect, device number 11 03:13:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000040)) 03:13:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060900be652000840109022400ff0000000009043401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 03:13:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000040)) 03:13:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000002f00)='/dev/loop#\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) 03:13:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x0) 03:13:43 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) [ 74.030455][ T9689] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 74.282144][ T9689] usb 2-1: Using ep0 maxpacket: 8 [ 74.400505][ T9689] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 74.409286][ T9689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.419623][ T9689] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 74.429885][ T9689] usb 2-1: config 0 has no interface number 0 [ 74.436076][ T9689] usb 2-1: config 0 interface 52 has no altsetting 0 [ 74.560708][ T9689] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=65.be [ 74.569754][ T9689] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=132 [ 74.578781][ T9689] usb 2-1: Manufacturer: syz [ 74.583693][ T9689] usb 2-1: SerialNumber: syz [ 74.589323][ T9689] usb 2-1: config 0 descriptor?? [ 75.051730][ T9689] usb 2-1: USB disconnect, device number 12 [ 75.820457][ T3612] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 76.060497][ T3612] usb 2-1: Using ep0 maxpacket: 8 [ 76.180444][ T3612] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 76.189275][ T3612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.199815][ T3612] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 76.209557][ T3612] usb 2-1: config 0 has no interface number 0 [ 76.215665][ T3612] usb 2-1: config 0 interface 52 has no altsetting 0 [ 76.342003][ T3612] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=65.be [ 76.351124][ T3612] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=132 [ 76.359581][ T3612] usb 2-1: Manufacturer: syz [ 76.364381][ T3612] usb 2-1: SerialNumber: syz [ 76.369766][ T3612] usb 2-1: config 0 descriptor?? 03:13:46 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060900be652000840109022400ff0000000009043401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 03:13:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000002f00)='/dev/loop#\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) 03:13:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000002f00)='/dev/loop#\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) 03:13:46 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000004180)='/proc/capi/capi20\x00', 0x0, 0x0) syz_io_uring_setup(0x1553, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:13:46 executing program 5: r0 = fork() process_vm_readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/35, 0x23}, {&(0x7f0000001080)=""/33, 0x21}], 0x4, &(0x7f0000001700)=[{&(0x7f0000001100)=""/255, 0xff}, {&(0x7f0000001200)=""/213, 0xd5}, {&(0x7f0000001300)=""/90, 0x5a}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000001500)=""/202, 0xfffffe0d}, {&(0x7f0000001800)=""/52, 0x28}, {&(0x7f0000001640)=""/151, 0x97}], 0x8, 0x0) 03:13:46 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:46 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) [ 76.633229][ T3612] usb 2-1: Can not set alternate setting to 1, error: -71 [ 76.654007][ T3612] synaptics_usb: probe of 2-1:0.52 failed with error -71 03:13:46 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000004180)='/proc/capi/capi20\x00', 0x0, 0x0) syz_io_uring_setup(0x1553, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:13:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000002f00)='/dev/loop#\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) 03:13:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000002f00)='/dev/loop#\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) 03:13:46 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) [ 76.695667][ T3612] usb 2-1: USB disconnect, device number 13 03:13:46 executing program 5: r0 = fork() process_vm_readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/35, 0x23}, {&(0x7f0000001080)=""/33, 0x21}], 0x4, &(0x7f0000001700)=[{&(0x7f0000001100)=""/255, 0xff}, {&(0x7f0000001200)=""/213, 0xd5}, {&(0x7f0000001300)=""/90, 0x5a}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000001500)=""/202, 0xfffffe0d}, {&(0x7f0000001800)=""/52, 0x28}, {&(0x7f0000001640)=""/151, 0x97}], 0x8, 0x0) [ 77.090456][ T3612] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 77.330421][ T3612] usb 2-1: Using ep0 maxpacket: 8 [ 77.461613][ T3612] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 77.470730][ T3612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.482526][ T3612] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 77.492002][ T3612] usb 2-1: config 0 has no interface number 0 [ 77.498092][ T3612] usb 2-1: config 0 interface 52 has no altsetting 0 [ 77.621761][ T3612] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=65.be [ 77.631181][ T3612] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=132 [ 77.639425][ T3612] usb 2-1: Manufacturer: syz [ 77.645415][ T3612] usb 2-1: SerialNumber: syz [ 77.652340][ T3612] usb 2-1: config 0 descriptor?? [ 78.104692][ T9689] usb 2-1: USB disconnect, device number 14 03:13:48 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060900be652000840109022400ff0000000009043401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 03:13:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000002f00)='/dev/loop#\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) 03:13:48 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000004180)='/proc/capi/capi20\x00', 0x0, 0x0) syz_io_uring_setup(0x1553, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:13:48 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000002f00)='/dev/loop#\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) 03:13:48 executing program 5: r0 = fork() process_vm_readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/35, 0x23}, {&(0x7f0000001080)=""/33, 