netlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="670033005080000008021100000108021100000008021100000000000000000000000000000000000000000000060101010101010301000406000000000000060200002d1a0000000000000000000000000000000000000000000000000000720603030303030300080026007109000004006c"], 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000540)={0x0, 0x5000000, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x90}, 0x4}, 0x0) [ 621.029894][ T9212] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 621.398161][ T9212] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 621.407187][ T9212] usb 5-1: config 0 has no interface number 1 [ 621.413913][ T9212] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping 23:42:08 executing program 2: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/111}, 0x77, 0x1, 0x2800) r0 = msgget(0x3, 0x4) msgrcv(r0, &(0x7f0000000080)={0x0, ""/25}, 0x21, 0x3, 0x1800) r1 = msgget(0x3, 0x20) msgrcv(0xffffffffffffffff, &(0x7f00000000c0)={0x0, ""/98}, 0x6a, 0x1, 0x2800) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r2, &(0x7f0000000140), 0x18) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7f, 0x0, '\x00', 0x7, 0x7}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f00000005c0)={{&(0x7f0000000540)={'GENERAL\x00', {}, {&(0x7f00000004c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0xa7c3}, {&(0x7f0000000340)=@adf_dec={@format={'Cy', '2', 'BankNumber\x00'}, {0xff}}}}}}}}}, 0x3c}) msgrcv(r1, &(0x7f0000000600)={0x0, ""/169}, 0xb1, 0x1, 0x1800) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000b00)={{&(0x7f0000000a80)={'KERNEL\x00', {&(0x7f00000007c0)=@adf_hex={@format={'Cy', '0', 'BankNumber\x00'}, {}, {&(0x7f0000000700)=@adf_dec={@normal='NumberCyInstances\x00', {0x100000000}}}}}, {&(0x7f0000000a00)={'Accelerator\x00', {&(0x7f0000000940)=@adf_dec={@normal='NumberCyInstances\x00', {}, {&(0x7f0000000880)=@adf_hex={@format={'Dc', '0', 'RingSymTx\x00'}, {0x4}}}}}}}}}}) r3 = syz_usb_connect$cdc_ncm(0x6, 0x71, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x9, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "dad613"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3ff, 0x20, 0x8}, {0x6, 0x24, 0x1a, 0x1000, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x90, 0x98, 0xa}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x2, 0x40, 0x4, 0x40, 0xce}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x414}}, {0x8c, &(0x7f0000000cc0)=@string={0x8c, 0x3, "e9eefcd0995ada0ecd153392c0cfd88cf640ad100c93c7a38155b0356ea99822673f0ae8041202ad83ea0089026f951f3ccfcaff3045f0ee645b7827df7ebdef8a97be4d58537424da3c1546d8ce397a5667c8bca05098cd8ab2dabf857c7bf1613e5ed456d372fbc61423570dd0ac24e978a8ba3094f5d7eaa6c362fdf5b14510968bcc6d2c71597b60"}}, {0xf, &(0x7f0000000d80)=@string={0xf, 0x3, "e07b8888ba9fe83ebc6acfe16b"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000fc0)={0x14, &(0x7f0000000e80)={0x20, 0xf, 0xc6, {0xc6, 0xd, "41bd957d50e8835d74157748e83ae0473d258feed6bebb21d4ef2d53d7f3430fd6d71b37f23188fe0a525871e1ab695e72a3858794a14ffa8e8e01e6d9fc25d08eb3c995351f686943ac1984b8ceef21c61ab435e4d7bfe174cb7e7ae18ed1d9743ae4139b5cc3350c8b152e34c1236adaa85f6ec494bbec015d7db412c18883dbb45df71881273e15d6502e903941605862a4362b7c160f744ab672c121b6c14aee7f4f910f6e38a2d5f79461ecdbf6b5b1a577139a78931916c4e89595fa0a14ab5b37"}}, &(0x7f0000000f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x44, &(0x7f0000001000)={0x20, 0xf, 0x6, "29dae59c943d"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x80, 0x1c, {0x6, 0x9, 0xf7b, 0x9, 0xfc05, 0x2, 0x101, 0x5, 0x1, 0x7fff, 0x5}}, &(0x7f0000001100)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f0000001140)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001180)={0x20, 0x87, 0x2, 0x700}, &(0x7f00000011c0)={0x20, 0x89, 0x2}}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xb018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xdb, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0xffff, 0x1, 0x1, {0x22, 0x605}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe3, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x110, 0x4, 0x80, 0x5, 0x40, 0xff}, 0x1c, &(0x7f0000001380)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "82fb165fad2e2d7906d93d9af7fba340"}, @ptm_cap={0x3}]}, 0x6, [{0xd8, &(0x7f00000013c0)=@string={0xd8, 0x3, "f1e1649876c15c1a28cc60c2e92c7650485f23370699189dfb78a8b2bf6c932d1a3d1fe7bdaa1195e1a0c552276d0a0905232f112c4363a06cac51dfc79a384fc08b81e8b57246e1fb24bcb4884c64e665125cd6b1618224ae3bfadfac26bb1c1aec00e59f12033d055f859a72e51250ba276fa57e8fa72fbaa97055a38369531b34cc10b1bc90720361afa32e3297668b003898a828faaebb1ea896aff879d790eaea19bc88b0d143ba654cecb0235ab37a0f7160497726127c4d5133a5012bb3d9615e0a4c6d38bd72bc59c288f02077b63bc19355"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0x46, &(0x7f0000001540)=@string={0x46, 