[ OK ] Started Regular background program processing daemon. Starting getty on tty2-tty6 if dbus and logind are not available... Starting Permit User Sessions... [ OK ] Started Daily apt upgrade and clean activities. [ OK ] Reached target Timers. [ OK ] Started System Logging Service. [ OK ] Found device /dev/ttyS0. [ OK ] Started Permit User Sessions. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.178' (ECDSA) to the list of known hosts. 2020/06/30 10:11:57 fuzzer started 2020/06/30 10:11:58 dialing manager at 10.128.0.26:34179 2020/06/30 10:11:58 syscalls: 3118 2020/06/30 10:11:58 code coverage: enabled 2020/06/30 10:11:58 comparison tracing: enabled 2020/06/30 10:11:58 extra coverage: enabled 2020/06/30 10:11:58 setuid sandbox: enabled 2020/06/30 10:11:58 namespace sandbox: enabled 2020/06/30 10:11:58 Android sandbox: enabled 2020/06/30 10:11:58 fault injection: enabled 2020/06/30 10:11:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/30 10:11:58 net packet injection: enabled 2020/06/30 10:11:58 net device setup: enabled 2020/06/30 10:11:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/30 10:11:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/30 10:11:58 USB emulation: enabled 10:16:13 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) syzkaller login: [ 323.840054][ T28] audit: type=1400 audit(1593512173.279:8): avc: denied { execmem } for pid=6821 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 324.050250][ T6822] IPVS: ftp: loaded support on port[0] = 21 10:16:13 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) [ 324.218620][ T6822] chnl_net:caif_netlink_parms(): no params data found [ 324.325388][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.343364][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.351644][ T6822] device bridge_slave_0 entered promiscuous mode [ 324.377264][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.394419][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.402339][ T6822] device bridge_slave_1 entered promiscuous mode [ 324.440596][ T6954] IPVS: ftp: loaded support on port[0] = 21 [ 324.455683][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.488559][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.545218][ T6822] team0: Port device team_slave_0 added [ 324.565728][ T6822] team0: Port device team_slave_1 added 10:16:14 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4100, 0x0) [ 324.610822][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.633286][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.660001][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.695110][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.702111][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.730984][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.918192][ T6822] device hsr_slave_0 entered promiscuous mode 10:16:14 executing program 3: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x1, 0x33}, 0x0, @in6=@empty, 0x0, 0x1, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 325.003868][ T6822] device hsr_slave_1 entered promiscuous mode [ 325.091467][ T7081] IPVS: ftp: loaded support on port[0] = 21 [ 325.103707][ T6954] chnl_net:caif_netlink_parms(): no params data found 10:16:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x6}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2fc0}}]}]}}]}, 0x88}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x492492492492570, 0x0) [ 325.379395][ T7144] IPVS: ftp: loaded support on port[0] = 21 [ 325.408475][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.417073][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.429229][ T6954] device bridge_slave_0 entered promiscuous mode [ 325.476293][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.484947][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.494671][ T6954] device bridge_slave_1 entered promiscuous mode [ 325.567983][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 325.586952][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.627560][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.706842][ T6954] team0: Port device team_slave_0 added [ 325.729526][ T6954] team0: Port device team_slave_1 added [ 325.772836][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.780871][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.808693][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.831706][ T7299] IPVS: ftp: loaded support on port[0] = 21 [ 325.861612][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.873139][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.913431][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.957249][ T6822] netdevsim netdevsim0 netdevsim0: renamed from eth0 10:16:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2001ff", 0x14, 0x6, 0x0, @remote, @local={0xfe, 0x80, [0x2]}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 326.030251][ T6822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.152674][ T6822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.222820][ T6822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.327604][ T6954] device hsr_slave_0 entered promiscuous mode [ 326.373626][ T6954] device hsr_slave_1 entered promiscuous mode [ 326.413291][ T6954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.421155][ T6954] Cannot create hsr debugfs directory [ 326.433456][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 326.455518][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.462619][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.471381][ T7081] device bridge_slave_0 entered promiscuous mode [ 326.511057][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.519128][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.527662][ T7081] device bridge_slave_1 entered promiscuous mode [ 326.555494][ T7414] IPVS: ftp: loaded support on port[0] = 21 [ 326.564347][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.610325][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.646370][ T7081] team0: Port device team_slave_0 added [ 326.657194][ T7081] team0: Port device team_slave_1 added [ 326.726151][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.733875][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.761338][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.799113][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.806868][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.839200][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.860750][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.868892][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.880460][ T7144] device bridge_slave_0 entered promiscuous mode [ 326.891496][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.898764][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.908439][ T7144] device bridge_slave_1 entered promiscuous mode [ 326.966126][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.022785][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.097037][ T7081] device hsr_slave_0 entered promiscuous mode [ 327.153564][ T7081] device hsr_slave_1 entered promiscuous mode [ 327.203312][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.211069][ T7081] Cannot create hsr debugfs directory [ 327.327319][ T7299] chnl_net:caif_netlink_parms(): no params data found [ 327.347909][ T7144] team0: Port device team_slave_0 added [ 327.364451][ T7144] team0: Port device team_slave_1 added [ 327.378269][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.400102][ T6954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.501363][ T6954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.570404][ T6954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.627291][ T6954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 327.700118][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.707242][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.733693][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.808633][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.819445][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.848681][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.875502][ T7414] chnl_net:caif_netlink_parms(): no params data found [ 327.910653][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.925551][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.972256][ T6822] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.047754][ T7144] device hsr_slave_0 entered promiscuous mode [ 328.105709][ T7144] device hsr_slave_1 entered promiscuous mode [ 328.143210][ T7144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.150892][ T7144] Cannot create hsr debugfs directory [ 328.166222][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.175079][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.182901][ T7299] device bridge_slave_0 entered promiscuous mode [ 328.193816][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.201000][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.210092][ T7299] device bridge_slave_1 entered promiscuous mode [ 328.240068][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.291003][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.316653][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.326032][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.336787][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.344335][ T7445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.352325][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.362831][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.371446][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.378575][ T7445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.387482][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.402471][ T7081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.450281][ T7081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.537607][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.547191][ T7081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.601184][ T7081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.671090][ T7299] team0: Port device team_slave_0 added [ 328.679723][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.721869][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.730166][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.742477][ T7414] device bridge_slave_0 entered promiscuous mode [ 328.754725][ T7299] team0: Port device team_slave_1 added [ 328.780975][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.789967][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.817746][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.834756][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.841708][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.869023][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.881240][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.890068][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.898944][ T7414] device bridge_slave_1 entered promiscuous mode [ 328.948661][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.957900][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.968270][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.014924][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.056773][ T7299] device hsr_slave_0 entered promiscuous mode [ 329.113638][ T7299] device hsr_slave_1 entered promiscuous mode [ 329.153171][ T7299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.160756][ T7299] Cannot create hsr debugfs directory [ 329.178591][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.189588][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.198875][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.208192][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.256393][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.294591][ T7144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.347807][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.356989][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.377996][ T7414] team0: Port device team_slave_0 added [ 329.392159][ T7144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.435898][ T7144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.486432][ T7144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.548873][ T7414] team0: Port device team_slave_1 added [ 329.570571][ T6822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.602382][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.641963][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.649608][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.677081][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.730369][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.742230][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.769590][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.802506][ T6954] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.822692][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.831573][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.840726][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.848882][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.880084][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.899060][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.910288][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.919852][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.927035][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.966933][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.982153][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.991227][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.001142][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.011280][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.018446][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.028448][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.117114][ T7414] device hsr_slave_0 entered promiscuous mode [ 330.173426][ T7414] device hsr_slave_1 entered promiscuous mode [ 330.213087][ T7414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.220721][ T7414] Cannot create hsr debugfs directory [ 330.233957][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.241795][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.253353][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.298873][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.325532][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.359148][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.369902][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.381747][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.390953][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.401241][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.408645][ T7845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.417773][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.426924][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.435763][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.444809][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.453991][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.461191][ T7845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.469892][ T7299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.533229][ T7299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.611664][ T6954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.627379][ T6954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.642251][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.650688][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.659345][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.668961][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.679213][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.689205][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.698125][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.707503][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.717070][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.744735][ T7299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.783996][ T7299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.866924][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.878626][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.887381][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.897191][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.906600][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.915095][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.923488][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.966150][ T6822] device veth0_vlan entered promiscuous mode [ 330.972750][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.982648][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.992125][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.001765][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.010650][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.019824][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.028744][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.037413][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.047270][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.055567][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.075769][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.108152][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.119424][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.127001][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.138645][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.185814][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.201297][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.210813][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.218064][ T7445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.229725][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.239144][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.251781][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.258910][ T7445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.279612][ T6822] device veth1_vlan entered promiscuous mode [ 331.328907][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.338491][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.349931][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.359556][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.370366][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.381352][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.441183][ T7414] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.478360][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.496192][ T7414] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.628772][ T7414] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.686370][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.698718][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.708175][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.717994][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.727666][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.737062][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.746376][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.780554][ T6954] device veth0_vlan entered promiscuous mode [ 331.791760][ T7414] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.819177][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.831585][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.840232][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.852404][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.861806][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.876579][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.885754][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.894379][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.902966][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.912269][ T6822] device veth0_macvtap entered promiscuous mode [ 331.932071][ T6954] device veth1_vlan entered promiscuous mode [ 331.949102][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.957491][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.965569][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.974509][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 331.982505][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.993007][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.009430][ T6822] device veth1_macvtap entered promiscuous mode [ 332.026877][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.040096][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.049441][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.058246][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.086766][ T7081] device veth0_vlan entered promiscuous mode [ 332.107004][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.116557][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.128703][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.150527][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.171667][ T7081] device veth1_vlan entered promiscuous mode [ 332.191343][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.201053][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.210774][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.237241][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.258638][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.267631][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.277921][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.298427][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.322283][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.332521][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.341194][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.350478][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.370358][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.382610][ T6954] device veth0_macvtap entered promiscuous mode [ 332.394462][ T6954] device veth1_macvtap entered promiscuous mode [ 332.453115][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.461757][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.471499][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.481591][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.554991][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.565452][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 332.579394][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.591845][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.689894][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.698623][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.723871][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.732267][ T28] audit: type=1400 audit(1593512182.169:9): avc: denied { create } for pid=8081 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 332.743627][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.778447][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 10:16:22 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) [ 332.799991][ T28] audit: type=1400 audit(1593512182.209:10): avc: denied { name_connect } for pid=8081 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 332.801361][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.891635][ T7081] device veth0_macvtap entered promiscuous mode [ 332.955640][ C0] hrtimer: interrupt took 28237 ns [ 332.961008][ T7081] device veth1_macvtap entered promiscuous mode [ 333.015278][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.026379][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.054332][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.061443][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.087121][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.111151][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.129909][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.137100][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.155907][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.165768][ T28] audit: type=1800 audit(1593512182.609:11): pid=8086 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15737 res=0 10:16:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x7006, 0x0) [ 333.170910][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.196204][ T28] audit: type=1800 audit(1593512182.639:12): pid=8088 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15737 res=0 [ 333.241655][ T7144] device veth0_vlan entered promiscuous mode [ 333.254377][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 333.268017][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.291365][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.314393][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.322403][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.333839][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.342467][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.352185][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.362018][ T7445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.374706][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.390386][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.401498][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.413342][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.425906][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.475259][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.484714][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.494652][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.508596][ T7144] device veth1_vlan entered promiscuous mode [ 333.522705][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 333.539423][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.550078][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 333.565825][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:16:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x928842e601c2df0c) [ 333.577603][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.668455][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.683835][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.692692][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.724737][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.744308][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.780247][ T7414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.835328][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.850944][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 10:16:23 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x932, 0x0) 10:16:23 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x2) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x200}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8810) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980700009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000008800000000000002726f73653000"/335], 0x1) [ 333.894393][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.930564][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.049394][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.057284][ T8108] md: md0 stopped. [ 334.068142][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.117498][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.168067][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.225902][ T7414] 8021q: adding VLAN 0 to HW filter on device team0 10:16:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x8008700b, 0x0) [ 334.297115][ T7299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.330099][ T7299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.348061][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.373650][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.382344][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.406565][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.485090][ T7144] device veth0_macvtap entered promiscuous mode [ 334.508445][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.525556][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.558343][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.594869][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.602045][ T7845] bridge0: port 1(bridge_slave_0) entered forwarding state 10:16:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x11000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 334.650067][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.676527][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 10:16:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000340)="2e42ae80e2000f20d835200000000f22d80f20e035000002000f22e066b8d5008ee8c7442400da000000c744240267830000ff1c24470f01d566400fc7360f01c8400f0d81ef000000", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 334.694282][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.701475][ T7845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.779505][ T7144] device veth1_macvtap entered promiscuous mode [ 334.787956][ T8128] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 334.789566][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.836691][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.862472][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.875917][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 10:16:24 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 334.945126][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 334.991504][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.005364][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.027595][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.048577][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.068799][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.087050][ T7845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.127333][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.158868][ T7414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.196912][ T7414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.205594][ T8130] syz-executor.0 (8130) used greatest stack depth: 23576 bytes left [ 335.259466][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 335.304702][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.327078][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 335.346452][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.361117][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 335.375190][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.393932][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.424648][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.441377][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.452218][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.464521][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.474480][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.485213][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.494280][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.509513][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.541719][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.579054][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.590713][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.624623][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.669727][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.697605][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.732924][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.741005][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.765621][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.775442][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.783204][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.828768][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.043862][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.061634][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.094710][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.103558][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.118786][ T7299] device veth0_vlan entered promiscuous mode [ 336.136840][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.154955][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.200852][ T7299] device veth1_vlan entered promiscuous mode [ 336.229831][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.240627][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 10:16:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000340)="2e42ae80e2000f20d835200000000f22d80f20e035000002000f22e066b8d5008ee8c7442400da000000c744240267830000ff1c24470f01d566400fc7360f01c8400f0d81ef000000", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 336.251465][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.281382][ T7414] device veth0_vlan entered promiscuous mode [ 336.291176][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.308277][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.320012][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.340594][ T7414] device veth1_vlan entered promiscuous mode [ 336.360364][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.376185][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.387663][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.443707][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.454400][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.495292][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.523262][ T7299] device veth0_macvtap entered promiscuous mode [ 336.548325][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.558137][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.558239][ T8168] kvm: emulating exchange as write [ 336.568796][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.587480][ T7414] device veth0_macvtap entered promiscuous mode [ 336.600034][ T7299] device veth1_macvtap entered promiscuous mode [ 336.629287][ T7414] device veth1_macvtap entered promiscuous mode [ 336.684633][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.702928][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.720062][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.742642][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.752508][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.765717][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.776528][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.787978][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.800963][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.811627][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.834123][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.854238][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.872572][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.890454][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.901699][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.922068][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.940401][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.951283][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.973553][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.995227][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.030172][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.039126][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.056725][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.071281][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.081184][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.091223][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.100886][ T2629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.114642][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.141701][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.179483][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.191043][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.202738][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.214215][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.225418][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.237668][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.253855][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.264872][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.277924][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.296488][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.332325][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.342923][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.356744][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.367810][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.379308][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.390091][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.402421][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.416059][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.432872][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.441718][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.454750][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.465080][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:16:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa808) [ 337.860934][ T8185] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 337.900031][ T8187] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 10:16:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000000)) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 10:16:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000340)="2e42ae80e2000f20d835200000000f22d80f20e035000002000f22e066b8d5008ee8c7442400da000000c744240267830000ff1c24470f01d566400fc7360f01c8400f0d81ef000000", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:16:27 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6) syz_open_dev$vcsu(0x0, 0x0, 0xb81) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) open_tree(0xffffffffffffff9c, 0x0, 0x800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0xfffffff7}, 0x8) dup3(r1, r2, 0x0) dup2(r0, r3) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x3301) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) 10:16:27 