0x21}], 0x4, &(0x7f0000001700)=[{&(0x7f0000001100)=""/255, 0xff}, {&(0x7f0000001200)=""/213, 0xd5}, {&(0x7f0000001300)=""/90, 0x5a}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000001500)=""/202, 0xfffffe0d}, {&(0x7f0000001800)=""/52, 0x28}, {&(0x7f0000001640)=""/151, 0x97}], 0x8, 0x0) 03:13:48 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:48 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:48 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:48 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000004180)='/proc/capi/capi20\x00', 0x0, 0x0) syz_io_uring_setup(0x1553, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:13:48 executing program 5: r0 = fork() process_vm_readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/35, 0x23}, {&(0x7f0000001080)=""/33, 0x21}], 0x4, &(0x7f0000001700)=[{&(0x7f0000001100)=""/255, 0xff}, {&(0x7f0000001200)=""/213, 0xd5}, {&(0x7f0000001300)=""/90, 0x5a}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000001500)=""/202, 0xfffffe0d}, {&(0x7f0000001800)=""/52, 0x28}, {&(0x7f0000001640)=""/151, 0x97}], 0x8, 0x0) 03:13:48 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) [ 78.990518][ T3612] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 79.230409][ T3612] usb 2-1: Using ep0 maxpacket: 8 [ 79.350445][ T3612] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 79.359281][ T3612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.370153][ T3612] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 79.379598][ T3612] usb 2-1: config 0 has no interface number 0 [ 79.386032][ T3612] usb 2-1: config 0 interface 52 has no altsetting 0 [ 79.510519][ T3612] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=65.be [ 79.519615][ T3612] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=132 [ 79.528047][ T3612] usb 2-1: Manufacturer: syz [ 79.532801][ T3612] usb 2-1: SerialNumber: syz [ 79.539385][ T3612] usb 2-1: config 0 descriptor?? [ 80.014128][ T3612] usb 2-1: USB disconnect, device number 15 03:13:50 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060900be652000840109022400ff0000000009043401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 03:13:50 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:50 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:50 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x1100) 03:13:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:50 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x1100) 03:13:50 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:50 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:50 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000380)='Q', 0xfdef}], 0x1) 03:13:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x1100) [ 80.880366][ T19] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 81.150382][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 81.290630][ T19] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 81.299346][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.309804][ T19] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 81.319281][ T19] usb 2-1: config 0 has no interface number 0 [ 81.325431][ T19] usb 2-1: config 0 interface 52 has no altsetting 0 [ 81.460615][ T19] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=65.be [ 81.470519][ T19] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=132 [ 81.478810][ T19] usb 2-1: Manufacturer: syz [ 81.484068][ T19] usb 2-1: SerialNumber: syz [ 81.491137][ T19] usb 2-1: config 0 descriptor?? [ 81.955393][ T3612] usb 2-1: USB disconnect, device number 16 03:13:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x1100) 03:13:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x1100) 03:13:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r3, &(0x7f0000000740), 0xfffffdd5) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 03:13:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x88, 0xa, 0x0, &(0x7f0000000040)) 03:13:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x1100) 03:13:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x1100) 03:13:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x88, 0xa, 0x0, &(0x7f0000000040)) 03:13:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x140, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63a}) 03:13:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x88, 0xa, 0x0, &(0x7f0000000040)) 03:13:52 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x140, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63a}) 03:13:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x88, 0xa, 0x0, &(0x7f0000000040)) 03:13:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r3, &(0x7f0000000740), 0xfffffdd5) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 03:13:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x140, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63a}) 03:13:53 executing program 3: unshare(0x2a040600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x200000, 0x4) 03:13:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:53 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x140, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63a}) 03:13:53 executing program 3: unshare(0x2a040600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x200000, 0x4) 03:13:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r3, &(0x7f0000000740), 0xfffffdd5) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 03:13:53 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}, 0x33}], [{@fowner_lt={'fowner<'}}], 0x2f}) 03:13:53 executing program 3: unshare(0x2a040600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x200000, 0x4) 03:13:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 83.682332][T11935] tmpfs: Bad value for 'gid' [ 83.694856][T11935] tmpfs: Bad value for 'gid' 03:13:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:13:53 executing program 3: unshare(0x2a040600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x200000, 0x4) 03:13:53 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}, 0x33}], [{@fowner_lt={'fowner<'}}], 0x2f}) 03:13:53 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}, 0x33}], [{@fowner_lt={'fowner<'}}], 