0x3, "d148841e1206b6958c7826c3f6be4008debe1516d2ea7f9c6971a3e1beda2f35874b570f0ba9b837201a9b8cb67cdb400d0560789a2f4ea9b46ce27c4f30b2dcd32909f5"}}, {0x7e, &(0x7f00000015c0)=@string={0x7e, 0x3, "ef8b3047e5cc31e76b0e87cac624521c0a581763aad38e87f67c9c19bb685fa95bdda1769448f2e6614285607038ac864d32491484dd3946b27d8ebfb957abdd28ec8c47c8eb95b683d13bdd723a2da0037b6b2fababe5dc38b1352a46b51e65e62e2b8334bec887dbdff6b7f83dbf8e8b6f80111bc284dd36b81f65"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x444}}]}) [ 621.528112][ T9212] usb 5-1: string descriptor 0 read error: -22 [ 621.535204][ T9212] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 621.547639][ T9212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.839986][ T9212] usb 5-1: config 0 descriptor?? [ 622.136502][ T9212] usb 5-1: USB disconnect, device number 102 [ 622.750626][ T18] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 623.002265][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 623.211798][ T18] usb 3-1: config 1 interface 0 altsetting 219 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 623.225290][ T18] usb 3-1: config 1 interface 0 altsetting 219 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 623.239226][ T18] usb 3-1: config 1 interface 0 has no altsetting 0 23:42:10 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xda14, 0x4) 23:42:10 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="670033005080000008021100000108021100000008021100000000000000000000000000000000000000000000060101010101010301000406000000000000060200002d1a0000000000000000000000000000000000000000000000000000720603030303030300080026007109000004006c"], 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000540)={0x0, 0x5000000, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x90}, 0x4}, 0x0) 23:42:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0xfffffffc, 0x0) 23:42:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="670033005080000008021100000108021100000008021100000000000000000000000000000000000000000000060101010101010301000406000000000000060200002d1a0000000000000000000000000000000000000000000000000000720603030303030300080026007109000004006c"], 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000540)={0x0, 0x5000000, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x90}, 0x4}, 0x0) 23:42:10 executing program 4: syz_usb_connect(0x0, 0xea, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x2, 0x7, 0x4d, 0xd2, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "070592"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7f, 0xffff, 0x7f}, [@obex={0x5, 0x24, 0x15, 0xfffe}, @mdlm={0x15, 0x24, 0x12, 0x800}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0xff, 0x3}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "1de4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0xdc86, 0x4805, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @dmm={0x7, 0x24, 0x14, 0x6ac, 0x200}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x7f, 0x800}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x20}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x9, 0xff, 0x85}]}], [{{0x9, 0x5, 0x8, 0x8, 0x10, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x3f, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 623.480903][ T18] usb 3-1: New USB device found, idVendor=046d, idProduct=b018, bcdDevice= 0.40 [ 623.493362][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.502698][ T18] usb 3-1: Product: ъ [ 623.507267][ T18] usb 3-1: Manufacturer: ࠊ [ 623.512185][ T18] usb 3-1: SerialNumber: 䣑Ẅؒ閶碌쌦뻶ࡀ뻞ᘕ鱿煩㔯䮇བྷꤋ㞸ᨠ貛粶䃛ԍ硠⾚ꥎ沴糢く⧓ [ 623.795754][T16702] new mount options do not match the existing superblock, will be ignored [ 623.899745][ T8449] usb 5-1: new high-speed USB device number 103 using dummy_hcd 23:42:11 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xbe, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 624.198777][ T18] usbhid 3-1:1.0: can't add hid device: -71 [ 624.208478][ T18] usbhid: probe of 3-1:1.0 failed with error -71 23:42:11 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xda14, 0x4) [ 624.267434][ T8449] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 624.276206][ T8449] usb 5-1: config 0 has no interface number 1 [ 624.283564][ T8449] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 624.348672][ T18] usb 3-1: USB disconnect, device number 23 23:42:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="670033005080000008021100000108021100000008021100000000000000000000000000000000000000000000060101010101010301000406000000000000060200002d1a0000000000000000000000000000000000000000000000000000720603030303030300080026007109000004006c"], 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000540)={0x0, 