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x1261, 0x0) [ 338.017632][ T8197] x_tables: duplicate underflow at hook 2 [ 338.068186][ T8197] x_tables: duplicate underflow at hook 2 10:16:27 executing program 4: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1) 10:16:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) dup2(r4, r3) 10:16:27 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10:16:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$tun(r0, &(0x7f00000010c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x40}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0xf98, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "3289e4", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], "623c5f86d4b89b750c44b991f019a2c806a22db1ae3d27da9e741ef71edf5bb8bfa1eaf5368bccc208f0be47822fd62230b2b0710b86a1d868e9d422519804069e2afd439fa19e033e070a59aac3fd8c238bc3a1d43a1e2582f92b4f7ff829ef13efbde8fac1072e201ded2555b4a749e0571cc6d9bc144db9c16a6c95b4a41d5cbb2ef947afd82314fc8f82196b98882b0e514c1f5c1e27684102084db23c90c0ee2ee5f1d7ac513b91909dec1db1acae192eb18973216aa50ec8219c9842a0aecfdd3f93cbf6f8bd40542fcb4f1dffd284305e75a6be493930a9cfe258b7894337ee829ccb547d3706efa972d25ddb63ddbd793694377ed824b421929a7337d5d0bcd9ca4b82ce3655eff708ae1b26183523d94d83c4bea2e077ad6183cc38c84f89c24f49bdc06cf554b324c08b7397a8d36809f334386eea7ca0b8b7802f2fde53d2bde64a8ae4d79e821163a6e19d87dc119be20cd09bb5925f3e7b8c420627b4370f14c4ae8cdbeb4b9bc240c8900794fe43284bd4a5f8ec88b1b7ed5baa554161fcc7eea1d9267b8d3158e863e62d8adeaeb37d4d44613bd2e5ba7efa829656ea533c00e4569daae1675d7678e7ab8f5fb2b5b4a507f4df50248478bed6d3efc3c880d0ee71ac2e8a4ab56698483aca50b26d92d5928ff08450c523242b040d14d87e778d88ba2d921bc4982919d27da5d8abe88336642a782dd24056de83657f1297f4bddc8af255f18ab509af9b5eeeaf0e404156c8443fba714e6c566e630fa8c3e8d3401bd7da42cceedc6df978cb70fd002c30d0321b1f41b86568adf9f7f38327665e6760dfb491944aed6a0eb02b7cc4cf5d88832c95077a081efc0eb0ca3657181455468378e04392e433d8627436ef6223aad20a2bf67bff697afcca8910ea53c5643f6fb788d91e0e5ac74ce79ea0578bad49cd25365f868de371297f4db7bb554fbbe696e346a18546382b25726182de81ec2ada914d8a68a5948a20b9e3d5c2f5193404cbce5916f299c880dccd8aafdc18c33eeed2c253773412ff8b91a6d1211109efe94e4f327c512d71f7a6dfce8ac27b455754591847b76f7d85fd2315c7021695df7eee700c34eff233019acca4ab8eee332a64d88ddaf2baa607fe82aaf8108ed87120f186cdd9b6660d2203eaebba33fa5531135b7c1597c47b38331f7aa5ed7d1c1c422526308b2b02008a1388f37a27c96a1aa943d8fbae4bfa244d808cdab12e933d41d65b348ff4f9f98c02a80745180ce26ef627ac32f65c57785ef7cab76913a83de305bebe48583d4204f72638b708fc622c85333129842e29305b31cc18fc0e6af50c0b8b1d5270e7affa6122254cc9397d483fe921ee5ecacd88ec1a59de91fca3d8b26b8e89cdaf7dcbebf22778af575396906e7ea7b02b694a1c2652b9f0de55e3c57cd9d6080df4f6c46ee3d0e58967a46971dcfc7d796c2ad9bcd03c05a8a66925322b0517f417269b0e9d54c160d0fd6fc3227347fa2ef54454cc739ea3dd8d604c7b998d732f49d6b1fc9c25ff9ba6572df495dd317d067ecc246e03910155c17f48b29c5d97a8772ed4fa9fa8a538c780e9de8a7c687a7d303078057998f2e73cefa1c3698c3bfe281e8502a1517f1f1d623515d1674574f52186055b396625ad5f272c8a947e38831cd2c0a134d789e524a6bf9e22b889bb82a5730a135801f701870db256c562acd436f91c1bbf4363a431a8b76b28daa5b50a80a19cf27e2e4b459830d4f97f681ac3588ec72de89cbf53ed0d1e3554c51036d376a43a3430c50955faf98e817baddf9d6107d4307c382e26c3f38ada0a1068161eb48c17cbf4ba7e69a446bb264638e19932c7230807edfa31281cf26967b3475b2850d93d4dd14f60be6ce416171fead2b5dc18f1f24dbb9e7d1e3224002f18762c0c9dfe0dc320a0acc25ed3253cb6bb017edabea25e799e742d87f51d4407d498986cc81bb582360b56aea8940905df6b5299ef3a724cbb7a1b136f490f0bcf7a07e52c3f6620018b9a3fc92635e28270d02ba1e59246a72f82fb549f5ff8e7d1c0028be6aeba48919cdf53259d4fb6e30f064cf226d48e3f3176913f1277cf784f4e385c9dbdaa5f726df3b1977876c94924758aa2bdf7279fb0e97bc2003c9386eb30f5fd96f205456d0ccd0c9900fbd76c5eb5f43385552a5a9978bb4a926e13604dcfa816d5bd55adff57d9a29366f47538ba52854bf290611504d7358571e433b192d59d78fd140e1ae1160b9af1b8bf58e4fefdb8aada9336d007fe3fb67b59f1c7fa5aaf95418d15f4e6b8801b967e79fa8a3c8cca857e2f0f2ae45d2526b005c3ba5291c50f3c244adfa4d7d1075c8e3b62afb12c4fab7a1b33ace26ccc9e1488c7e57b0550cd100b6e0fa775d235dac21d979d07096763372ac7e3d7314f735381f0de4fa6b0cf4f3f079d1f9940eb69702b22c30fcc10cb2a16e7a9cb4bf6eeb58f61c93d5a941641b3c84e986db16e726e25efd3678f79b7f2b2ddeff6849cb72c51756022ccbb3b6334141d6c0fd7b59bb8ab8e01f0b14117ac58fdcf6de6c3a6894ab8d72fcf71d86552b177057f776081fd98fa620ad77a3f86e523c07d5382594471f97bd85d66fdb25a81f20580e2bbae52d91e51b58dafd526e9846139f8f7472c5640166d680514e6f79120edbe4e3a6f4b9d7d0b056d0c3262723479f4e0d386abc567f1c41724482fb8f3beec7badb878a3d8913acd28ab45a9608bc26e1e1066c29a060561bf85bd91624466629a3774ce3f24e53cb413d0429de3bd435f66dc8c9feee6c862b2f0f2d1cd20640cd69cce1457139f368c615ca1eca7367971b76119d10a823942bb85683b710a7cddaca3a422112ed034c5ad178e73f9bf2f9d8ec55b3963820890db16e35f5cd471b5c22bb32335f416a852be91fe2d558be2268d00f8fbbc5e49c293ba51e5bac1491641464151b5a1ead4a23d22c0f46b8bacfa834e4488aa5bae633a4aaaf9f55a743ed99af9839d8a76ef9c72e7011b5ea72beab5898742849e7894be4d22a2c5cefb60ffd7197533c73a36c37ca3e86fa376209f6c62816a1cc4b9c5e671359cb09d9c7636fc58fac18d9036e990bbd25abae32c2b86e70329a75e436d48b14736c99846bcdc1877858bbdf4fba3274c69b4f8a401d3328ccbcdda7088c9de96ecb7844b0bee12b7b4ac245ee67448fbe7adb92fe4a7921b9dbe519dd38625ebd394c5b4764fd857434d4db6765a4aedb712b4c98601050e88caaf2b7b022792d5b98c3f1094d27ce45d07c2af0385410501335142ce350212c2eab4c13c229bad51a4e7a1c707543877231c1b2214565f58f50f90e922525846116212935bfa0563ec352b337e2ff7668f8cbf0b1bc115b0a20dae16efad622c8b551d76020c0fe842970d8657af6a611f1d0806f9d1943fd4c65288917ab23f9ab8c0149e4a797bf15f25528542e76f47130a586ab1740d039a28907d4a0041704ce43b69da2410479201516f6c6462a0568a999ff25ea3329e5ba2d4aa97734a0b2f6aefc5ca74ba65b13335a4c144c2bb430e74a4fddd7c9c6f541dcbab7298a00b9eedecd378e786578fec3b7c2881bfbbe4ece786da9a2773fc0c69b988b3af51adce182cdcf7f07d99d147ac6b87f38be2dfb332c39f54a1c285c44eb17d6bce859f53555c14d387cf3091a3fe6a212e32f483b57f5c2721e4828dbd73e92d99f8cfb8fa816923dfc4aecf6ae7ba0a224131eabf609d4fb734c35946dbc5ec6030c0deedc9d3d702c4bf426cf42ab8aba858299a0fe03e536cd0194325b304d8ca4f1012db80257bf373651def625aad2ba04a44fcc935e7d0ad34a522b9f20cffb2dfef4ea7fd1dc61bf43a9db4584e009911050ec5d11943d60de5f920ee782c5f6eeebfa309b8d0d69ce4ce36c6af17d9923cea1426c7329e51697b0aa92c79ab24419a53b298c74fdf593ca98230c77147a6b6a5130c3e9316e3da6cee086d2b22b11e2056048c7391f5767cae5279fa38cd2481f8c3b0269d1586db0fbc6a78cb6bb70eab43b47a3971730f64e0178186000e8bf97b19ebce50f49c3da7531ec8177a33d276f93cc6db0a2a6088e3e686caae4bf025e4d336991912350d49d406a34ba0ade48ab0a7b74d9d74efe571c5df211a16a638c7d10556a9ebf5cd44067a3ef782055bc108916741cf27ed20ae6807ea110e9e45cbac2e5275ee0926a5ad3132f56866ffa49a35af79fd28c1c88f915b55140d737e21c5f2d1ce500ca9fa48a5d35770f3406f041729f471fef3adc285f592494b88db7f87f7da4d62530d2d493a784d7586c0b08e1401972a1f3244347c4316125021c9888dbe9aa19557ee49a6657caaf7788430f688a75f8ac6e4bd7cf8d8360a043f82ab19423ec5ac878a322cf955e7e2d8411e1e310e75a8e7537eff617f25ab09131b02cd0354ffe895e389685567f6d1b35821933ba4a2b2a2a6cf8363f54e8eb97b0e56fb1363c29fc88af72c80a1210c9e18edfd06ca43a04170694efe5935b96cfa8e39c722f4f4a1e6d6ca6ad06f78d71dea51f985d666186788e87e7b7a95dbc7f6a51a30d22bcad5bd6db0b3663974b720f3e5064a81e9292cbf4580602110aabd06ae9163695e1ad34fe0724b7e9d7a2779a7b9db86f940278937662309f0f3438110ce2ee701e805ae69783eda34237b97a750d763310a25811aa97aa29a13b477196dd94252425f0b4cedd522d78e58aba7a41dbf62ea3b8a8ff19972a923e7154e4969ed754dce751bd93b0631c2f3d47aafc1ae5265cb4abe63ec816e98c9565010fc9aeb454e40d861548c44e27315aa0ba4fca2211c7e384262c0bbc64db6ecc3c308a6334215596cca3d0cf5088ec838e4ba6379b09442067c30c90990b868bdd8eee3f5eba3bf71689999837b1539d6aded6fbad1a41b5f6dac1f2b3cb36973b8a9dc12a34ec389a5da1dbeae7d70c97bc251afa9f307c9c59c47bd8b279731a6f86574d9d477931dd410f51c83e5cfac790f97e2a554371b37746bbe2df4e5b05e8c54012f1a9fa8f231dd14f2ea18b93ff69f2ed15a97cab3c83d492045d882cccb970aca1b4f58f49fc2d47c06abc92f565fb6de2c12e0a6f0279b01a6ef4af017d3de7cf99408c2661b21dbc310ce5f80be9857509a6032e17e2546e2a8f9fb26a0da510b6ef1008205c2e988944479de02589e61a2eae24ade84096d98544b611ecc14f6bc7259496326d77cd0803f017f694d1998ee76574e33cd3b50c216e75cce98771a489b4efa170661501056ed4574104fc985849b6686d015226c9076d810389bed12c6ceb366e0561b155f786076999c524321e874bac1e13269444d48dc2a9528d664b434bb92f1dbd2e769cfc2d82dac4c89cf9e2fe3a5dac44d5fe6614c76c3aff3555fbcb7b3cb4cc9c5143d80ab953483ba27832e22bc448415b30cde84c1d13f6ae8312f2790596cf5f8574f4a7c70689e5dc9830e6a14284a2aaf975178917d2018a142ba817643303e5d15e21d9df8b6aa9c32aaf2f8d047866d02d08f7494555c15cc97b90b2a064c21f4fb86108c"}}}}}}, 0xfca) 10:16:27 executing program 4: [ 338.372740][ T8226] x_tables: duplicate underflow at hook 2 10:16:27 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:27 executing program 3: 10:16:28 executing program 2: 10:16:28 executing program 0: 10:16:28 executing program 4: 10:16:28 executing program 3: 10:16:28 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:28 executing program 5: 10:16:28 executing program 2: 10:16:28 executing program 0: 10:16:28 executing program 4: 10:16:28 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:28 executing program 3: 10:16:28 executing program 5: 10:16:28 executing program 2: 10:16:28 executing program 0: 10:16:28 executing program 4: 10:16:28 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:28 executing program 3: 10:16:28 executing program 5: 10:16:28 executing program 0: 10:16:28 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:28 executing program 2: 10:16:28 executing program 3: 10:16:28 executing program 4: 10:16:28 executing program 0: 10:16:28 executing program 5: 10:16:28 executing program 2: 10:16:28 executing program 3: 10:16:28 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:28 executing program 5: 10:16:28 executing program 4: 10:16:28 executing program 0: 10:16:28 executing program 2: 10:16:28 executing program 3: 10:16:29 executing program 4: 10:16:29 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:29 executing program 3: 10:16:29 executing program 5: 10:16:29 executing program 2: 10:16:29 executing program 0: 10:16:29 executing program 3: 10:16:29 executing program 4: 10:16:29 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:29 executing program 5: 10:16:29 executing program 2: 10:16:29 executing program 0: 10:16:29 executing program 4: 10:16:29 executing program 5: 10:16:29 executing program 2: 10:16:29 executing program 3: 10:16:29 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:29 executing program 5: 10:16:29 executing program 4: 10:16:29 executing program 0: 10:16:29 executing program 2: 10:16:29 executing program 3: 10:16:29 executing program 4: 10:16:29 executing program 5: 10:16:29 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:29 executing program 0: 10:16:29 executing program 2: 10:16:29 executing program 3: 10:16:29 executing program 4: 10:16:29 executing program 5: 10:16:29 executing program 0: 10:16:29 executing program 2: 10:16:29 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:29 executing program 3: 10:16:29 executing program 5: 10:16:29 executing program 4: 10:16:30 executing program 0: 10:16:30 executing program 3: 10:16:30 executing program 2: 10:16:30 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:30 executing program 5: 10:16:30 executing program 4: 10:16:30 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1) 10:16:30 executing program 0: accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}}) 10:16:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 10:16:30 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60077e00001c2c00fe8000000000000000000000000000bbfe"], 0x0) 10:16:30 executing program 5: 10:16:30 executing program 0: 10:16:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) semget$private(0x0, 0x207, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000002c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000004) io_submit(0x0, 0x0, &(0x7f0000000a00)) sendmsg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) 10:16:30 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x0) fremovexattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='s']) 10:16:30 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000000)=0x201, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 10:16:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6c00) creat(0x0, 0x40) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x24000, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000100)=0x8143, 0x4) getxattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f0000000180)=""/229, 0xe5) mmap(&(0x7f0000003000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 10:16:30 executing program 0: clock_adjtime(0x0, &(0x7f00000004c0)) 10:16:30 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000600)=[{&(0x7f0000000540)='-', 0x1}], 0x1) 10:16:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setgroups(0x0, 0x0) 10:16:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 10:16:30 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[], 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000100)=ANY=[], 0x5) 10:16:30 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/235, 0xeb}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) 10:16:30 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 341.337306][ T8386] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:16:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 10:16:31 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/235, 0xeb}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 10:16:31 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:16:31 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:31 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x6}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 10:16:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x3}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 10:16:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x158d9010e01247ed}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 341.915378][ T8427] input: syz1 as /devices/virtual/input/input5 [ 341.992765][ T8433] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 342.025080][ T8433] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 342.027859][ T8427] input: syz1 as /devices/virtual/input/input6 [ 342.122129][ T8433] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 342.207255][ T8433] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 10:16:31 executing program 5: socket(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) userfaultfd(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 10:16:31 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000380)=[{&(0x7f0000000440)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000280)="82e802000000de36880900000000000000a7ed6e87fe67b594d2", 0x1a}], 0x0, 0x0) creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) 10:16:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "eaffffff090000000000000000000000000053"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x15, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000001000"}) 10:16:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000004c0)={[{@xino_auto='xino=auto'}]}) 10:16:31 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6290026, 0x0) 10:16:32 executing program 2: r0 = socket(0x40000000002, 0x3, 0x80000000002) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs, 0x6e) 10:16:32 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r2) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 342.863241][ T8482] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 10:16:32 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/235, 0xeb}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 10:16:32 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000300)) 10:16:32 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) [ 343.251195][ T8475] EXT4-fs (sda1): re-mounted. Opts: 10:16:32 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010"], 0x48}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, 'ip6gretap0\x00'}, 0x18) 10:16:32 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000040, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x3, 0x5) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800058110308d9123127ecce6616f3f6db1c00010000000000210049740000000000000006ad8e5ecc326d3a09ffc200000000000000000000e000"}, 0x80) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) 10:16:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) 10:16:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 10:16:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"/1896], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28) [ 343.603435][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:16:33 executing program 0: syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000080)=[{&(0x7f0000000380)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000280)="82e8020800000000000000000010000000a7ed6e87fe", 0x16, 0x4}], 0x0, 0x0) 10:16:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000db) 10:16:33 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) 10:16:33 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x6, 0xf989, "9465"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 10:16:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) 10:16:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_BUCKETS_LOG={0x8}]}}]}, 0x40}}, 0x0) [ 344.466389][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.505973][ T8553] sch_fq: defrate 0 ignored. 10:16:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) link(&(0x7f00000000c0)='./file0\x00', 0x0) 10:16:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x28}}, 0x0) [ 344.531716][ T8550] sch_tbf: burst 0 is lower than device veth0_vlan mtu (1514) ! [ 344.555143][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.613447][ T8555] sch_fq: defrate 0 ignored. 