0x2f}) [ 83.841949][T11947] tmpfs: Bad value for 'gid' 03:13:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 83.921969][T11953] tmpfs: Bad value for 'gid' 03:13:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r3, &(0x7f0000000740), 0xfffffdd5) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 03:13:53 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}, 0x33}], [{@fowner_lt={'fowner<'}}], 0x2f}) [ 84.188418][T11962] tmpfs: Bad value for 'gid' 03:13:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1147542, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x0) ftruncate(r4, 0x208200) sendfile(r2, r3, 0x0, 0x800000000035) 03:13:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:13:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00', r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xb, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) [ 84.547148][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 84.547196][ T36] audit: type=1800 audit(1616382834.454:20): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14155 res=0 errno=0 03:13:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:13:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 84.660132][T11975] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.722837][ T36] audit: type=1800 audit(1616382834.544:21): pid=11972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14155 res=0 errno=0 03:13:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x400, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe70, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "00000000e6ffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 03:13:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00', r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xb, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) 03:13:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:13:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1147542, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x0) ftruncate(r4, 0x208200) sendfile(r2, r3, 0x0, 0x800000000035) [ 84.948817][T11984] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.969481][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 84.993202][ T36] audit: type=1800 audit(1616382834.904:22): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 85.076722][ T36] audit: type=1800 audit(1616382834.984:23): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14133 res=0 errno=0 03:13:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:13:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00', r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xb, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) 03:13:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:13:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1147542, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x0) ftruncate(r4, 0x208200) sendfile(r2, r3, 0x0, 0x800000000035) 03:13:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:13:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 85.528493][T12009] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.553468][ T36] audit: type=1800 audit(1616382835.464:24): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14197 res=0 errno=0 03:13:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00', r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xb, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) [ 85.800768][T12016] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.815893][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:13:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x400, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe70, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "00000000e6ffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 03:13:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1147542, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x0) ftruncate(r4, 0x208200) sendfile(r2, r3, 0x0, 0x800000000035) [ 86.009653][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 86.243943][ T36] audit: type=1800 audit(1616382836.144:25): pid=12027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14198 res=0 errno=0 [ 86.604465][ T36] audit: type=1800 audit(1616382836.514:26): pid=12012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 03:13:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x400, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe70, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "00000000e6ffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 86.718935][ T36] audit: type=1800 audit(1616382836.534:27): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 03:13:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x400, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe70, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "00000000e6ffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 86.884858][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 86.942897][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 87.028149][ T36] audit: type=1800 audit(1616382836.934:28): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 03:13:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 87.411198][ T36] audit: type=1800 audit(1616382837.324:29): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 03:13:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x400, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe70, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "00000000e6ffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 03:13:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x400, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe70, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "00000000e6ffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 87.817684][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 87.913735][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:13:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x400, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe70, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "00000000e6ffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 