0x5000000, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x90}, 0x4}, 0x0) [ 624.477792][ T8449] usb 5-1: string descriptor 0 read error: -22 [ 624.484798][ T8449] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 624.494864][ T8449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:42:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="670033005080000008021100000108021100000008021100000000000000000000000000000000000000000000060101010101010301000406000000000000060200002d1a0000000000000000000000000000000000000000000000000000720603030303030300080026007109000004006c"], 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000540)={0x0, 0x5000000, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x90}, 0x4}, 0x0) [ 624.693291][ T8449] usb 5-1: config 0 descriptor?? [ 624.842577][T16722] new mount options do not match the existing superblock, will be ignored 23:42:12 executing program 2: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/111}, 0x77, 0x1, 0x2800) r0 = msgget(0x3, 0x4) msgrcv(r0, &(0x7f0000000080)={0x0, ""/25}, 0x21, 0x3, 0x1800) r1 = msgget(0x3, 0x20) msgrcv(0xffffffffffffffff, &(0x7f00000000c0)={0x0, ""/98}, 0x6a, 0x1, 0x2800) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r2, &(0x7f0000000140), 0x18) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7f, 0x0, '\x00', 0x7, 0x7}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f00000005c0)={{&(0x7f0000000540)={'GENERAL\x00', {}, {&(0x7f00000004c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0xa7c3}, {&(0x7f0000000340)=@adf_dec={@format={'Cy', '2', 'BankNumber\x00'}, {0xff}}}}}}}}}, 0x3c}) msgrcv(r1, &(0x7f0000000600)={0x0, ""/169}, 0xb1, 0x1, 0x1800) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000b00)={{&(0x7f0000000a80)={'KERNEL\x00', {&(0x7f00000007c0)=@adf_hex={@format={'Cy', '0', 'BankNumber\x00'}, {}, {&(0x7f0000000700)=@adf_dec={@normal='NumberCyInstances\x00', {0x100000000}}}}}, {&(0x7f0000000a00)={'Accelerator\x00', {&(0x7f0000000940)=@adf_dec={@normal='NumberCyInstances\x00', {}, {&(0x7f0000000880)=@adf_hex={@format={'Dc', '0', 'RingSymTx\x00'}, {0x4}}}}}}}}}}) r3 = syz_usb_connect$cdc_ncm(0x6, 0x71, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x9, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "dad613"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3ff, 0x20, 0x8}, {0x6, 0x24, 0x1a, 0x1000, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x90, 0x98, 0xa}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x2, 0x40, 0x4, 0x40, 0xce}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x414}}, {0x8c, &(0x7f0000000cc0)=@string={0x8c, 0x3, "e9eefcd0995ada0ecd153392c0cfd88cf640ad100c93c7a38155b0356ea99822673f0ae8041202ad83ea0089026f951f3ccfcaff3045f0ee645b7827df7ebdef8a97be4d58537424da3c1546d8ce397a5667c8bca05098cd8ab2dabf857c7bf1613e5ed456d372fbc61423570dd0ac24e978a8ba3094f5d7eaa6c362fdf5b14510968bcc6d2c71597b60"}}, {0xf, &(0x7f0000000d80)=@string={0xf, 0x3, "e07b8888ba9fe83ebc6acfe16b"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000fc0)={0x14, &(0x7f0000000e80)={0x20, 0xf, 0xc6, {0xc6, 0xd, "41bd957d50e8835d74157748e83ae0473d258feed6bebb21d4ef2d53d7f3430fd6d71b37f23188fe0a525871e1ab695e72a3858794a14ffa8e8e01e6d9fc25d08eb3c995351f686943ac1984b8ceef21c61ab435e4d7bfe174cb7e7ae18ed1d9743ae4139b5cc3350c8b152e34c1236adaa85f6ec494bbec015d7db412c18883dbb45df71881273e15d6502e903941605862a4362b7c160f744ab672c121b6c14aee7f4f910f6e38a2d5f79461ecdbf6b5b1a577139a78931916c4e89595fa0a14ab5b37"}}, &(0x7f0000000f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x44, &(0x7f0000001000)={0x20, 0xf, 0x6, "29dae59c943d"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x80, 0x1c, {0x6, 0x9, 0xf7b, 0x9, 0xfc05, 0x2, 0x101, 0x5, 0x1, 0x7fff, 0x5}}, &(0x7f0000001100)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f0000001140)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001180)={0x20, 0x87, 0x2, 0x700}, &(0x7f00000011c0)={0x20, 0x89, 0x2}}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xb018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xdb, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0xffff, 0x1, 0x1, {0x22, 0x605}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe3, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x110, 0x4, 0x80, 0x5, 0x40, 0xff}, 0x1c, &(0x7f0000001380)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "82fb165fad2e2d7906d93d9af7fba340"}, @ptm_cap={0x3}]}, 0x6, [{0xd8, &(0x7f00000013c0)=@string={0xd8, 0x3, "f1e1649876c15c1a28cc60c2e92c7650485f23370699189dfb78a8b2bf6c932d1a3d1fe7bdaa1195e1a0c552276d0a0905232f112c4363a06cac51dfc79a384fc08b81e8b57246e1fb24bcb4884c64e665125cd6b1618224ae3bfadfac26bb1c1aec00e59f12033d055f859a72e51250ba276fa57e8fa72fbaa97055a38369531b34cc10b1bc90720361afa32e3297668b003898a828faaebb1ea896aff879d790eaea19bc88b0d143ba654cecb0235ab37a0f7160497726127c4d5133a5012bb3d9615e0a4c6d38bd72bc59c288f02077b63bc19355"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0x46, &(0x7f0000001540)=@string={0x46, 