10:16:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 10:16:34 executing program 3: clone(0x20006004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) shmctl$SHM_LOCK(0x0, 0xb) 10:16:34 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) read(r0, &(0x7f00000000c0)=""/179, 0xb3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) 10:16:34 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e2fac14"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) 10:16:34 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9c1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a9d5ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000000480)=""/250, 0x1b3, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) 10:16:34 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0x0, 0xfc, 0xfc, 0xfc, 0x0, 0x1cc, 0x1cc, 0x1cc, 0x1cc, 0x1cc, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'team0\x00', 'vlan0\x00'}, 0x0, 0xc8, 0xfc, 0xa, {0x9000000}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'erspan0\x00', {0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x7f}}}]}, @common=@inet=@SET3={0x34, 'SET\x00'}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'macvlan0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) 10:16:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860000, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0xc, 0x16}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xf}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 10:16:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r1, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8e}]}, 0x24}}, 0x0) 10:16:34 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a0000001807"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="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", 0x112, 0x40014, &(0x7f0000000100)={0xa, 0x4e24, 0x2800, @private0={0xfc, 0x0, [], 0x1}, 0x8}, 0x1c) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffd, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, r1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 10:16:34 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:34 executing program 3: openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9c1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a9d5ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000000480)=""/250, 0x1b3, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) 10:16:34 executing program 2: getpid() socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x0, 0x2, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xfff, 0x8, 0x0, 0x0, 0xf, "6b4825ddf3cd77d4"}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:16:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x22, {0x4b, 0x0, "eb2b20da341f5b2aae21c107b91850b0b1600ab5c5b31fc6c16e3d012890917f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10:16:35 executing program 0: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 10:16:35 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:35 executing program 4: getpid() r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x22, 0x0, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xfff, 0x8, 0x0, 0x0, 0x0, "6b4825ddf3cd77d4"}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x10000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:16:35 executing program 3: unshare(0x6c060000) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9c1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a9d5ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, &(0x7f0000000480)=""/250, 0x1b3, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) 10:16:35 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7d, 0xa7, 0x3b, 0x10, 0x145f, 0x13d, 0x767b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd6, 0xde, 0x36}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x6609, 0x0) 10:16:35 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 345.863127][ T8626] IPVS: ftp: loaded support on port[0] = 21 10:16:35 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x43, {0x43, 0x8, "975f1fd0c5220d1b2642a74f97803daf1600c9424e17d4ef422fc72209c1912a1b711c7d2c886251360c427a3fa96fd00bd5c81f59f2d6dc6884a0b67b56e4a349"}}, 0x0, &(0x7f0000000340)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x4, [@generic={0x49, 0x10, 0xb, "e769dd3a629c817b3df763cddd82554e5b3b01e6ffcc2e634e6bd39ebb997c77c9bdd30395377801e6a844ea3f46262d6da778d6be407fdec4e3d18aa480879f66d8f2d1a048"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x1, 0xf49}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x0, 0xc0, "9697226c", "3adc8033"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x81, 0x3, 0x4a, 0x8000, 0xfff8}}}, &(0x7f0000001b00)={0x84, &(0x7f0000001700)={0x0, 0x16, 0xfe, "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"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0xc0, 0x80, [0xf000]}}, &(0x7f0000001840)={0x40, 0x7, 0x2, 0xef89}, &(0x7f0000001880)={0x40, 0x9, 0x1, 0x1f}, &(0x7f00000018c0)={0x40, 0xb, 0x2, "62d6"}, &(0x7f0000001900)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000001940)={0x40, 0x13, 0x6, @dev={[], 0x3a}}, &(0x7f0000001980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000019c0)={0x40, 0x19, 0x2, "f55e"}, &(0x7f0000001a00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001a40)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000001a80)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000001ac0)={0x40, 0x21, 0x1, 0x1f}}) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfd0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) write$hidraw(r1, &(0x7f00000000c0)='@', 0x8f0a5b33) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1f5) read$hidraw(0xffffffffffffffff, &(0x7f0000000700)=""/179, 0xb3) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000180)=""/165) syz_usb_connect$cdc_ecm(0x1, 0x67, &(0x7f0000000480)=ANY=[@ANYBLOB="d712010002020000082505a1a44000010203010902a0ff0101d9008f090400"], 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffec1, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e6b5, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x12d27d) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000100)={0x4d, "f793a49cfa71951f17b49ab11ce7cecbe1bc5843bd1e3e569b54dfa09be09767f9942883a76e363cfe8dcd27022093df42faff5c922b0d0a23b8b1314a694586a05badaf350986be89a780112b"}) write$hidraw(r3, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x800000) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x40086602, 0x20000000) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000040)) 10:16:35 executing program 4: r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) r1 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x51c, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc0c, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"]) syz_open_dev$hidraw(0x0, 0x0, 0x107f41) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x12d03d) write$hidraw(r2, &(0x7f0000000000)="3a0ac17ecd595345e24ea72cf22da8cf6bd8605cc6dd64", 0x800000) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) write$hidraw(r3, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x800000) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) ioctl$HIDIOCAPPLICATION(r4, 0x40305839, 0x4001e0) 10:16:35 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:35 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x16, 0xe3, 0x5a, 0x10, 0x13b1, 0x42, 0xf160, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xda, 0x51}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xa5, 0x0, 0x0) [ 346.142471][ T7845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 346.172327][ T8113] usb 6-1: new high-speed USB device number 2 using dummy_hcd 10:16:35 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 346.314943][ T406] tipc: TX() has been purged, node left! [ 346.362472][ T8045] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 346.392265][ T7845] usb 3-1: Using ep0 maxpacket: 16 [ 346.502340][ T2573] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 346.512724][ T8160] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 346.523268][ T7845] usb 3-1: New USB device found, idVendor=145f, idProduct=013d, bcdDevice=76.7b [ 346.542723][ T8113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.564326][ T7845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.578710][ T8113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.607443][ T7845] usb 3-1: config 0 descriptor?? [ 346.613655][ T8113] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 346.629262][ T8113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.654938][ T8113] usb 6-1: config 0 descriptor?? [ 346.752412][ T8160] usb 4-1: Using ep0 maxpacket: 16 [ 346.783061][ T2573] usb 5-1: too many configurations: 28, using maximum allowed: 8 [ 346.872685][ T8160] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f1.60 [ 346.881761][ T8160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.884611][ T7845] usb 3-1: USB disconnect, device number 2 [ 346.942582][ T8045] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 346.951679][ T8045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.019129][ T8045] usb 1-1: Product: syz [ 347.029839][ T8160] usb 4-1: config 0 descriptor?? [ 347.041117][ T8045] usb 1-1: Manufacturer: syz [ 347.057566][ T8045] usb 1-1: SerialNumber: syz [ 347.214804][ T8113] hid-rmi 0003:06CB:81A7.0001: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 347.338343][ T8160] usb 4-1: USB disconnect, device number 2 [ 347.359032][ T8113] usb 6-1: USB disconnect, device number 2 [ 347.592626][ T2573] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 347.601844][ T2573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.629231][ T2573] usb 5-1: Product: syz [ 347.642951][ T2573] usb 5-1: Manufacturer: syz [ 347.647829][ T2573] usb 5-1: SerialNumber: syz [ 347.712433][ T8045] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 347.962270][ T8045] usb 3-1: Using ep0 maxpacket: 16 [ 348.082645][ T8045] usb 3-1: New USB device found, idVendor=145f, idProduct=013d, bcdDevice=76.7b [ 348.091986][ T8045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.122580][ T8045] usb 3-1: config 0 descriptor?? [ 348.128648][ T2573] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 348.174662][ T7845] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 348.388812][ T8113] usb 3-1: USB disconnect, device number 3 [ 348.392186][ T2573] usb 4-1: Using ep0 maxpacket: 16 [ 348.512661][ T2573] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f1.60 [ 348.521786][ T2573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.553852][ T2573] usb 4-1: config 0 descriptor?? [ 348.579926][ T7845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.598292][ T7845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.622918][ T7845] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 348.645811][ T7845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.666997][ T7845] usb 6-1: config 0 descriptor?? [ 348.802476][ T2573] usb 4-1: USB disconnect, device number 3 10:16:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000b803000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "1ca2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:16:38 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:38 executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$HIDIOCGRAWPHYS(r1, 0x4008c002, 0x0) 10:16:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "1ca2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:16:38 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 349.012546][ T7845] usbhid 6-1:0.0: can't add hid device: -71 [ 349.027513][ T7845] usbhid: probe of 6-1:0.0 failed with error -71 10:16:38 executing program 0: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2) r2 = syz_usb_connect_ath9k(0x3, 0x69, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x11a, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfd0, &(0x7f0000004f80)=ANY=[@ANYBLOB="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"]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000275abce4936364fd070eda30fab9846554f9e5e59100f2bf521ea4"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_usb_connect(0x2, 0x24f, &(0x7f0000000140)=ANY=[@ANYBLOB="17bfb1ec6403fbb930102404009d492b0000"], 0x0) write$hidraw(r1, &(0x7f0000001f80)="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", 0x90c) syz_open_dev$hiddev(0x0, 0x0, 0x60ff) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x80000408e201) ioctl$HIDIOCAPPLICATION(r3, 0x40305828, 0x400007) write$hidraw(r3, &(0x7f00000002c0)="0536942e323c977dcf0183cfce76da8b83ec4c77e7bf53fa676525825e27dd3c7e412f436f9b04e6d6139202728552fee29c764ba6e6686724cc7ef66d8edcb0b6f766c14fa622f71aadecd12c5b4d72ec8dfb0aff833e", 0x57) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x10001}) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) [ 349.067286][ T7845] usb 6-1: USB disconnect, device number 3 [ 349.102751][ T8045] usb 1-1: USB disconnect, device number 2 10:16:38 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:38 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x424, 0x9e00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, "05"}]}}}]}}]}}, 0x0) [ 349.202263][ T8160] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 349.220384][ T8113] usb 5-1: USB disconnect, device number 2 10:16:38 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 349.362328][ T2573] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 349.452324][ T7845] usb 6-1: new high-speed USB device number 4 using dummy_hcd 10:16:39 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 349.553627][ T8045] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 349.582548][ T8160] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 349.605126][ T8160] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 349.638038][ T8160] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 349.662800][ T8160] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.686210][ T8113] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 349.690382][ T8160] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 10:16:39 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 349.722566][ T2573] usb 4-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 349.743085][ T2573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.759199][ T8160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.788048][ T2573] usb 4-1: config 0 descriptor?? [ 349.812381][ T8160] usb 3-1: config 0 descriptor?? [ 349.843434][ T8759] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 349.863303][ T2573] cp210x 4-1:0.0: cp210x converter detected [ 349.872672][ T8045] usb 1-1: too many configurations: 26, using maximum allowed: 8 [ 349.882577][ T7845] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 349.904349][ T7845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.940253][ T7845] usb 6-1: config 0 descriptor?? [ 349.952188][ T8113] usb 5-1: Using ep0 maxpacket: 8 10:16:39 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 350.003380][ T7845] cp210x 6-1:0.0: cp210x converter detected [ 350.072611][ T8113] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 350.252915][ T8113] usb 5-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40 [ 350.267166][ T8113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.286900][ T8113] usb 5-1: Product: syz [ 350.296181][ T8113] usb 5-1: Manufacturer: syz [ 350.306834][ T8113] usb 5-1: SerialNumber: syz [ 350.307555][ T2573] cp210x ttyUSB0: failed get req 0x4 size 2 status: -32 [ 350.341745][ T2573] cp210x: probe of ttyUSB0 failed with error -32 [ 350.374988][ T8113] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 350.381872][ T8113] smsc95xx v1.0.6 [ 350.395153][ T8113] smsc95xx 5-1:1.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 350.418341][ T8113] smsc95xx: probe of 5-1:1.0 failed with error -22 [ 350.577052][ T8113] usb 5-1: USB disconnect, device number 3 [ 350.652364][ T7845] cp210x ttyUSB1: failed set request 0x3 status: -71 [ 350.660409][ T7845] cp210x: probe of ttyUSB1 failed with error -71 [ 350.741184][ T7845] usb 6-1: USB disconnect, device number 4 [ 350.782943][ T8045] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 350.798405][ T7845] cp210x 6-1:0.0: device disconnected [ 350.809918][ T8045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.845573][ T8045] usb 1-1: Product: syz [ 350.860799][ T8045] usb 1-1: Manufacturer: syz [ 350.874523][ T8045] usb 1-1: SerialNumber: syz [ 351.362111][ T7445] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 351.412108][ T7845] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 351.602056][ T7445] usb 5-1: Using ep0 maxpacket: 8 [ 351.722233][ T7445] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 351.833167][ T7845] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 351.842402][ T7845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.856182][ T7845] usb 6-1: config 0 descriptor?? [ 351.903981][ T7445] usb 5-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40 [ 351.909418][ T7845] cp210x 6-1:0.0: cp210x converter detected [ 351.939029][ T7445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.966933][ T7445] usb 5-1: Product: syz [ 351.980086][ T7445] usb 5-1: Manufacturer: syz [ 351.988467][ T8113] usb 4-1: USB disconnect, device number 4 [ 351.997867][ T7445] usb 5-1: SerialNumber: syz [ 352.006592][ T8113] cp210x 4-1:0.0: device disconnected [ 352.040621][ T2573] usb 3-1: USB disconnect, device number 4 [ 352.072966][ T7445] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 352.080157][ T7445] smsc95xx v1.0.6 [ 352.087915][ T7445] smsc95xx 5-1:1.