03:13:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 88.745449][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:13:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:13:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 89.729920][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 89.729934][ T36] audit: type=1800 audit(1616382839.634:36): pid=12085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 03:13:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 90.020571][ T36] audit: type=1800 audit(1616382839.924:37): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 03:14:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 90.407723][ T36] audit: type=1800 audit(1616382840.314:38): pid=12083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 03:14:00 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 91.082063][ T36] audit: type=1800 audit(1616382840.994:39): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 [ 91.226275][ T36] audit: type=1800 audit(1616382841.084:40): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 03:14:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 91.381786][ T36] audit: type=1800 audit(1616382841.294:41): pid=12122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 91.536199][ T36] audit: type=1800 audit(1616382841.424:42): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 03:14:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 91.757211][ T36] audit: type=1800 audit(1616382841.584:43): pid=12110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 03:14:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 91.940432][ T36] audit: type=1800 audit(1616382841.844:44): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 03:14:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 92.792804][ T36] audit: type=1800 audit(1616382842.704:45): pid=12148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=26 res=0 errno=0 03:14:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 94.746246][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 94.746259][ T36] audit: type=1800 audit(1616382844.654:53): pid=12156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=30 res=0 errno=0 03:14:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 95.063133][ T36] audit: type=1800 audit(1616382844.974:54): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 03:14:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 95.205984][ T36] audit: type=1800 audit(1616382844.994:55): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 03:14:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 95.366561][ T36] audit: type=1800 audit(1616382845.224:56): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 03:14:05 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1147542, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x0) ftruncate(r4, 0x208200) sendfile(r2, r3, 0x0, 0x800000000035) [ 95.542168][ T36] audit: type=1800 audit(1616382845.424:57): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=26 res=0 errno=0 03:14:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 95.862697][ T36] audit: type=1800 audit(1616382845.764:58): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14205 res=0 errno=0 03:14:06 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1147542, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x0) ftruncate(r4, 0x208200) sendfile(r2, r3, 0x0, 0x800000000035) [ 96.463465][ T36] audit: type=1800 audit(1616382846.374:59): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=18 res=0 errno=0 03:14:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 96.604732][ T36] audit: type=1800 audit(1616382846.374:60): pid=12212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 03:14:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 96.766374][ T36] audit: type=1800 audit(1616382846.594:61): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14205 res=0 errno=0 [ 96.943350][ T36] audit: type=1800 audit(1616382846.724:62): pid=12220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=34 res=0 errno=0 03:14:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:07 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1147542, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, 0x0, 0x0) ftruncate(r4, 0x208200) sendfile(r2, r3, 0x0, 0x800000000035) 03:14:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:07 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) 03:14:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 98.197683][T12247] hub 9-0:1.0: USB hub found 03:14:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 98.232508][T12247] hub 9-0:1.0: 8 ports detected 03:14:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 03:14:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 03:14:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 03:14:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 98.710676][ T263] ================================================================== [ 98.718806][ T263] BUG: KCSAN: data-race in __mod_timer / expire_timers [ 98.726090][ T263] [ 98.728404][ T263] write to 0xffff88813bc1b908 of 8 bytes by interrupt on cpu 0: [ 98.736320][ T263] expire_timers+0x11e/0x260 [ 98.741341][ T263] __run_timers+0x358/0x3f0 [ 98.746025][ T263] run_timer_softirq+0x19/0x30 [ 98.750986][ T263] __do_softirq+0x13c/0x2c3 [ 98.755490][ T263] __irq_exit_rcu+0xb4/0xc0 [ 98.759981][ T263] sysvec_apic_timer_interrupt+0x6e/0x80 [ 98.765605][ T263] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 98.771737][ T263] _raw_spin_lock+0x0/0x50 [ 98.776473][ T263] finish_fault+0x381/0x490 [ 98.781406][ T263] do_read_fault+0x324/0x530 [ 98.785995][ T263] handle_mm_fault+0x1019/0x1840 [ 98.790939][ T263] __get_user_pages+0xa47/0x1000 [ 98.795886][ T263] __mm_populate+0x24d/0x380 [ 98.800481][ T263] do_shmat+0x727/0x940 [ 98.804870][ T263] __x64_sys_shmat+0x58/0xa0 [ 98.809738][ T263] do_syscall_64+0x39/0x80 [ 98.814165][ T263] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 98.820052][ T263] [ 98.822511][ T263] read to 0xffff88813bc1b908 of 8 bytes by task 263 on cpu 1: [ 98.830050][ T263] __mod_timer+0x44e/0xc10 [ 98.834456][ T263] add_timer+0x38/0x50 [ 98.838515][ T263] __queue_delayed_work+0xec/0x150 [ 98.843766][ T263] queue_delayed_work_on+0x6f/0xd0 [ 98.849529][ T263] batadv_bla_periodic_work+0x529/0x590 [ 98.855369][ T263] process_one_work+0x3e1/0x950 [ 98.860249][ T263] worker_thread+0x616/0xa70 [ 98.864852][ T263] kthread+0x20b/0x230 [ 98.868910][ T263] ret_from_fork+0x1f/0x30 [ 98.873338][ T263] [ 98.875649][ T263] Reported by Kernel Concurrency Sanitizer on: [ 98.882041][ T263] CPU: 1 PID: 263 Comm: kworker/u4:3 Not tainted 5.12.0-rc3-syzkaller #0 [ 98.891114][ T263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.901427][ T263] Workqueue: bat_events batadv_bla_periodic_work 03:14:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) [ 98.907998][ T263] ================================================================== 03:14:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 03:14:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x5000) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f00001e4000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000081000/0x4000)=nil, 0xffffffffffffdfff) shmat(0xffffffffffffffff, &(0x7f00000be000/0x4000)=nil, 0x1000) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x2000, 0x100, &(0x7f00003d8000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x0) shmat(r2, &(0x7f000001f000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 03:14:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 03:14:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r2, 0x4c3df3aa7da77e11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) 03:14:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 99.921705][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 99.921718][ T36] audit: type=1800 audit(1616382849.834:71): pid=12253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 03:14:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:14:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r2, 0x4c3df3aa7da77e11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) 03:14:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) [ 100.027494][ T36] audit: type=1800 audit(1616382849.884:72): pid=12269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=42 res=0 errno=0 03:14:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r2, 0x4c3df3aa7da77e11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) 03:14:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:14:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, r2, 0x4c3df3aa7da77e11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) [ 100.372099][ T36] audit: type=1800 audit(1616382850.284:73): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=34 res=0 errno=0 03:14:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:14:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) writev(r0, &(0x7f0000000000), 0x1) 03:14:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) writev(r0, &(0x7f0000000000), 0x1) 03:14:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) writev(r0, &(0x7f0000000000), 0x1) 03:14:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) writev(r0, &(0x7f0000000000), 0x1) 03:14:11 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb6, 0x28, 0xa2, 0x40, 0x9710, 0x7832, 0xfe41, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x9f, 0x5c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b40)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000001440)=ANY=[@ANYBLOB="000002000000005c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001f40)={0x44, &(0x7f0000001d40)={0x0, 0x0, 0x2, "ccd4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000002000000545b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "16cb"}, 0x0, 0x0, 0x0, 0x0}) 03:14:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x68], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:14:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') getdents(r2, &(0x7f0000000180)=""/238, 0xee) ioctl$int_out(r2, 0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x15bb00) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0xae18, 0x0, 0x2eca}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:14:11 executing program 2: r0 = gettid() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getpriority(0x1, r0) 03:14:11 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0xfe00}, {0x0, 0x0, 0x1800}, {0x2, 0x8, 0x1800}], 0x3, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0x7fff, 0x1000}], 0x1) 03:14:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x68], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:14:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x68], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 101.246712][ T36] audit: type=1326 audit(1616382851.154:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12428 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x466459 code=0x0 03:14:11 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0xfe00}, {0x0, 0x0, 0x1800}, {0x2, 0x8, 0x1800}], 0x3, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0x7fff, 0x1000}], 0x1) 03:14:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x68], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:14:11 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0) 03:14:11 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0xfe00}, {0x0, 0x0, 0x1800}, {0x2, 0x8, 0x1800}], 0x3, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0x7fff, 0x1000}], 0x1) [ 101.460389][ T3612] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.800363][ T19] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 101.840372][ T3612] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fe.41 [ 101.849587][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.858494][ T3612] usb 1-1: config 0 descriptor?? [ 102.063631][ T36] audit: type=1326 audit(1616382851.974:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12428 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x466459 code=0x0 [ 102.170407][ T19] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11 [ 102.179737][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.190131][ T19] usb 6-1: config 0 descriptor?? [ 102.233799][ T19] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 