0x3, "d148841e1206b6958c7826c3f6be4008debe1516d2ea7f9c6971a3e1beda2f35874b570f0ba9b837201a9b8cb67cdb400d0560789a2f4ea9b46ce27c4f30b2dcd32909f5"}}, {0x7e, &(0x7f00000015c0)=@string={0x7e, 0x3, "ef8b3047e5cc31e76b0e87cac624521c0a581763aad38e87f67c9c19bb685fa95bdda1769448f2e6614285607038ac864d32491484dd3946b27d8ebfb957abdd28ec8c47c8eb95b683d13bdd723a2da0037b6b2fababe5dc38b1352a46b51e65e62e2b8334bec887dbdff6b7f83dbf8e8b6f80111bc284dd36b81f65"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x444}}]}) [ 624.961924][ T8449] usb 5-1: USB disconnect, device number 103 23:42:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @private}, {}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) 23:42:12 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xda14, 0x4) 23:42:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/49) [ 625.740955][ T8449] usb 3-1: new high-speed USB device number 24 using dummy_hcd 23:42:13 executing program 4: syz_usb_connect(0x0, 0xaa, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x2, 0x7, 0x4d, 0xd2, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "070592"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7f, 0xffff, 0x7f}, [@obex={0x5, 0x24, 0x15, 0xfffe}, @mdlm={0x15, 0x24, 0x12, 0x800}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0xff, 0x3}]}], [{{0x9, 0x5, 0x8, 0x8, 0x10, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x3f, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "1f04b790af727d4928ef328738bd506b4451fb38e5fb211d9d23eb2b50ea4f87b6859b9cf9c2c8b1a1531eb01ee461f7191a37368dafa7b6848bb0d09aace155ea91b9f431c89b65643da09a7e700ad446d0f7217901dc6d2a5cde32875d90f7d200536fc8b82552fef9fa41823752341977ee183ac9479dac22756b91709752bddaa553e141a490d15ba533eb01f654b65e8355c45a744f9c2c83bce73ec8751826bf9aeafa4ee787e42fb3ceb504d9173a2ccccc5729eac2b279bef7935065e83c16de43c31c1cc6bcf2e47bffd7e55e56d0d33b5d7e702b55eec6c7312957d8c2a1cead5bca9ba9f8d8550e124876ca5b8a041543e01ecae7ccb94dd1cc"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 625.987497][ T8449] usb 3-1: Using ep0 maxpacket: 8 23:42:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x270, 0x0, 0x380, 0x238, 0x206, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'veth0_macvtap\x00'}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [], @ipv4=@multicast1}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv6=@private0}, {@ipv6=@dev, [], @ipv6=@mcast2}], 0x6}}, @common=@icmp6={{0x28}, {0x0, "8357"}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) [ 626.189163][ T8449] usb 3-1: config 1 interface 0 altsetting 219 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 626.201695][ T8449] usb 3-1: config 1 interface 0 altsetting 219 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 626.214217][ T8449] usb 3-1: config 1 interface 0 has no altsetting 0 [ 626.270299][T16743] new mount options do not match the existing superblock, will be ignored 23:42:13 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7fffffff) [ 626.549160][ T8449] usb 3-1: New USB device found, idVendor=046d, idProduct=b018, bcdDevice= 0.40 [ 626.561581][ T8449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.570729][ T8449] usb 3-1: Product: ъ [ 626.575399][ T8449] usb 3-1: Manufacturer: ࠊ [ 626.580545][ T8449] usb 3-1: SerialNumber: 䣑Ẅؒ閶碌쌦뻶ࡀ뻞ᘕ鱿煩㔯䮇བྷꤋ㞸ᨠ貛粶䃛ԍ硠⾚ꥎ沴糢く⧓ [ 626.807070][T10825] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 626.851569][T16751] xt_policy: output policy not valid in PREROUTING and INPUT 23:42:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1, 0x7fffefff, 0x0) 23:42:14 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x14, 0x0, 0x0) 23:42:14 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xda14, 0x4) [ 627.187327][ T8449] usbhid 3-1:1.0: can't add hid device: -71 [ 627.193948][ T8449] usbhid: probe of 3-1:1.0 failed with error -71 [ 627.202819][T10825] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 627.213477][T10825] usb 5-1: config 0 has no interface number 1 [ 627.220359][T10825] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 627.324117][ T8449] usb 3-1: USB disconnect, device number 24 [ 627.428121][T10825] usb 5-1: string descriptor 0 read error: -22 [ 627.435664][T10825] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 627.445667][T10825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:42:14 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7fffffff) [ 627.659772][T10825] usb 5-1: config 0 descriptor?? 