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 352.104404][ T7445] smsc95xx: probe of 5-1:1.0 failed with error -22 10:16:41 executing program 5: sync() open(&(0x7f0000000280)='./file0\x00', 0x40, 0x0) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file2/file0\x00', 0x0, 0x0, 0x0, 0x0) 10:16:41 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000052462404c053800bba6d37a000109021200010000000a0904"], 0x0) 10:16:41 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xca}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 10:16:41 executing program 0: r0 = inotify_init() syncfs(r0) symlink(&(0x7f00000001c0)='./file2\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file2\x00') setxattr(&(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0, 0x0) [ 352.168088][ T8670] usb 1-1: USB disconnect, device number 3 [ 352.192257][ T7845] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 352.225916][ T7845] cp210x: probe of ttyUSB0 failed with error -71 10:16:41 executing program 4: r0 = memfd_create(&(0x7f0000000040)='#em\x06\x00\x00\x00', 0x0) r1 = dup(r0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) write$nbd(r1, 0x0, 0x0) [ 352.267035][ T7845] usb 6-1: USB disconnect, device number 5 [ 352.306884][ T7845] cp210x 6-1:0.0: device disconnected 10:16:41 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x43, {0x43, 0x8, "975f1fd0c5220d1b2642a74f97803daf1600c9424e17d4ef422fc72209c1912a1b711c7d2c886251360c427a3fa96fd00bd5c81f59f2d6dc6884a0b67b56e4a349"}}, &(0x7f00000004c0)={0x0, 0x3, 0x90, @string={0x90, 0x3, "b7b8a4fe38fe1306e61d4146a3473a8c43925b688afa6ccd4ffbd3fba3aafbf40ce5f427572e18c8a8f470e937369142a6c0eb1727b0e5ccc1531f1f8d2db83e32bc706e8a129fc26cdf94bc7cc532b36c3cee7ae26983346a41c8657ad3644d5553d5d73ae125ea005904984f0b6596e87da55d1a58a84b93db3d8444c560730f4136efec0907769e889326cd02"}}, &(0x7f0000000340)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x3, [@generic={0x49, 0x10, 0xb, "e769dd3a629c817b3df763cddd82554e5b3b01e6ffcc2e634e6bd39ebb997c77c9bdd30395377801e6a844ea3f46262d6da778d6be407fdec4e3d18aa480879f66d8f2d1a048"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x1, 0xf49}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x0, 0xc0, "9697226c", "3adc8033"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x81, 0x3, 0x4a, 0x8000, 0xfff8}}}, &(0x7f0000001b00)={0x84, &(0x7f0000001700)={0x0, 0x16, 0xfb, "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"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0xc0, 0x80, [0xf000]}}, &(0x7f0000001840)={0x40, 0x7, 0x2, 0xef89}, &(0x7f0000001880)={0x40, 0x9, 0x1, 0x1f}, &(0x7f00000018c0)={0x40, 0xb, 0x2, "62d6"}, &(0x7f0000001900)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000001940)={0x40, 0x13, 0x6, @dev={[], 0x3a}}, &(0x7f0000001980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000019c0)={0x40, 0x19, 0x2, "f55e"}, &(0x7f0000001a00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001a40)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000001a80)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000001ac0)={0x40, 0x21, 0x1, 0x1f}}) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfd0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) write$hidraw(r1, &(0x7f00000000c0)='@', 0x8f0a5b33) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1f5) read$hidraw(0xffffffffffffffff, &(0x7f0000000700)=""/179, 0xb3) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000180)=""/165) syz_usb_connect$cdc_ecm(0x1, 0x67, &(0x7f0000000480)=ANY=[@ANYBLOB="d712010002020000082505a1a44000010203010902a0ff0101d9008f"], 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffec1, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e6b5, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x12d27d) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) read$hiddev(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000100)={0x4d, "f793a49cfa71951f17b49ab11ce7cecbe1bc5843bd1e3e569b54dfa09be09767f9942883a76e363cfe8dcd27022093df42faff5c922b0d0a23b8b1314a694586a05badaf350986be89a780112b"}) write$hidraw(r3, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x800000) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x40086602, 0x20000000) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000040)) [ 352.359362][ T8045] usb 5-1: USB disconnect, device number 4 10:16:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000b803000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "1ca2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0xf, "6f28bb7b87d0d9a7234a701f666aab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:16:41 executing program 4: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2) r2 = syz_usb_connect_ath9k(0x3, 0x69, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x11a, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfd0, &(0x7f0000004f80)=ANY=[@ANYBLOB="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"]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000275abce4936364fd070eda30fab9846554f9e5e59100f2bf521ea4071b4b000000002100"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_usb_connect(0x2, 0x24f, &(0x7f0000000140)=ANY=[@ANYBLOB="17bfb1ec6403fbb930102404009d492b0000"], 0x0) write$hidraw(r1, &(0x7f0000001f80), 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x60ff) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x80000408e201) ioctl$HIDIOCAPPLICATION(r3, 0x40305828, 0x400007) write$hidraw(r3, &(0x7f00000002c0)="0536942e323c977dcf0183cfce76da8b83ec4c77e7bf53fa676525825e27dd3c7e412f436f9b04e6d6139202728552fee29c764ba6e6686724cc7ef66d8edcb0b6f766c14fa622f71aadecd12c5b4d72ec8dfb0aff833e", 0x57) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x10001}) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) 10:16:42 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 352.646737][ T2573] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 352.702046][ T8113] usb 4-1: new high-speed USB device number 5 using dummy_hcd 10:16:42 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 352.792135][ T8670] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 352.823897][ T7445] usb 6-1: new high-speed USB device number 6 using dummy_hcd 10:16:42 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 352.962219][ T8045] usb 5-1: new high-speed USB device number 5 using dummy_hcd 10:16:42 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 353.092465][ T8113] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 353.101549][ T8113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.140039][ T8113] usb 4-1: config 0 descriptor?? [ 353.142203][ T2573] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=a6.bb [ 353.160920][ T2573] usb 3-1: New USB device strings: Mfr=211, Product=122, SerialNumber=0 [ 353.170596][ T2573] usb 3-1: Product: syz [ 353.184469][ T2573] usb 3-1: Manufacturer: syz [ 353.193137][ T7445] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 353.211378][ T7445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.221316][ T2573] usb 3-1: config 0 descriptor?? [ 353.230419][ T7445] usb 6-1: config 0 descriptor?? [ 353.269729][ T8045] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 353.288453][ T7445] cp210x 6-1:0.0: cp210x converter detected [ 353.322624][ T8670] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 353.342117][ T8670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.350300][ T8670] usb 1-1: Product: syz [ 353.361982][ T8670] usb 1-1: Manufacturer: syz [ 353.366619][ T8670] usb 1-1: SerialNumber: syz [ 353.469073][ T8670] usb 3-1: USB disconnect, device number 5 [ 353.632504][ T8113] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 353.655123][ T8113] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 354.162038][ T7445] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 354.162127][ T7445] cp210x: probe of ttyUSB0 failed with error -71 [ 354.163806][ T7445] usb 6-1: USB disconnect, device number 6 [ 354.183197][ T8045] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 354.194162][ T7445] cp210x 6-1:0.0: device disconnected [ 354.203656][ T8045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.218547][ T8045] usb 5-1: Product: syz [ 354.223927][ T8045] usb 5-1: Manufacturer: syz [ 354.228937][ T8045] usb 5-1: SerialNumber: syz [ 354.251923][ T2573] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 354.732044][ T2573] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=a6.bb [ 354.741429][ T2573] usb 3-1: New USB device strings: Mfr=211, Product=122, SerialNumber=0 [ 354.750388][ T2573] usb 3-1: Product: syz [ 354.754942][ T2573] usb 3-1: Manufacturer: syz [ 354.760697][ T2573] usb 3-1: config 0 descriptor?? [ 354.931964][ T8045] usb 6-1: new high-speed USB device number 7 using dummy_hcd 10:16:44 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) socket(0x40000000002, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1]}) 10:16:44 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 355.022380][ T7445] usb 3-1: USB disconnect, device number 6 [ 355.332124][ T8045] usb 6-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 355.341268][ T8045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.358004][ T8045] usb 6-1: config 0 descriptor?? [ 355.413011][ T8045] cp210x 6-1:0.0: cp210x converter detected [ 355.517265][ T7845] usb 1-1: USB disconnect, device number 4 [ 355.578012][ T2629] usb 5-1: USB disconnect, device number 5 [ 355.602226][ T8045] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 355.609760][ T8045] cp210x 6-1:0.0: querying part number failed [ 355.672108][ T8045] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 355.679181][ T8045] cp210x: probe of ttyUSB0 failed with error -71 [ 355.698069][ T8045] usb 6-1: USB disconnect, device number 7 [ 355.711755][ T8045] cp210x 6-1:0.0: device disconnected [ 356.469050][ T8113] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 356.479357][ T8113] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 356.498574][ T8113] asix: probe of 4-1:0.0 failed with error -71 [ 356.506918][ T8113] usb 4-1: USB disconnect, device number 5 10:16:46 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e000000040000000c0400000000000050020000000000000000000050020000780300007803000078030000780300007803000004"], 0x468) 10:16:46 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x4dc5, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}}) 10:16:46 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:46 executing program 2: r0 = socket(0x2, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x803, 0x0, 0x0) 10:16:46 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x2) dup3(r0, r1, 0x0) 10:16:46 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) [ 357.241920][ T8113] usb 4-1: new high-speed USB device number 6 using dummy_hcd 10:16:46 executing program 2: 10:16:46 executing program 5: 10:16:46 executing program 3: 10:16:46 executing program 4: 10:16:46 executing program 0: 10:16:47 executing program 2: 10:16:47 executing program 3: 10:16:47 executing program 5: 10:16:47 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:47 executing program 4: 10:16:47 executing program 0: 10:16:47 executing program 3: 10:16:47 executing program 2: 10:16:47 executing program 5: 10:16:47 executing program 3: 10:16:47 executing program 2: 10:16:47 executing program 0: 10:16:47 executing program 4: 10:16:47 executing program 5: 10:16:47 executing program 3: 10:16:47 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:47 executing program 2: 10:16:47 executing program 4: 10:16:47 executing program 0: 10:16:47 executing program 5: 10:16:47 executing program 3: 10:16:47 executing program 3: 10:16:47 executing program 0: 10:16:47 executing program 4: 10:16:47 executing program 5: 10:16:47 executing program 2: 10:16:47 executing program 3: 10:16:48 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:48 executing program 0: 10:16:48 executing program 5: 10:16:48 executing program 4: 10:16:48 executing program 2: 10:16:48 executing program 3: 10:16:48 executing program 5: 10:16:48 executing program 0: 10:16:48 executing program 4: 10:16:48 executing program 2: 10:16:48 executing program 3: 10:16:48 executing program 5: 10:16:48 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:48 executing program 4: 10:16:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d8680027131f8dcff47d010000805acf4f8f36460234435902e5b1b2ab44325bcee00a06dc9d8e99adaf81dcfc82fd983f79e651996156b0b16d6f2c59957ab364884b3c000300000000000000faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da", 0xc4}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}, 0x78) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 10:16:48 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb4dcb53455560c8ef00fca4fafa9f04f1db324edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e866f15da", 0xc0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:16:48 executing program 2: 10:16:48 executing program 5: 10:16:48 executing program 2: 10:16:48 executing program 4: 10:16:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x13d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 359.293984][ T9110] ptrace attach of "/root/syz-executor.3"[9109] was attempted by "/root/syz-executor.3"[9110] [ 359.307411][ T9111] ptrace attach of "/root/syz-executor.0"[9107] was attempted by "/root/syz-executor.0"[9111] 10:16:48 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000081229010040000102030109024a0001010000000904000003e1050000052406000005240000000d240f0100000000000000000006fb07000000090581031000000000090582021000000000090503"], 0x0) 10:16:48 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/852], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe0, 0x900, &(0x7f00000006c0)="b9ff0303180d698cb89e40f088a8d501803500de0500000077fb7f11c72be9", 0x0, 0x109}, 0x28) 10:16:48 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x2) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) [ 359.506525][ T9123] ptrace attach of "/root/syz-executor.5"[9122] was attempted by "/root/syz-executor.5"[9123] 10:16:49 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed00"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:49 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000081229010040000102030109024a0001010000000904000003e1050000052406"], 0x0) 10:16:49 executing program 5: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af00031400000004800000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 10:16:49 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x8, 0x70, 0x47, 0x8, 0x458, 0x706e, 0xac7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa}]}}) 10:16:49 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed00"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 359.771797][ T8113] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 359.852233][ T3881] ldm_validate_privheads(): Disk read failed. [ 359.860224][ T3881] loop5: p1 < > p2 < > p4 [ 359.866948][ T3881] loop5: partition table partially beyond EOD, truncated [ 359.878625][ T3881] loop5: p1 start 335741103 is beyond EOD, truncated 10:16:49 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed00"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 359.897712][ T3881] loop5: p2 size 2 extends beyond EOD, truncated [ 359.911331][ T3881] loop5: p4 size 2097152 extends beyond EOD, truncated [ 359.936085][ T9137] ldm_validate_privheads(): Disk read failed. [ 359.944606][ T9137] loop5: p1 < > p2 < > p4 [ 359.951214][ T9137] loop5: partition table partially beyond EOD, truncated [ 359.962638][ T9137] loop5: p1 start 335741103 is beyond EOD, truncated [ 359.970091][ T9137] loop5: p2 size 2 extends beyond EOD, truncated [ 359.980789][ T9137] loop5: p4 size 2097152 extends beyond EOD, truncated 10:16:49 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed000000800000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 360.012124][ T7845] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 360.019983][ T8045] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 360.042298][ T8113] usb 4-1: Using ep0 maxpacket: 8 [ 360.135279][ T9137] ldm_validate_privheads(): Disk read failed. [ 360.145997][ T9137] loop5: p1 < > p2 < > p4 [ 360.172007][ T8113] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:16:49 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed000000800000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 360.182794][ T9137] loop5: partition table partially beyond EOD, truncated [ 360.183882][ T8113] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 360.201992][ T8113] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 360.215202][ T9137] loop5: p1 start 335741103 is beyond EOD, truncated [ 360.222892][ T9137] loop5: p2 size 2 extends beyond EOD, truncated [ 360.230967][ T9137] loop5: p4 size 2097152 extends beyond EOD, truncated [ 360.274895][ T7845] usb 1-1: Using ep0 maxpacket: 8 10:16:49 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x11f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 360.302349][ T8045] usb 3-1: Using ep0 maxpacket: 8 [ 360.347114][ T3881] ldm_validate_privheads(): Disk read failed. [ 360.370237][ T3881] loop5: p1 < > p2 < > p4 [ 360.375982][ T3881] loop5: partition table partially beyond EOD, truncated [ 360.391565][ T3881] loop5: p1 start 335741103 is beyond EOD, truncated [ 360.392390][ T8113] usb 4-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 360.399333][ T8113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.399348][ T8113] usb 4-1: Product: syz [ 360.399361][ T8113] usb 4-1: Manufacturer: syz [ 360.399376][ T8113] usb 4-1: SerialNumber: syz [ 360.416920][ T3881] loop5: p2 size 2 extends beyond EOD, truncated [ 360.418543][ T3881] loop5: p4 size 2097152 extends beyond EOD, truncated [ 360.453332][ T9121] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 360.482842][ T8113] cdc_acm 4-1:1.0: skipping garbage [ 360.488454][ T8113] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 360.496465][ T8045] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.520160][ T8045] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.615469][ T9183] ptrace attach of "/root/syz-executor.5"[9182] was attempted by "/root/syz-executor.5"[9183] [ 360.698250][ T7887] usb 4-1: USB disconnect, device number 7 [ 360.712582][ T8045] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 360.731904][ T7845] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=ac.7f [ 360.741400][ T7845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.761742][ T8045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.770412][ T8045] usb 3-1: Product: syz [ 360.776223][ T7845] usb 1-1: Product: syz [ 360.780421][ T7845] usb 1-1: Manufacturer: syz [ 360.786617][ T8045] usb 3-1: Manufacturer: syz [ 360.791251][ T8045] usb 3-1: SerialNumber: syz [ 360.797235][ T7845] usb 1-1: SerialNumber: syz [ 360.814611][ T7845] usb 1-1: config 0 descriptor?? [ 360.862732][ T8045] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 360.871040][ T8045] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 360.882682][ T7845] uvcvideo: Found UVC 0.00 device syz (0458:706e) [ 360.889237][ T7845] uvcvideo: No valid video chain found. [ 360.913124][ T8045] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 361.066043][ T8113] usb 3-1: USB disconnect, device number 7 [ 361.088126][ T8045] usb 1-1: USB disconnect, device number 5 [ 361.471660][ T7887] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 361.719552][ T7887] usb 4-1: Using ep0 maxpacket: 8 [ 361.841714][ T2473] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 361.841804][ T6886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 361.858186][ T7887] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.876269][ T7887] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 361.893740][ T7887] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.082033][ T7887] usb 4-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 362.102046][ T2473] usb 1-1: Using ep0 maxpacket: 8 [ 362.109692][ T7887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.131630][ T6886] usb 3-1: Using ep0 maxpacket: 8 [ 362.145244][ T7887] usb 4-1: Product: syz [ 362.162133][ T7887] usb 4-1: Manufacturer: syz [ 362.171715][ T7887] usb 4-1: SerialNumber: syz [ 362.203470][ T9121] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 362.222973][ T7887] cdc_acm 4-1:1.0: skipping garbage [ 362.228686][ T7887] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 362.273682][ T6886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.295605][ T6886] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 10:16:51 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)) r2 = add_key(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000380), 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, 0xfffffffffffffffe, 0x4b) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={{0x2, 0x0, @reserved="5000ea809923b0ff3994692152a16608ed85e01882fd352e32c4949b788fcb59"}, 0x5, r2, [], "b67a7a0bd0"}) tkill(0x0, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) r5 = dup3(r0, r4, 0x0) write$FUSE_INTERRUPT(r5, 0x0, 0x0) 10:16:51 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed000000800000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000006040)=[{{&(0x7f0000000040)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0xb, 0x0, 0x0, &(0x7f0000004580)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) 10:16:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d8680027131f8dcff47d010000805acf4f8f36460234435902e5b1b2ab44325bcee00a06dc9d8e99adaf81dcfc82fd983f79e651996156b0b16d6f2c59957ab364884b3c000300000000000000faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da79b07bba09fac6ce06ba23e6b89b1c4c9d60dbdcfaa715899d254d1b47a8d16cf5b9fb9151db9d6288fe7aa50000000000000000fa1d7216d1145ff14b0c8564c6", 0x105}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}, 0x78) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) [ 362.454027][ T7445] usb 4-1: USB disconnect, device number 8 [ 362.461888][ T2473] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=ac.7f [ 362.471134][ T2473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.501778][ T6886] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 362.516222][ T2473] usb 1-1: Product: syz [ 362.529878][ T9235] ptrace attach of "/root/syz-executor.5"[9234] was attempted by "/root/syz-executor.5"[9235] [ 362.530483][ T6886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.544203][ T2473] usb 1-1: Manufacturer: syz [ 362.581165][ T2473] usb 1-1: SerialNumber: syz [ 362.619930][ T2473] usb 1-1: config 0 descriptor?? [ 362.638987][ T6886] usb 3-1: Product: syz [ 362.658543][ T6886] usb 3-1: Manufacturer: syz [ 362.677001][ T6886] usb 3-1: SerialNumber: syz [ 362.692465][ T2473] uvcvideo: Found UVC 0.00 device syz (0458:706e) [ 362.702257][ T2473] uvcvideo: No valid video chain found. 