102.450393][ T19] gspca_cpia1: usb_control_msg 05, error -71 [ 102.456429][ T19] cpia1 6-1:0.0: Cannot go to low power mode: -71 [ 102.480340][ T19] gspca_cpia1: usb_control_msg 01, error -71 [ 102.486863][ T19] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 102.496191][ T19] usb 6-1: USB disconnect, device number 5 [ 103.200357][ T19] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 103.570418][ T19] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11 [ 103.580946][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.594471][ T19] usb 6-1: config 0 descriptor?? [ 103.642326][ T19] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 103.870358][ T19] gspca_cpia1: usb_control_msg 05, error -71 [ 103.876376][ T19] cpia1 6-1:0.0: Cannot go to low power mode: -71 [ 103.901941][ T19] gspca_cpia1: usb_control_msg 01, error -71 [ 103.908823][ T19] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 103.917586][ T19] usb 6-1: USB disconnect, device number 6 [ 105.260368][ T3612] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -22 [ 105.270786][ T3612] usb 1-1: USB disconnect, device number 7 [ 105.930349][ T8975] usb 1-1: new high-speed USB device number 8 using dummy_hcd 03:14:16 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb6, 0x28, 0xa2, 0x40, 0x9710, 0x7832, 0xfe41, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x9f, 0x5c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b40)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000001440)=ANY=[@ANYBLOB="000002000000005c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001f40)={0x44, &(0x7f0000001d40)={0x0, 0x0, 0x2, "ccd4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000002000000545b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "16cb"}, 0x0, 0x0, 0x0, 0x0}) 03:14:16 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) fallocate(r1, 0x0, 0x0, 0x40000) fallocate(r0, 0x20, 0x0, 0xffffffbf000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r2, 0xffffffff000) 03:14:16 executing program 1: write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r2, &(0x7f00008a7000/0x1000)=nil, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) pipe2$9p(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) shmdt(r1) dup2(0xffffffffffffffff, r3) 03:14:16 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0xfe00}, {0x0, 0x0, 0x1800}, {0x2, 0x8, 0x1800}], 0x3, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0x7fff, 0x1000}], 0x1) 03:14:16 executing program 2: r0 = gettid() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getpriority(0x1, r0) 03:14:16 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0) [ 106.199537][ T36] audit: type=1326 audit(1616382856.104:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12509 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x466459 code=0x0 03:14:16 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb6, 0x28, 0xa2, 0x40, 0x9710, 0x7832, 0xfe41, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x9f, 0x5c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b40)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000001440)=ANY=[@ANYBLOB="000002000000005c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001f40)={0x44, &(0x7f0000001d40)={0x0, 0x0, 0x2, "ccd4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000002000000545b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "16cb"}, 0x0, 0x0, 0x0, 0x0}) [ 106.280349][ T8975] usb 1-1: device descriptor read/all, error -71 03:14:16 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) fallocate(r1, 0x0, 0x0, 0x40000) fallocate(r0, 0x20, 0x0, 0xffffffbf000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r2, 0xffffffff000) [ 106.335309][ T36] audit: type=1800 audit(1616382856.244:77): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=14239 res=0 errno=0 [ 106.391807][ T36] audit: type=1800 audit(1616382856.264:78): pid=12527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=14239 res=0 errno=0 03:14:16 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) fallocate(r1, 0x0, 0x0, 0x40000) fallocate(r0, 0x20, 0x0, 0xffffffbf000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r2, 0xffffffff000) [ 106.452859][ T36] audit: type=1800 audit(1616382856.264:79): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=14239 res=0 errno=0 [ 106.480369][ T9732] usb 6-1: new high-speed USB device number 7 using dummy_hcd 03:14:16 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) fallocate(r1, 0x0, 0x0, 0x40000) fallocate(r0, 0x20, 0x0, 0xffffffbf000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r2, 0xffffffff000) 03:14:16 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) fallocate(r1, 0x0, 0x0, 0x40000) fallocate(r0, 0x20, 0x0, 0xffffffbf000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r2, 0xffffffff000) 03:14:16 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) fallocate(r1, 0x0, 0x0, 0x40000) fallocate(r0, 0x20, 0x0, 0xffffffbf000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r2, 0xffffffff000) [ 106.660396][ T9157] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.662043][ T8975] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.850390][ T9732] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11 [ 106.859575][ T9732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.880471][ T9732] usb 6-1: config 0 descriptor?? [ 106.922559][ T9732] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 107.038665][ T9157] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fe.41 [ 107.048327][ T9157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.059192][ T9157] usb 4-1: config 0 descriptor?? [ 107.070353][ T8975] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=fe.41 [ 107.081164][ T8975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.091852][ T8975] usb 1-1: config 0 descriptor?? [ 107.140323][ T9732] gspca_cpia1: usb_control_msg 05, error -71 [ 107.146435][ T9732] cpia1 6-1:0.0: Cannot go to low power mode: -71 [ 107.171726][ T9732] gspca_cpia1: usb_control_msg 01, error -71 [ 107.177942][ T9732] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 107.187336][ T9732] usb 6-1: USB disconnect, device number 7