23:42:14 executing program 2: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/111}, 0x77, 0x1, 0x2800) r0 = msgget(0x3, 0x4) msgrcv(r0, &(0x7f0000000080)={0x0, ""/25}, 0x21, 0x3, 0x1800) r1 = msgget(0x3, 0x20) msgrcv(0xffffffffffffffff, &(0x7f00000000c0)={0x0, ""/98}, 0x6a, 0x1, 0x2800) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r2, &(0x7f0000000140), 0x18) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7f, 0x0, '\x00', 0x7, 0x7}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f00000005c0)={{&(0x7f0000000540)={'GENERAL\x00', {}, {&(0x7f00000004c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0xa7c3}, {&(0x7f0000000340)=@adf_dec={@format={'Cy', '2', 'BankNumber\x00'}, {0xff}}}}}}}}}, 0x3c}) msgrcv(r1, &(0x7f0000000600)={0x0, ""/169}, 0xb1, 0x1, 0x1800) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000b00)={{&(0x7f0000000a80)={'KERNEL\x00', {&(0x7f00000007c0)=@adf_hex={@format={'Cy', '0', 'BankNumber\x00'}, {}, {&(0x7f0000000700)=@adf_dec={@normal='NumberCyInstances\x00', {0x100000000}}}}}, {&(0x7f0000000a00)={'Accelerator\x00', {&(0x7f0000000940)=@adf_dec={@normal='NumberCyInstances\x00', {}, {&(0x7f0000000880)=@adf_hex={@format={'Dc', '0', 'RingSymTx\x00'}, {0x4}}}}}}}}}}) r3 = syz_usb_connect$cdc_ncm(0x6, 0x71, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x9, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "dad613"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3ff, 0x20, 0x8}, {0x6, 0x24, 0x1a, 0x1000, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x90, 0x98, 0xa}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x2, 0x40, 0x4, 0x40, 0xce}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x414}}, {0x8c, &(0x7f0000000cc0)=@string={0x8c, 0x3, "e9eefcd0995ada0ecd153392c0cfd88cf640ad100c93c7a38155b0356ea99822673f0ae8041202ad83ea0089026f951f3ccfcaff3045f0ee645b7827df7ebdef8a97be4d58537424da3c1546d8ce397a5667c8bca05098cd8ab2dabf857c7bf1613e5ed456d372fbc61423570dd0ac24e978a8ba3094f5d7eaa6c362fdf5b14510968bcc6d2c71597b60"}}, {0xf, &(0x7f0000000d80)=@string={0xf, 0x3, "e07b8888ba9fe83ebc6acfe16b"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000fc0)={0x14, &(0x7f0000000e80)={0x20, 0xf, 0xc6, {0xc6, 0xd, "41bd957d50e8835d74157748e83ae0473d258feed6bebb21d4ef2d53d7f3430fd6d71b37f23188fe0a525871e1ab695e72a3858794a14ffa8e8e01e6d9fc25d08eb3c995351f686943ac1984b8ceef21c61ab435e4d7bfe174cb7e7ae18ed1d9743ae4139b5cc3350c8b152e34c1236adaa85f6ec494bbec015d7db412c18883dbb45df71881273e15d6502e903941605862a4362b7c160f744ab672c121b6c14aee7f4f910f6e38a2d5f79461ecdbf6b5b1a577139a78931916c4e89595fa0a14ab5b37"}}, &(0x7f0000000f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x44, &(0x7f0000001000)={0x20, 0xf, 0x6, "29dae59c943d"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x80, 0x1c, {0x6, 0x9, 0xf7b, 0x9, 0xfc05, 0x2, 0x101, 0x5, 0x1, 0x7fff, 0x5}}, &(0x7f0000001100)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f0000001140)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001180)={0x20, 0x87, 0x2, 0x700}, &(0x7f00000011c0)={0x20, 0x89, 0x2}}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xb018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xdb, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0xffff, 0x1, 0x1, {0x22, 0x605}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe3, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x110, 0x4, 0x80, 0x5, 0x40, 0xff}, 0x1c, &(0x7f0000001380)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "82fb165fad2e2d7906d93d9af7fba340"}, @ptm_cap={0x3}]}, 0x6, [{0xd8, &(0x7f00000013c0)=@string={0xd8, 0x3, "f1e1649876c15c1a28cc60c2e92c7650485f23370699189dfb78a8b2bf6c932d1a3d1fe7bdaa1195e1a0c552276d0a0905232f112c4363a06cac51dfc79a384fc08b81e8b57246e1fb24bcb4884c64e665125cd6b1618224ae3bfadfac26bb1c1aec00e59f12033d055f859a72e51250ba276fa57e8fa72fbaa97055a38369531b34cc10b1bc90720361afa32e3297668b003898a828faaebb1ea896aff879d790eaea19bc88b0d143ba654cecb0235ab37a0f7160497726127c4d5133a5012bb3d9615e0a4c6d38bd72bc59c288f02077b63bc19355"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0x46, &(0x7f0000001540)=@string={0x46, 0x3, "d148841e1206b6958c7826c3f6be4008debe1516d2ea7f9c6971a3e1beda2f35874b570f0ba9b837201a9b8cb67cdb400d0560789a2f4ea9b46ce27c4f30b2dcd32909f5"}}, {0x7e, &(0x7f00000015c0)=@string={0x7e, 0x3, "ef8b3047e5cc31e76b0e87cac624521c0a581763aad38e87f67c9c19bb685fa95bdda1769448f2e6614285607038ac864d32491484dd3946b27d8ebfb957abdd28ec8c47c8eb95b683d13bdd723a2da0037b6b2fababe5dc38b1352a46b51e65e62e2b8334bec887dbdff6b7f83dbf8e8b6f80111bc284dd36b81f65"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x444}}]}) [ 627.903374][ T4685] usb 5-1: USB disconnect, device number 104 [ 628.047297][T16782] new mount options do not match the existing superblock, will be ignored 23:42:15 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 