10:16:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 10:16:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 10:16:52 executing program 4: syz_usb_connect(0x0, 0x5e, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x8, 0x70, 0x47, 0x8, 0x458, 0x706e, 0xac7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x26, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}, {{0x9, 0x5, 0xe}}]}}, {{0x9, 0x4, 0xa, 0x0, 0x3, 0x80, 0xce, 0xfa, 0x0, [], [{{0x9, 0x5, 0xa}}, {{0x9, 0x5, 0xc}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) 10:16:52 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a44000210203010902610002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000005240100000905810300000000000904010000020d0000090401e6"], 0x0) 10:16:52 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a0000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:52 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000081229010040000102030109024a0001010000000904000003e10500000524"], 0x0) [ 362.733708][ T28] audit: type=1400 audit(1593512212.180:13): avc: denied { sys_admin } for pid=9241 comm="syz-executor.3" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 [ 362.751441][ T2473] usb 1-1: USB disconnect, device number 6 [ 362.825440][ T6886] usb 3-1: can't set config #1, error -71 [ 362.847777][ T6886] usb 3-1: USB disconnect, device number 8 10:16:52 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a0000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:52 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e651996156b0b16d6f2c59957ab364884b3c0000692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef0", 0x8d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 10:16:52 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957a", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:16:52 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a0000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:52 executing program 2: syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x25, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x62, 0x0, [{0x0, 0x6, "a0e032a6"}, {0x0, 0x3, "b7"}, {0x0, 0x10, "103a3b3718fbbdfd992ec4d7fef3"}, {0x0, 0x10, "8c8907a0cc000000000000000000"}, {0x0, 0x10, "7143ec607a6531eb546dda94eca2"}, {0x0, 0x11, "e0b48fa3d2874fb144f219da4eda5a"}, {0x0, 0xa, "4800b063c98fd58f"}, {0x0, 0x8, "3d7187318d97"}]}, @timestamp_addr={0x44, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}}}, 0x0) 10:16:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x30) [ 363.056293][ T9278] ptrace attach of "/root/syz-executor.5"[9277] was attempted by "/root/syz-executor.5"[9278] [ 363.075249][ T9280] ptrace attach of "/root/syz-executor.2"[9279] was attempted by "/root/syz-executor.2"[9280] [ 363.137740][ T7887] usb 5-1: new high-speed USB device number 6 using dummy_hcd 10:16:52 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:52 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb4dcb53455560c8ef00fca4fafa9f04f1db324edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bc000000003eb16b116a556639aa", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 363.201731][ T8045] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 363.305498][ T2473] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 363.312417][ T9295] ptrace attach of "/root/syz-executor.2"[9294] was attempted by "/root/syz-executor.2"[9295] [ 363.381577][ T7887] usb 5-1: Using ep0 maxpacket: 8 [ 363.451755][ T8045] usb 4-1: Using ep0 maxpacket: 32 [ 363.507872][ T7887] usb 5-1: config 0 has an invalid interface number: 38 but max is 1 [ 363.522624][ T7887] usb 5-1: config 0 has an invalid interface number: 10 but max is 1 [ 363.539939][ T7887] usb 5-1: config 0 has no interface number 0 [ 363.548056][ T7887] usb 5-1: config 0 has no interface number 1 [ 363.557537][ T7887] usb 5-1: config 0 interface 38 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 363.569686][ T2473] usb 1-1: Using ep0 maxpacket: 8 [ 363.575475][ T7887] usb 5-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 363.588691][ T7887] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 363.600741][ T7887] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 363.605030][ T8045] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.613163][ T7887] usb 5-1: config 0 interface 10 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 363.641726][ T8045] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.653409][ T8045] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.663635][ T8045] usb 4-1: config 1 interface 1 has no altsetting 1 [ 363.691750][ T2473] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.711914][ T2473] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.791691][ T7887] usb 5-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=ac.7f [ 363.801168][ T7887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.831544][ T7887] usb 5-1: Product: syz [ 363.835850][ T7887] usb 5-1: Manufacturer: syz [ 363.840632][ T7887] usb 5-1: SerialNumber: syz [ 363.852087][ T8045] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.861348][ T8045] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 363.872299][ T7887] usb 5-1: config 0 descriptor?? [ 363.879334][ T8045] usb 4-1: Product: syz [ 363.885531][ T8045] usb 4-1: Manufacturer: syz [ 363.890584][ T8045] usb 4-1: SerialNumber: syz [ 363.901663][ T2473] usb 1-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 363.911181][ T2473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.921951][ T7887] uvcvideo: Found UVC 0.00 device syz (0458:706e) [ 363.929183][ T7887] uvcvideo: No valid video chain found. [ 363.949810][ T8045] usb 4-1: selecting invalid altsetting 1 [ 363.955703][ T2473] usb 1-1: Product: syz [ 363.981580][ T2473] usb 1-1: Manufacturer: syz [ 363.986617][ T2473] usb 1-1: SerialNumber: syz [ 364.124753][ T2473] usb 5-1: USB disconnect, device number 6 [ 364.161951][ T8045] cdc_ncm 4-1:1.0: bind() failure [ 364.169164][ T8045] cdc_ncm 4-1:1.1: bind() failure [ 364.207943][ T8045] usb 4-1: USB disconnect, device number 9 [ 364.236578][ T8160] usb 1-1: USB disconnect, device number 7 [ 364.911664][ T8113] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 364.932039][ T7845] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 365.041538][ T8045] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 365.161738][ T8113] usb 5-1: Using ep0 maxpacket: 8 [ 365.191549][ T7845] usb 4-1: Using ep0 maxpacket: 32 [ 365.291723][ T8045] usb 1-1: Using ep0 maxpacket: 8 [ 365.297555][ T8113] usb 5-1: config 0 has an invalid interface number: 38 but max is 1 [ 365.307915][ T8113] usb 5-1: config 0 has an invalid interface number: 10 but max is 1 [ 365.317551][ T7845] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.328346][ T8113] usb 5-1: config 0 has no interface number 0 [ 365.336819][ T7845] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.348728][ T8113] usb 5-1: config 0 has no interface number 1 [ 365.356132][ T8113] usb 5-1: config 0 interface 38 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 365.367729][ T7845] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.378846][ T8113] usb 5-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 365.390485][ T7845] usb 4-1: config 1 interface 1 has no altsetting 1 [ 365.399875][ T8113] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 365.412417][ T8045] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.422821][ T8045] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.437680][ T8113] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 365.448910][ T8113] usb 5-1: config 0 interface 10 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 365.602202][ T7845] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.612676][ T7845] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 365.620933][ T7845] usb 4-1: Product: syz [ 365.625748][ T8045] usb 1-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 365.635664][ T7845] usb 4-1: Manufacturer: syz [ 365.640516][ T7845] usb 4-1: SerialNumber: syz [ 365.646390][ T8045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.655073][ T8113] usb 5-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=ac.7f [ 365.665116][ T8045] usb 1-1: Product: syz [ 365.670927][ T8113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.679461][ T8045] usb 1-1: Manufacturer: syz [ 365.689156][ T8045] usb 1-1: SerialNumber: syz [ 365.694663][ T8113] usb 5-1: Product: syz [ 365.699126][ T8113] usb 5-1: Manufacturer: syz [ 365.710239][ T7845] usb 4-1: selecting invalid altsetting 1 [ 365.718068][ T8113] usb 5-1: SerialNumber: syz [ 365.732436][ T8113] usb 5-1: config 0 descriptor?? [ 365.772679][ T8113] uvcvideo: Found UVC 0.00 device syz (0458:706e) [ 365.779526][ T8113] uvcvideo: No valid video chain found. 10:16:55 executing program 4: syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4d, 0x6, 0x0, @remote, @local, {[@hopopts={0x0, 0x0, [], [@generic={0x0, 0x3, "e268c8"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"ca6ce30cdb66bb9a4a70c6d1c0fcbfa3be941671bc894344958f650c851b201c73fb94ab33896242cf"}}}}}}}, 0x0) [ 365.850694][ T8113] usb 5-1: USB disconnect, device number 7 10:16:55 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x63d882a, &(0x7f0000000100)={[{@abort='abort'}]}) 10:16:55 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x11a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 10:16:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x146}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 10:16:55 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x100}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) [ 365.918258][ T2629] usb 1-1: USB disconnect, device number 8 [ 365.961571][ T7845] cdc_ncm 4-1:1.0: bind() failure [ 365.981259][ T7845] cdc_ncm 4-1:1.1: bind() failure 10:16:55 executing program 5: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af0003140000000000ffffffa90000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 10:16:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) [ 366.008170][ T7845] usb 4-1: USB disconnect, device number 10 [ 366.026020][ T9380] ptrace attach of "/root/syz-executor.2"[9375] was attempted by "/root/syz-executor.2"[9380] [ 366.038050][ T9379] ptrace attach of "/root/syz-executor.5"[9374] was attempted by "/root/syz-executor.5"[9379] 10:16:55 executing program 4: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af0003140000000000ffffff810000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 10:16:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x2000005f) 10:16:55 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 366.121878][ T9390] ptrace attach of "/root/syz-executor.0"[9389] was attempted by "/root/syz-executor.0"[9390] 10:16:55 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) [ 366.231940][ T9394] ldm_validate_privheads(): Disk read failed. [ 366.238430][ T9394] loop5: p2 p4 [ 366.270979][ T9394] loop5: partition table partially beyond EOD, truncated [ 366.271575][ T9391] EXT4-fs error (device sda1): ext4_remount:5532: Abort forced by user [ 366.301738][ T9394] loop5: p2 size 327680 extends beyond EOD, truncated 10:16:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x804803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x2) [ 366.338757][ T9391] EXT4-fs (sda1): Remounting filesystem read-only [ 366.345901][ T9394] loop5: p4 size 2097152 extends beyond EOD, truncated [ 366.382284][ T9406] ldm_validate_privheads(): Disk read failed. [ 366.388448][ T9406] loop4: p2 p4 [ 366.400809][ T9406] loop4: partition table partially beyond EOD, truncated [ 366.410858][ T9406] loop4: p2 size 327680 extends beyond EOD, truncated [ 366.430044][ T9406] loop4: p4 size 2097152 extends beyond EOD, truncated 10:16:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d8680027131f8dcff47d010000805acf4f8f36460234435902e5b1b2ab44325bcee00a06dc9d8e99adaf81dcfc82fd983f79e651996156b0b16d6f2c59957ab364884b3c000300000000000000faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da", 0xc4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 10:16:56 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af00031400000000005500000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40}]) 10:16:56 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4801, 0x0) [ 366.568543][ T9418] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 366.595443][ T9418] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 366.656329][ T9394] ldm_validate_privheads(): Disk read failed. [ 366.667110][ T9394] loop5: p2 p4 [ 366.670919][ T9394] loop5: partition table partially beyond EOD, truncated [ 366.680549][ T9418] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 366.691191][ T9394] loop5: p2 size 327680 extends beyond EOD, truncated [ 366.726576][ T9418] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 366.727785][ T9394] loop5: p4 size 2097152 extends beyond EOD, truncated 10:16:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e651996156b0b16d6f2c59957ab364884b3c0000692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da79b07bba09fac6ce06ba23e6b89b1c4c9d60dbdcfaa715899d254d1b47a8d16cf5b9fb9151cb9d6288fe7aa50000000000000000fa1d7216d1145ff14b0c8564c658932bbaa323a3054e55d4d56fe6adf112e16474235f787d9cbe233694efa3a6fb279f1836e7af3e2f15ef4767bc9beff934612478483c05c4bc321bbd175415868f09", 0x146}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 366.785127][ T9445] ptrace attach of "/root/syz-executor.3"[9438] was attempted by "/root/syz-executor.3"[9445] [ 366.801104][ T9418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 366.889900][ T9452] ptrace attach of "/root/syz-executor.3"[9451] was attempted by "/root/syz-executor.3"[9452] [ 366.923156][ T9448] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 366.933260][ T3881] ldm_validate_privheads(): Disk read failed. [ 366.953919][ T3881] loop5: p2 p4 [ 366.959841][ T3881] loop5: partition table partially beyond EOD, truncated [ 366.976666][ T3881] loop5: p2 size 327680 extends beyond EOD, truncated [ 366.985532][ T3881] loop5: p4 size 2097152 extends beyond EOD, truncated 10:16:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$binfmt_script(r0, 0x0, 0x17) 10:16:56 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06", 0x3f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 10:16:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 10:16:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) [ 367.009639][ T9448] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 367.046041][ T9448] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 367.059134][ T9465] ptrace attach of "/root/syz-executor.3"[9464] was attempted by "/root/syz-executor.3"[9465] 10:16:56 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x8, 0x70, 0x47, 0x8, 0x458, 0x706e, 0xac7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 10:16:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e651996156b0b16d6f2c59957ab364884b3c0000692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037c", 0x7e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 367.104272][ T9448] EXT4-fs error (device loop4): ext4_fill_super:4667: inode #2: comm syz-executor.4: iget: root inode unallocated [ 367.229954][ T9448] EXT4-fs (loop4): get root inode failed [ 367.269919][ T9448] EXT4-fs (loop4): mount failed 10:16:56 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:56 executing program 0: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af0003140000000000000007a60000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 10:16:56 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x8, 0x70, 0x47, 0x8, 0x458, 0x706e, 0xac7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x26, 0x0, 0x0, 0xe, 0x1}}, {{0x9, 0x4, 0xa, 0x0, 0x0, 0x80, 0xce, 0xfa}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa}]}}) [ 367.285051][ T9487] ptrace attach of "/root/syz-executor.0"[9484] was attempted by "/root/syz-executor.0"[9487] [ 367.386215][ T9448] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 367.407977][ T9448] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 367.432036][ T9448] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 367.464241][ T9448] EXT4-fs error (device loop4): ext4_fill_super:4667: inode #2: comm syz-executor.4: iget: root inode unallocated [ 367.485587][ T9448] EXT4-fs (loop4): get root inode failed [ 367.499419][ T9448] EXT4-fs (loop4): mount failed [ 367.521058][ T9499] ldm_validate_privheads(): Disk read failed. [ 367.527437][ T9499] loop0: p2 p4 [ 367.539996][ T9499] loop0: partition table partially beyond EOD, truncated [ 367.550886][ T9499] loop0: p2 size 327680 extends beyond EOD, truncated 10:16:57 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x2) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 10:16:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xfffffffffffffffd) 10:16:57 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:57 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 367.581485][ T2473] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 367.611959][ T9499] loop0: p4 size 2097152 extends beyond EOD, truncated 10:16:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 10:16:57 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 367.738513][ T7845] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 367.801388][ T9499] ldm_validate_privheads(): Disk read failed. [ 367.807835][ T9499] loop0: p2 p4 [ 367.817466][ T9499] loop0: partition table partially beyond EOD, truncated [ 367.844890][ T2473] usb 4-1: Using ep0 maxpacket: 8 [ 367.872341][ T9499] loop0: p2 size 327680 extends beyond EOD, truncated 10:16:57 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="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", 0x131}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x5) [ 367.940124][ T9499] loop0: p4 size 2097152 extends beyond EOD, truncated [ 367.974416][ T2473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 367.991541][ T7845] usb 3-1: Using ep0 maxpacket: 8 [ 368.141495][ T2473] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=ac.7f [ 368.150572][ T2473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.171898][ T2473] usb 4-1: Product: syz [ 368.176104][ T2473] usb 4-1: Manufacturer: syz [ 368.180692][ T2473] usb 4-1: SerialNumber: syz [ 368.202778][ T2473] usb 4-1: config 0 descriptor?? [ 368.242572][ T2473] uvcvideo: Found UVC 0.00 device syz (0458:706e) [ 368.248310][ T7845] usb 3-1: config 0 has an invalid interface number: 38 but max is 1 [ 368.249022][ T2473] uvcvideo: No valid video chain found. [ 368.258010][ T7845] usb 3-1: config 0 has an invalid interface number: 10 but max is 1 [ 368.279297][ T7845] usb 3-1: config 0 has no interface number 0 [ 368.286922][ T7845] usb 3-1: config 0 has no interface number 1 [ 368.451610][ T2473] usb 4-1: USB disconnect, device number 11 [ 368.481715][ T7845] usb 3-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=ac.7f [ 368.496686][ T7845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.506617][ T7845] usb 3-1: Product: syz [ 368.510933][ T7845] usb 3-1: Manufacturer: syz [ 368.517676][ T7845] usb 3-1: SerialNumber: syz [ 368.525367][ T7845] usb 3-1: config 0 descriptor?? [ 368.562732][ T7845] uvcvideo: Found UVC 0.00 device syz (0458:706e) [ 368.569209][ T7845] uvcvideo: No valid video chain found. [ 368.772479][ T7845] usb 3-1: USB disconnect, device number 9 [ 369.224923][ T2473] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 369.531361][ T2473] usb 4-1: Using ep0 maxpacket: 8 [ 369.561406][ T8113] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 369.651813][ T2473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 369.821466][ T8113] usb 3-1: Using ep0 maxpacket: 8 [ 369.851673][ T2473] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=ac.7f [ 369.860881][ T2473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.909270][ T2473] usb 4-1: Product: syz [ 369.933731][ T2473] usb 4-1: Manufacturer: syz [ 369.958914][ T2473] usb 4-1: SerialNumber: syz [ 369.979380][ T2473] usb 4-1: config 0 descriptor?? [ 370.051749][ T8113] usb 3-1: config 0 has an invalid interface number: 38 but max is 1 [ 370.052444][ T2473] uvcvideo: Found UVC 0.00 device syz (0458:706e) [ 370.059888][ T8113] usb 3-1: config 0 has an invalid interface number: 10 but max is 1 [ 370.059905][ T8113] usb 3-1: config 0 has no interface number 0 [ 370.059920][ T8113] usb 3-1: config 0 has no interface number 1 [ 370.208460][ T2473] uvcvideo: No valid video chain found. [ 370.221981][ T8113] usb 3-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=ac.7f [ 370.231036][ T8113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.272576][ T2473] usb 4-1: USB disconnect, device number 12 [ 370.292040][ T8113] usb 3-1: Product: syz 10:16:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc3376003639405cb4aed7d12f0000001500ae47", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 10:16:59 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:16:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e651996156b0b16d6f2c59957ab364884b3c0000692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da79b07bba09fac6ce06ba23e6b89b1c4c9d60dbdcfaa715899d254d1b47a8d16cf5b9fb9151cb9d6288fe7aa50000000000000000fa1d7216d1145ff14b0c8564c658932bbaa323a3054e55d4d56fe6adf112e16474235f787d9cbe233694efa3a6fb279f1836e7af3e2f15ef4767", 0x130}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 10:16:59 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x61}, @timestamp_addr={0x44, 0x4}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}}}, 0x0) [ 370.326536][ T8113] usb 3-1: Manufacturer: syz [ 370.372256][ T8113] usb 3-1: SerialNumber: syz 10:16:59 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000081229010040000102030109024a0001010000000904000003e1050000052406000005240000000d240f0100000000000000000006fb0700000009058103100000000009058202100000000009050302"], 0x0) 10:16:59 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x62d8026, &(0x7f0000000140)=ANY=[@ANYBLOB="6772706a71756f74613d2ea98fd6ef2030cf31d33bd76b9f2f"]) 10:16:59 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 370.413190][ T8113] usb 3-1: config 0 descriptor?? [ 370.431367][ T9597] ptrace attach of "/root/syz-executor.5"[9595] was attempted by "/root/syz-executor.5"[9597] 10:16:59 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x62d8026, &(0x7f0000000140)=ANY=[@ANYBLOB='grpjquota=.']) 10:16:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb4dcb53455560c8ef00fca4fafa9f04f1db324edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bc000000003eb16b116a556639aa9f64b7575ddd338fbb771cb6a83560c94250bb2b237d7747ae2db58697b8b00b15dd89dd39936361a3b6be", 0x110}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 370.476926][ T8113] usb 3-1: can't set config #0, error -71 [ 370.539947][ T8113] usb 3-1: USB disconnect, device number 10 [ 370.565239][ T9605] EXT4-fs (sda1): quotafile must be on filesystem root 10:17:00 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:00 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb4dcb53455560c8ef00fca4faf", 0x99}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 370.666231][ T9619] ptrace attach of "/root/syz-executor.5"[9618] was attempted by "/root/syz-executor.5"[9619] [ 370.678965][ T9617] EXT4-fs (sda1): journaled quota format not specified 10:17:00 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 370.750825][ T9622] EXT4-fs (sda1): quotafile must be on filesystem root [ 370.830243][ T9631] ptrace attach of "/root/syz-executor.5"[9630] was attempted by "/root/syz-executor.5"[9631] [ 370.894176][ T9632] EXT4-fs (sda1): journaled quota format not specified [ 371.027318][ T8113] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 371.291257][ T8113] usb 3-1: Using ep0 maxpacket: 8 [ 371.421417][ T8113] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.441226][ T8113] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 371.451077][ T8113] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.481224][ T8113] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 371.681734][ T8113] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 371.700197][ T8113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.731323][ T8113] usb 3-1: Product: syz [ 371.740045][ T8113] usb 3-1: Manufacturer: syz [ 371.750133][ T8113] usb 3-1: SerialNumber: syz [ 371.791843][ T9614] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 371.822131][ T8113] cdc_acm 3-1:1.0: skipping garbage [ 371.828575][ T8113] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 371.861957][ T8113] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 372.057278][ T8113] usb 3-1: USB disconnect, device number 11 [ 372.841341][ T7845] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 373.111202][ T7845] usb 3-1: Using ep0 maxpacket: 8 [ 373.251380][ T7845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.262564][ T7845] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 373.272829][ T7845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.282916][ T7845] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 10:17:02 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 10:17:02 executing program 5: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) creat(&(0x7f0000000000)='./bus\x00', 0x0) 10:17:02 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb4dcb53455560c8ef00fca4fafa9f04f1db324edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e866f15da7f480800", 0xc4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:17:02 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 373.458594][ T9669] ptrace attach of "/root/syz-executor.4"[9668] was attempted by "/root/syz-executor.4"[9669] [ 373.471939][ T7845] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 373.499818][ T7845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.554891][ T7845] usb 3-1: Product: syz [ 373.581487][ T7845] usb 3-1: Manufacturer: syz 10:17:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e651996156b0b16d6f2c59957ab364884b3c0000692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da79b07bba09fac6ce06ba23e6b89b1c4c9d60dbdcfaa715899d254d1b47a8d16cf5b9fb91", 0xe6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 10:17:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d8680027131f8dcff47d010000805acf4f8f36460234435902e5b1b2ab44325bcee00a06dc9d8e99adaf81dcfc82fd983f79e651996156b0b16d6f2c59957ab364884b3c000300000000000000faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da79b07bba09fac6ce06ba23e6b89b1c4c9d60dbdcfaa715899d254d1b47a8d16cf5b9fb9151db9d6288fe7aa50000000000000000fa1d7216d1145ff14b0c8564c6", 0x105}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 10:17:03 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@uni_xlate='uni_xlate=1'}]}) 10:17:03 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 373.609722][ T7845] usb 3-1: SerialNumber: syz [ 373.661366][ T7845] usb 3-1: can't set config #1, error -71 [ 373.679232][ T7845] usb 3-1: USB disconnect, device number 12 10:17:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 10:17:03 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 373.725643][ T9683] ptrace attach of "/root/syz-executor.0"[9681] was attempted by "/root/syz-executor.0"[9683] [ 373.764648][ T9686] ptrace attach of "/root/syz-executor.4"[9684] was attempted by "/root/syz-executor.4"[9686] 10:17:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pidfd_send_signal(r2, 0x1e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d8680027131f8dcff47d010000805acf4f8f36460234435902e5b1b2ab44325bcee00a06dc9d8e99adaf81dcfc82fd983f79e651996156b0b16d6f2c59957ab364884b3c000300000000000000faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da79b07bba09fac6ce06ba23e6b89b1c4c9d60dbdcfaa715899d254d1b47a8d16cf5b9fb9151db9d6288fe7aa50000000000000000fa1d7216d1145ff14b0c8564c658932bbaa323a3054e55d4d56fe6adf1", 0x115}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x78) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 10:17:03 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x62d8026, &(0x7f0000000140)=ANY=[@ANYBLOB='grpjquota=']) [ 373.871821][ T9691] FAT-fs (loop2): bogus number of reserved sectors [ 373.940255][ T9699] ptrace attach of "/root/syz-executor.4"[9694] was attempted by "/root/syz-executor.4"[9699] [ 373.965958][ T9691] FAT-fs (loop2): Can't find a valid FAT filesystem [ 374.054496][ T9700] EXT4-fs error (device sda1): ext4_remount:5532: Abort forced by user [ 374.084824][ T9700] EXT4-fs (sda1): Remounting filesystem read-only 10:17:03 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0xfb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 10:17:03 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:03 executing program 4: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af0003140000000000ffffff850000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 10:17:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb4dcb53455560c8ef00fca4fafa9f04f1db324edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e866f15da7f480800b10000", 0xc7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 374.124635][ T9691] FAT-fs (loop2): bogus number of reserved sectors [ 374.133335][ T9691] FAT-fs (loop2): Can't find a valid FAT filesystem 10:17:03 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 10:17:03 executing program 0: unshare(0x2040400) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) [ 374.206889][ T9715] ptrace attach of "/root/syz-executor.0"[9714] was attempted by "/root/syz-executor.0"[9715] 10:17:03 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0xfe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) [ 374.265958][ T9726] ptrace attach of "/root/syz-executor.3"[9725] was attempted by "/root/syz-executor.3"[9726] [ 374.292037][ T9717] ldm_validate_privheads(): Disk read failed. [ 374.300067][ T9717] loop4: p2 < > p4 [ 374.307907][ T9717] loop4: partition table partially beyond EOD, truncated 10:17:03 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 374.326385][ T9717] loop4: p2 size 2 extends beyond EOD, truncated [ 374.343340][ T9720] EXT4-fs error (device sda1): ext4_remount:5532: Abort forced by user [ 374.346960][ T9717] loop4: p4 size 2097152 extends beyond EOD, truncated [ 374.363727][ T9720] EXT4-fs (sda1): Remounting filesystem read-only 10:17:03 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664e", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:17:03 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/23, 0x17}}, 0x120) [ 374.384616][ T9734] ptrace attach of "/root/syz-executor.3"[9733] was attempted by "/root/syz-executor.3"[9734] [ 374.420499][ T9736] EXT4-fs warning (device sda1): ext4_resize_begin:72: There are errors in the filesystem, so online resizing is not allowed 10:17:04 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 374.602715][ T9717] ldm_validate_privheads(): Disk read failed. [ 374.613092][ T9717] loop4: p2 < > p4 10:17:04 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d868001e8dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb4dcb53455560c8ef00fca4fafa9f04f1db324edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bc000000003eb16b116a556639aa9f64b7575ddd338fbb771cb6a83560c94250bb2b237d7747ae2db58697b8b00b15dd89dd39936361a3b6beda85ce328a8878168ce1dbddd3618d2f168a0cb0e52bf0aea2627797", 0x12c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:17:04 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000081229010040000102030109024a0001010000000904000003"], 0x0) [ 374.653436][ T9717] loop4: partition table partially beyond EOD, truncated [ 374.660742][ T9717] loop4: p2 size 2 extends beyond EOD, truncated [ 374.677271][ T9717] loop4: p4 size 2097152 extends beyond EOD, truncated 10:17:04 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x114}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0xfffffffffffffffe, 0x0, {0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, r4}}}, 0x78) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) 10:17:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)) [ 374.929993][ T9767] ptrace attach of "/root/syz-executor.0"[9764] was attempted by "/root/syz-executor.0"[9767] [ 375.012107][ T9775] ptrace attach of "/root/syz-executor.4"[9773] was attempted by "/root/syz-executor.4"[9775] [ 375.181227][ T7445] usb 4-1: new high-speed USB device number 13 using dummy_hcd 10:17:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0xcf3a4103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:17:04 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:04 executing program 0: syz_usb_connect(0x0, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0xd5, 0x66, 0x8, 0x12d1, 0x89cc, 0xc787, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0x1, 0x65, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x3f7}}, {{0x9, 0x5, 0xf, 0x1, 0x0, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "70ea3e769725"}]}}]}}]}}]}}, 0x0) 10:17:04 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="fd20000015", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 10:17:04 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r1 = creat(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) r2 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[3]x|\xd4\xbb\xb8v\xeeq\xc2S\xb1\x16\x17\x8b\xb2\xf7W', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x8040003) sendfile(r0, r2, 0x0, 0x2008000fffffffe) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="000001000000000000000099"]) [ 375.410536][ T28] audit: type=1800 audit(1593512224.851:14): pid=9786 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15960 res=0 10:17:04 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 375.462952][ T7445] usb 4-1: Using ep0 maxpacket: 8 [ 375.479304][ T9795] netlink: 8155 bytes leftover after parsing attributes in process `syz-executor.5'. [ 375.513300][ T9793] IPVS: ftp: loaded support on port[0] = 21 [ 375.581451][ T7445] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.605662][ T7445] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.671130][ T2473] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 375.801541][ T7445] usb 4-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 375.811694][ T7445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.820510][ T7445] usb 4-1: Product: syz [ 375.831393][ T7445] usb 4-1: Manufacturer: syz [ 375.837916][ T7445] usb 4-1: SerialNumber: syz [ 375.893443][ T7445] cdc_acm 4-1:1.0: Zero length descriptor references [ 375.911106][ T2473] usb 1-1: Using ep0 maxpacket: 8 [ 375.934208][ T7445] cdc_acm: probe of 4-1:1.0 failed with error -22 10:17:05 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:05 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, {0xa, 0x4e22, 0x0, @remote}, 0x0, [0x0, 0x0, 0x20000000, 0x0, 0x3, 0x0, 0xfffffffd]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 376.042240][ T2473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1015, setting to 64 [ 376.077540][ T2473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 376.125154][ T2473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 376.179185][ T7445] usb 4-1: USB disconnect, device number 13 [ 376.206390][ T28] audit: type=1800 audit(1593512225.651:15): pid=9786 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15960 res=0 [ 376.265893][ T9846] IPVS: ftp: loaded support on port[0] = 21 [ 376.351342][ T2473] usb 1-1: New USB device found, idVendor=12d1, idProduct=89cc, bcdDevice=c7.87 [ 376.360419][ T2473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.401468][ T2473] usb 1-1: Product: syz [ 376.407007][ T2473] usb 1-1: Manufacturer: syz [ 376.421564][ T2473] usb 1-1: SerialNumber: syz [ 376.433544][ T2473] usb 1-1: config 0 descriptor?? [ 376.472366][ T2473] option 1-1:0.0: GSM modem (1-port) converter detected [ 376.486707][ T2537] tipc: TX() has been purged, node left! [ 376.675221][ T7445] usb 1-1: USB disconnect, device number 9 [ 376.693584][ T7445] option 1-1:0.0: device disconnected [ 376.861115][ T2629] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 377.121035][ T2629] usb 4-1: Using ep0 maxpacket: 8 [ 377.251378][ T2629] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.321064][ T2629] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.541039][ T6886] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 377.551798][ T2629] usb 4-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 377.581126][ T2629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.611114][ T2629] usb 4-1: Product: syz [ 377.616362][ T2629] usb 4-1: Manufacturer: syz [ 377.651493][ T2629] usb 4-1: SerialNumber: syz [ 377.691913][ T2629] cdc_acm 4-1:1.0: Zero length descriptor references [ 377.698719][ T2629] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 377.851031][ T6886] usb 1-1: Using ep0 maxpacket: 8 10:17:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x986, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010000, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1}, 0x800000}, {{0x0, 0x4, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) 10:17:07 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0xa, &(0x7f0000000080)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20000005002}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/83, 