23:42:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000001c0)) 23:42:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0x0, 0xc]}}]}}]}, 0x8c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x31731add) 23:42:15 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7fffffff) 23:42:15 executing program 4: syz_usb_connect(0x0, 0x6f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x2, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x8, 0x10, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x3f, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 628.767061][T10825] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 629.008387][T10825] usb 3-1: Using ep0 maxpacket: 8 23:42:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x20000, 0x9, 0x4, 0x31, 0x7}}, 0x50) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) [ 629.221414][T10825] usb 3-1: config 1 interface 0 altsetting 219 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 629.233583][T10825] usb 3-1: config 1 interface 0 altsetting 219 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 629.247653][T10825] usb 3-1: config 1 interface 0 has no altsetting 0 23:42:16 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0xfffffffffffffffc) 23:42:16 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7fffffff) [ 629.559770][T10825] usb 3-1: New USB device found, idVendor=046d, idProduct=b018, bcdDevice= 0.40 [ 629.572478][T10825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.583303][T10825] usb 3-1: Product: ъ [ 629.591383][T10825] usb 3-1: Manufacturer: ࠊ [ 629.598940][T10825] usb 3-1: SerialNumber: 䣑Ẅؒ閶碌쌦뻶ࡀ뻞ᘕ鱿煩㔯䮇བྷꤋ㞸ᨠ貛粶䃛ԍ硠⾚ꥎ沴糢く⧓ [ 630.157183][T10372] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 630.537835][T10825] usbhid 3-1:1.0: can't add hid device: -71 [ 630.544599][T10825] usbhid: probe of 3-1:1.0 failed with error -71 [ 630.569158][T10372] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 630.578762][T10372] usb 5-1: config 0 has no interface number 1 [ 630.585989][T10372] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 630.727846][T10825] usb 3-1: USB disconnect, device number 25 [ 630.826267][T10372] usb 5-1: string descriptor 0 read error: -22 [ 630.834665][T10372] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 630.847277][T10372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:42:18 executing program 5: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) 23:42:18 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x20, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x90}]}]}, 0x20}}, 0x0) 23:42:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x20000, 0x9, 0x4, 0x31, 0x7}}, 0x50) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) [ 631.263005][T10372] usb 5-1: config 0 descriptor?? [ 631.597760][T10372] usb 5-1: USB disconnect, device number 105 23:42:18 executing program 2: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/111}, 0x77, 0x1, 0x2800) r0 = msgget(0x3, 0x4) msgrcv(r0, &(0x7f0000000080)={0x0, ""/25}, 0x21, 0x3, 0x1800) r1 = msgget(0x3, 0x20) msgrcv(0xffffffffffffffff, &(0x7f00000000c0)={0x0, ""/98}, 0x6a, 0x1, 0x2800) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r2, &(0x7f0000000140), 0x18) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7f, 0x0, '\x00', 0x7, 0x7}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f00000005c0)={{&(0x7f0000000540)={'GENERAL\x00', {}, {&(0x7f00000004c0)={'Accelerator\x00', {&(0x7f0000000400)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0xa7c3}, {&(0x7f0000000340)=@adf_dec={@format={'Cy', '2', 'BankNumber\x00'}, {0xff}}}}}}}}}, 0x3c}) msgrcv(r1, &(0x7f0000000600)={0x0, ""/169}, 0xb1, 0x1, 0x1800) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000b00)={{&(0x7f0000000a80)={'KERNEL\x00', {&(0x7f00000007c0)=@adf_hex={@format={'Cy', '0', 'BankNumber\x00'}, {}, {&(0x7f0000000700)=@adf_dec={@normal='NumberCyInstances\x00', {0x100000000}}}}}, {&(0x7f0000000a00)={'Accelerator\x00', {&(0x7f0000000940)=@adf_dec={@normal='NumberCyInstances\x00', {}, {&(0x7f0000000880)=@adf_hex={@format={'Dc', '0', 'RingSymTx\x00'}, {0x4}}}}}}}}}}) r3 = syz_usb_connect$cdc_ncm(0x6, 0x71, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x9, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "dad613"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3ff, 0x20, 0x8}, {0x6, 0x24, 0x1a, 0x1000, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x6, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x90, 0x98, 0xa}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x2, 0x40, 0x4, 0x40, 0xce}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x414}}, {0x8c, &(0x7f0000000cc0)=@string={0x8c, 0x3, "e9eefcd0995ada0ecd153392c0cfd88cf640ad100c93c7a38155b0356ea99822673f0ae8041202ad83ea0089026f951f3ccfcaff3045f0ee645b7827df7ebdef8a97be4d58537424da3c1546d8ce397a5667c8bca05098cd8ab2dabf857c7bf1613e5ed456d372fbc61423570dd0ac24e978a8ba3094f5d7eaa6c362fdf5b14510968bcc6d2c71597b60"}}, {0xf, &(0x7f0000000d80)=@string={0xf, 0x3, "e07b8888ba9fe83ebc6acfe16b"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000fc0)={0x14, &(0x7f0000000e80)={0x20, 0xf, 0xc6, {0xc6, 0xd, "41bd957d50e8835d74157748e83ae0473d258feed6bebb21d4ef2d53d7f3430fd6d71b37f23188fe0a525871e1ab695e72a3858794a14ffa8e8e01e6d9fc25d08eb3c995351f686943ac1984b8ceef21c61ab435e4d7bfe174cb7e7ae18ed1d9743ae4139b5cc3350c8b152e34c1236adaa85f6ec494bbec015d7db412c18883dbb45df71881273e15d6502e903941605862a4362b7c160f744ab672c121b6c14aee7f4f910f6e38a2d5f79461ecdbf6b5b1a577139a78931916c4e89595fa0a14ab5b37"}}, &(0x7f0000000f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x44, &(0x7f0000001000)={0x20, 0xf, 0x6, "29dae59c943d"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000010c0)={0x20, 0x80, 0x1c, {0x6, 0x9, 0xf7b, 0x9, 0xfc05, 0x2, 0x101, 0x5, 0x1, 0x7fff, 0x5}}, &(0x7f0000001100)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f0000001140)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001180)={0x20, 0x87, 0x2, 0x700}, &(0x7f00000011c0)={0x20, 0x89, 0x2}}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xb018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xdb, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0xffff, 0x1, 0x1, {0x22, 0x605}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe3, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x110, 0x4, 0x80, 0x5, 0x40, 0xff}, 0x1c, &(0x7f0000001380)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "82fb165fad2e2d7906d93d9af7fba340"}, @ptm_cap={0x3}]}, 0x6, [{0xd8, &(0x7f00000013c0)=@string={0xd8, 0x3, "f1e1649876c15c1a28cc60c2e92c7650485f23370699189dfb78a8b2bf6c932d1a3d1fe7bdaa1195e1a0c552276d0a0905232f112c4363a06cac51dfc79a384fc08b81e8b57246e1fb24bcb4884c64e665125cd6b1618224ae3bfadfac26bb1c1aec00e59f12033d055f859a72e51250ba276fa57e8fa72fbaa97055a38369531b34cc10b1bc90720361afa32e3297668b003898a828faaebb1ea896aff879d790eaea19bc88b0d143ba654cecb0235ab37a0f7160497726127c4d5133a5012bb3d9615e0a4c6d38bd72bc59c288f02077b63bc19355"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0x46, &(0x7f0000001540)=@string={0x46, 0x3, "d148841e1206b6958c7826c3f6be4008debe1516d2ea7f9c6971a3e1beda2f35874b570f0ba9b837201a9b8cb67cdb400d0560789a2f4ea9b46ce27c4f30b2dcd32909f5"}}, {0x7e, &(0x7f00000015c0)=@string={0x7e, 0x3, "ef8b3047e5cc31e76b0e87cac624521c0a581763aad38e87f67c9c19bb685fa95bdda1769448f2e6614285607038ac864d32491484dd3946b27d8ebfb957abdd28ec8c47c8eb95b683d13bdd723a2da0037b6b2fababe5dc38b1352a46b51e65e62e2b8334bec887dbdff6b7f83dbf8e8b6f80111bc284dd36b81f65"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x444}}]}) 23:42:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x20000, 0x9, 0x4, 0x31, 0x7}}, 0x50) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) 23:42:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002780)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000) 23:42:18 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x28, 0x23, 0x0, 0x0) [ 631.894189][ T35] audit: type=1800 audit(1621294939.031:34): pid=16845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=13907 res=0 errno=0 23:42:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x20000, 0x9, 0x4, 0x31, 0x7}}, 0x50) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) [ 632.652976][ T3129] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.660228][ T3129] ieee802154 phy1 wpan1: encryption failed: -22 23:42:19 executing program 4: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x8, 0x10, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "1f04b790af727d4928ef328738bd506b4451fb38e5fb211d9d23eb2b50ea4f87b6859b9cf9c2c8b1a1531eb01ee461f7191a37368dafa7b6848bb0d09aace155ea91b9f431c89b65643da09a7e700ad446d0f7217901dc6d2a5cde32875d90f7d200536fc8b82552fef9fa41823752341977ee183ac9479dac22756b91709752bddaa553e141a490d15ba533eb01f654b65e8355c45a744f9c2c83bce73ec8751826bf9aeafa4ee787e42fb3ceb504d9173a2ccccc5729eac2b279bef7935065e83c16de43c31c1cc6bcf2e47bffd7e55e56d0d33b5d7e702b55eec6c7312957d8c2a1cead5bca9ba9f8d8550e124876ca5b8a041543e01ecae7ccb94dd1cc"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) 23:42:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) [ 632.948475][ T8449] usb 3-1: new high-speed USB device number 26 using dummy_hcd 23:42:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x25}, {0x44}, {0x6}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 633.207158][ T8449] usb 3-1: Using ep0 maxpacket: 8 23:42:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x20000, 0x9, 0x4, 0x31, 0x7}}, 0x50) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) [ 633.411608][ T8449] usb 