0x53}], 0x1, 0x0) io_submit(r2, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r3, &(0x7f0000000040), 0x200000a5}]) 10:17:07 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x68d0826, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc'}}, {@mblk_io_submit='mblk_io_submit'}]}) 10:17:07 executing program 5: r0 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) lseek(r0, 0xfffffffffffffffc, 0x4) [ 377.920330][ T2629] usb 4-1: USB disconnect, device number 14 [ 378.001446][ T6886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1015, setting to 64 [ 378.035462][ T6886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 378.051459][ T9921] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:17:07 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 378.095598][ T6886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 378.100881][ T9918] EXT4-fs (sda1): Ignoring removed mblk_io_submit option [ 378.196907][ T9918] EXT4-fs error (device sda1): ext4_remount:5532: Abort forced by user [ 378.295464][ T9918] EXT4-fs (sda1): Remounting filesystem read-only [ 378.341479][ T6886] usb 1-1: New USB device found, idVendor=12d1, idProduct=89cc, bcdDevice=c7.87 [ 378.350547][ T6886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.384537][ T6886] usb 1-1: Product: syz [ 378.401734][ T6886] usb 1-1: Manufacturer: syz [ 378.429131][ T6886] usb 1-1: SerialNumber: syz 10:17:07 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='\v\x8b\x8az\x0f\x88\xaf\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd50xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)) timerfd_create(0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 378.904039][ T9949] kvm: pic: non byte read [ 378.939930][ T9949] kvm: pic: non byte read [ 378.962650][ T9949] kvm: pic: non byte read 10:17:08 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 378.996523][ T9949] kvm: pic: non byte read 10:17:08 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) 10:17:08 executing program 4: inotify_init1(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/249, 0xf9}], 0x1, 0x0) [ 379.032486][ T9949] kvm: pic: non byte read 10:17:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)="480000001500197f09004b0101048c590188ffffcf5d3474ff9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee22600d4ff5bffff9b226452", 0x48}], 0x1) [ 379.141349][ T9949] kvm: pic: level sensitive irq not supported 10:17:08 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r2, &(0x7f0000000040)="4edd865b880da4d819453f0abc9b", 0xe, 0x8c) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 10:17:08 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0, 0x8, 0x8, 0x5}, {0x9, 0x1f, 0x0, 0x2c6}, {0x7ff, 0x0, 0x40, 0x2}, {0xffff, 0x40, 0x0, 0x2}]}) r0 = gettid() ptrace(0x4207, r0) ptrace$cont(0x18, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28842, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xff, 0x6, 0x0, 0x43, 0xff, 0x600}, r1, 0x1, r2, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)}], 0x1) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000001c0)={0x0, 0x2004, 0xc8, 0x0, 0x53}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x8}, 0x0, 0x1000) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000180)) 10:17:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) fadvise64(0xffffffffffffffff, 0x893, 0x7fff, 0x3) clone(0xcf3a4103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:17:08 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000100)) 10:17:08 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e008, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="eb3c906d09000000666174000204010002000270fff8b589", 0x18}], 0x200c010, 0x0) [ 379.141533][ T9949] kvm: pic: level sensitive irq not supported [ 379.565956][T10004] IPVS: ftp: loaded support on port[0] = 21 10:17:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)="480000001500197f09004b0101048c590188ffffcf5d3474ff9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee22600d4ff5bffff9b226452", 0x48}], 0x1) r1 = syz_open_procfs(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000340)='batadv_slave_0\x00') preadv(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)) 10:17:09 executing program 3: ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) poll(0x0, 0x0, 0x10080c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010044) 10:17:09 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1c012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)="480000001500197f09004b0101048c590188ffffcf5d3474ff9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee22600d4ff5bffff9b226452", 0x48}], 0x1) 10:17:09 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x2, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f27b", 0x18}, {&(0x7f0000000c40)="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", 0x186, 0x7f}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$9p(r1, &(0x7f0000001400)=';', 0x20001401) 10:17:09 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="84"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:17:09 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 380.362898][T10062] IPVS: ftp: loaded support on port[0] = 21 10:17:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) fremovexattr(r0, 0x0) 10:17:10 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x14420, 0x0) 10:17:10 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:10 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000200"], 0x24}}, 0x24000000) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 10:17:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x40000080000100, 0x0, 0x0, 0x0) 10:17:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) 10:17:10 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x30, 0x0, "000000400000040000000000000000000000000000020000000000000000000089506108ec5d366a0000002300000000000000000000000000002000eaffff00"}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 380.996321][T10110] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 381.036278][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)="480000001500197f09004b0101048c590188ffffcf5d3474ff9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee22600d4ff5bffff9b226452", 0x48}], 0x1) [ 381.098164][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 381.180392][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:17:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x130, &(0x7f0000000180)="20b62c0a2a4d494a83e7f7f249b9740c9e57a5b60a00008f24c30e47894750880b2f4c4f4186f2c7709a822bf1b0659f04278d7474d5abc4929a75d3c25aef86a5101fabad8c5e6212c6805a1b71837977fc72aaf45c5a04f054cd24b6794d9f0e2aa9916dc6d6ffa9b777d43690d56786c88a52d12857c90f9235c0b5018456070cf4f70e9a58f324e721c5a438b70e18903ac7acae17a8b2b55c082a6f31c3f0208b8458ffd8771d925215aeef77693ff16ba01bfe47f79b3ee55538dc74b2a096c6c920ff00c944d4d9b66dca309d51287b083049572e266ea2ed4e2eb2d1a84e1253a5b575d6950901f58139fee504b2e1bcff368bb7b1bf44901e3b393d76c2ef7a26d55e38bf97c3e0654d134003584f7c7a4a7a25bac9b9b54449939eb95510c297e6727e18bf589a51af028c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 381.231848][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.263358][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.429382][T10128] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 10:17:10 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) 10:17:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x10100, 0x0) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400000002c2, 0x0) 10:17:10 executing program 3: mknod(&(0x7f0000000040)='./bus\x00', 0x8000, 0x6b2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 381.475401][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.523782][T10128] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 381.575923][T10128] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.606437][T10128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 10:17:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0x2, 0x80001, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4080) [ 381.652179][T10128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:17:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) tkill(r2, 0x1000000000016) 10:17:11 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 10:17:11 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1f91db83) 10:17:11 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 10:17:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8}, {0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x6}, {0x6000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3ff}, 0xa004001e}) 10:17:11 executing program 5: 10:17:11 executing program 2: [ 383.001257][ T2537] tipc: TX() has been purged, node left! [ 383.160963][ T2537] tipc: TX() has been purged, node left! [ 383.330858][ T2537] tipc: TX() has been purged, node left! 10:17:13 executing program 4: 10:17:13 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001600fff7a4ed0000008000000a00000018"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 10:17:13 executing program 0: 10:17:13 executing program 2: 10:17:13 executing program 5: 10:17:13 executing program 3: 10:17:13 executing program 5: 10:17:13 executing program 2: 10:17:13 executing program 3: 10:17:13 executing program 0: 10:17:14 executing program 1: 10:17:14 executing program 4: 10:17:14 executing program 5: 10:17:14 executing program 2: 10:17:14 executing program 0: 10:17:14 executing program 3: 10:17:14 executing program 1: 10:17:14 executing program 4: 10:17:14 executing program 2: 10:17:14 executing program 0: 10:17:14 executing program 5: 10:17:14 executing program 3: 10:17:14 executing program 4: 10:17:14 executing program 1: 10:17:14 executing program 2: 10:17:14 executing program 0: 10:17:14 executing program 5: 10:17:14 executing program 1: 10:17:14 executing program 3: 10:17:14 executing program 4: 10:17:14 executing program 0: 10:17:14 executing program 2: 10:17:14 executing program 5: 10:17:14 executing program 1: 10:17:14 executing program 3: 10:17:14 executing program 4: 10:17:14 executing program 0: 10:17:14 executing program 2: 10:17:14 executing program 5: 10:17:15 executing program 3: 10:17:15 executing program 1: 10:17:15 executing program 4: 10:17:15 executing program 0: 10:17:15 executing program 2: 10:17:15 executing program 1: 10:17:15 executing program 5: 10:17:15 executing program 3: 10:17:15 executing program 4: 10:17:15 executing program 2: 10:17:15 executing program 0: 10:17:15 executing program 5: 10:17:15 executing program 1: 10:17:15 executing program 3: 10:17:15 executing program 4: 10:17:15 executing program 2: 10:17:15 executing program 0: 10:17:15 executing program 3: 10:17:15 executing program 1: 10:17:15 executing program 5: 10:17:15 executing program 4: 10:17:15 executing program 0: 10:17:15 executing program 3: 10:17:15 executing program 2: 10:17:15 executing program 5: 10:17:15 executing program 1: 10:17:15 executing program 4: 10:17:15 executing program 3: 10:17:15 executing program 0: 10:17:15 executing program 2: 10:17:15 executing program 5: 10:17:16 executing program 1: 10:17:16 executing program 3: 10:17:16 executing program 0: 10:17:16 executing program 4: 10:17:16 executing program 1: 10:17:16 executing program 2: 10:17:16 executing program 5: 10:17:16 executing program 3: 10:17:16 executing program 4: 10:17:16 executing program 0: 10:17:16 executing program 1: 10:17:16 executing program 2: 10:17:16 executing program 5: 10:17:16 executing program 3: 10:17:16 executing program 4: 10:17:16 executing program 2: 10:17:16 executing program 0: 10:17:16 executing program 1: 10:17:16 executing program 3: 10:17:16 executing program 5: syz_mount_image$hfsplus(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 10:17:16 executing program 4: 10:17:16 executing program 0: 10:17:16 executing program 2: 10:17:16 executing program 1: 10:17:16 executing program 3: 10:17:16 executing program 4: 10:17:16 executing program 0: 10:17:16 executing program 1: 10:17:16 executing program 2: 10:17:16 executing program 4: 10:17:17 executing program 2: 10:17:17 executing program 5: 10:17:17 executing program 3: 10:17:17 executing program 0: 10:17:17 executing program 2: 10:17:17 executing program 1: 10:17:17 executing program 3: 10:17:17 executing program 2: 10:17:17 executing program 0: 10:17:17 executing program 5: 10:17:17 executing program 4: 10:17:17 executing program 3: 10:17:17 executing program 2: 10:17:17 executing program 1: 10:17:17 executing program 4: 10:17:17 executing program 0: 10:17:17 executing program 5: 10:17:17 executing program 3: 10:17:17 executing program 1: 10:17:17 executing program 2: 10:17:17 executing program 4: 10:17:17 executing program 5: 10:17:17 executing program 0: 10:17:17 executing program 3: 10:17:17 executing program 2: 10:17:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x63, 0x0) 10:17:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, 0x0, 0x0) 10:17:17 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4000, 0x0) 10:17:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, &(0x7f0000f5ffe0)={@loopback}, 0x20) 10:17:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x33, 0x0, 0x0) 10:17:18 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 10:17:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x5605, 0x0) 10:17:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:17:18 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) 10:17:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b36, 0x0) 10:17:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x2000000, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ffa22b3f1e0b02bd67aa03059bcecc7a95c25a34ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xc091, 0x0, 0xf7) 10:17:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(0x0, r1, r3) 10:17:18 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) 10:17:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x5602, &(0x7f00000004c0)) 10:17:18 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000380)={'bridge0\x00', @ifru_map={0x3}}) 10:17:18 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10:17:18 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) 10:17:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x42, &(0x7f0000f5ffe0)={@loopback}, 0x20) 10:17:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @raw_data="fed27ffd02a44b1d423beb2676cc5fed7c6b7175ab3795484bfe646c5fcc50381dbf438f23d5a407d6b2dc870acbafacbc0dd74f00d0d038b219dcbeda33a12220f3cca25125c15576b52bbd5b35ecacda7798ec58987c54c9207e1d9fadd2646144bda6a144886ccb54370e06ffd3774d3f10df342e182b5e197386db3c084d4ab738cab59a97872bceee5d212220b4c7bbf7b8e5975f1df79df6aac220189d50b3e222172c4610ee100a62ccd763eb20124293072c2c17a7a813eb3c0b097a1f65364bf2293d90"}) 10:17:18 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) 10:17:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x46, 0x0, 0x0) 10:17:18 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000880)={0x0, 0x3}) 10:17:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc33760036394058b4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e651996156b0b16d6f2c59957ab364884b3c0000692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b10000a7a3da79b07bba09fac6ce06ba23e6b89b1c4c9d60dbdcfaa715899d254d1b47a8d16cf5b9fb9151cb9d6288fe7a", 0xed}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 10:17:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') lseek(r0, 0x63, 0x0) [ 389.923520][ C0] traps: PANIC: double fault, error_code: 0x0 [ 389.923525][ C0] double fault: 0000 [#1] PREEMPT SMP KASAN [ 389.923531][ C0] CPU: 0 PID: 10405 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 389.923538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.923542][ C0] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 389.923556][ C0] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 e0 83 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 9f 96 66 89 48 c1 eb 03 48 [ 389.923566][ C0] RSP: 0018:fffffe0000001fb8 EFLAGS: 00010086 [ 389.923575][ C0] RAX: ffffffffffffffea RBX: fffffe0000001fb8 RCX: ffffffff88000e87 [ 389.923580][ C0] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff884583e0 [ 389.923586][ C0] RBP: fffffe0000002120 R08: 0000000000000000 R09: 0000000000000000 [ 389.923592][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 389.923598][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.923604][ C0] FS: 00007fbbbe466700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 389.923609][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.923615][ C0] CR2: fffffe0000001fa8 CR3: 000000008da42000 CR4: 00000000001406f0 [ 389.923621][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.923626][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 389.923629][ C0] Call Trace: [ 389.923632][ C0] [ 389.923635][ C0] error_entry+0xb8/0xc0 [ 389.923640][ C0] RIP: 0010:native_irq_return_iret+0x0/0x2 [ 389.923652][ C0] Code: 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 08 e9 10 00 00 00 90 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 f6 44 24 20 04 75 02 <48> cf 57 0f 01 f8 0f 1f 00 65 48 8b 3c 25 00 90 01 00 48 89 07 48 [ 389.923656][ C0] RSP: 0018:fffffe00000021d8 EFLAGS: 00010046 ORIG_RAX: 0000000000000000 [ 389.923665][ C0] RAX: ffffffffffffffea RBX: 0000000000000000 RCX: 0000000000000000 [ 389.923670][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 389.923675][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.923680][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 389.923685][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.923688][ C0] ? asm_exc_general_protection+0x8/0x30 [ 389.923692][ C0] RIP: 0033:0x273c050000075366 [ 389.923695][ C0] Code: Bad RIP value. [ 389.923701][ C0] RSP: 002b:00007fbbbe465c78 EFLAGS: 00000346 [ 389.923703][ C0] Modules linked in: [ 390.176450][ C0] ---[ end trace 168e3995f67e2f02 ]--- [ 390.176454][ C0] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 390.176465][ C0] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 e0 83 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 9f 96 66 89 48 c1 eb 03 48 [ 390.176468][ C0] RSP: 0018:fffffe0000001fb8 EFLAGS: 00010086 [ 390.176474][ C0] RAX: ffffffffffffffea RBX: fffffe0000001fb8 RCX: ffffffff88000e87 [ 390.176478][ C0] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff884583e0 [ 390.176482][ C0] RBP: fffffe0000002120 R08: 0000000000000000 R09: 0000000000000000 [ 390.176487][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 390.176491][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.176496][ C0] FS: 00007fbbbe466700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 390.176500][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.176504][ C0] CR2: fffffe0000001fa8 CR3: 000000008da42000 CR4: 00000000001406f0 [ 390.176508][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.176513][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.176517][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 390.178093][ C0] Kernel Offset: disabled