3-1: config 1 interface 0 altsetting 219 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 633.425525][ T8449] usb 3-1: config 1 interface 0 altsetting 219 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 633.438642][ T8449] usb 3-1: config 1 interface 0 has no altsetting 0 [ 633.532802][ T35] audit: type=1800 audit(1621294940.671:35): pid=16864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=13907 res=0 errno=0 [ 633.660606][ T35] audit: type=1326 audit(1621294940.721:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16868 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffe623dc9fd code=0x0 [ 633.687457][T10372] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 633.701703][ T8449] usb 3-1: New USB device found, idVendor=046d, idProduct=b018, bcdDevice= 0.40 [ 633.711982][ T8449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.720940][ T8449] usb 3-1: Product: ъ [ 633.727273][ T8449] usb 3-1: Manufacturer: ࠊ [ 633.732206][ T8449] usb 3-1: SerialNumber: 䣑Ẅؒ閶碌쌦뻶ࡀ뻞ᘕ鱿煩㔯䮇བྷꤋ㞸ᨠ貛粶䃛ԍ硠⾚ꥎ沴糢く⧓ 23:42:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x20000, 0x9, 0x4, 0x31, 0x7}}, 0x50) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) 23:42:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x1b0, 0x280, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'wg0\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 634.118466][T10372] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 634.128171][T10372] usb 5-1: config 0 has no interface number 1 [ 634.140168][T10372] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 634.287876][T10372] usb 5-1: string descriptor 0 read error: -22 [ 634.295675][T10372] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 634.307018][T10372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.352979][ T35] audit: type=1326 audit(1621294941.491:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16868 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffe623dc9fd code=0x0 [ 634.477650][ T8449] usbhid 3-1:1.0: can't add hid device: -71 [ 634.484321][ T8449] usbhid: probe of 3-1:1.0 failed with error -71 [ 634.561867][T10372] usb 5-1: config 0 descriptor?? [ 634.571792][ T35] audit: type=1800 audit(1621294941.711:38): pid=16878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=13911 res=0 errno=0 [ 634.622962][ T8449] usb 3-1: USB disconnect, device number 26 [ 634.934889][T10372] usb 5-1: USB disconnect, device number 106 23:42:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1, 0x0, 0x6, 0x2, 0x0, 0x3, 0xa0008, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x1}, 0x820, 0xce, 0x0, 0x7, 0x6, 0x0, 0x101, 0x0, 0x4, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040), 0x0) 23:42:22 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000440)={0xa0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 23:42:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) rt_sigaction(0xd, &(0x7f0000000000)={&(0x7f00000000c0)="c42271bba30945c4930f72d1060f38013b36c7f80b000000c4417d70b8930000003cc483b121e700c442f9aaf0c4c110562e660f38dc1a90", 0xc8000004, 0x0}, 0x0, 0x8, &(0x7f0000000400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) write(r1, 0x0, 0x0) 23:42:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x20000, 0x9, 0x4, 0x31, 0x7}}, 0x50) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) 23:42:22 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x0, 0x7, 0x4d, 0xd2}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) 23:42:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1440c}}, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x28a47, 0x0) dup3(r0, r1, 0x0) 23:42:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x12d, &(0x7f0000000440)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 23:42:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x3, 0x4, @local}}}]}]}, 0x58}}, 0x0) [ 636.358569][ T35] audit: type=1800 audit(1621294943.491:39): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="fuse" ino=1 res=0 errno=0 [ 636.366812][ C1] ------------[ cut here ]------------ [ 636.366812][ C1] WARNING: CPU: 1 PID: 35 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x1eb/0x700 [ 636.366812][ C1] Modules linked in: [ 636.366812][ C1] CPU: 1 PID: 35 Comm: kauditd Not tainted 5.12.0-rc6-syzkaller #0 [ 636.366812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.366812][ C1] RIP: 0010:vkms_vblank_simulate+0x1eb/0x700 [ 636.366812][ C1] Code: 22 fb e9 b2 fe ff ff 8b 3a e8 71 77 22 fb e9 bf fe ff ff 44 89 e7 e8 64 77 22 fb 49 83 fe 01 0f 84 6e ff ff ff e8 65 86 9f fa <0f> 0b e9 67 ff ff ff 41 8b bf a8 0f 00 00 e8 42 77 22 fb 84 db 75 [ 636.366812][ C1] RSP: 0018:ffff88813fd05cb0 EFLAGS: 00010046 [ 636.366812][ C1] RAX: ffffffff871cad8b RBX: 0000000000000000 RCX: ffff888102509f40 [ 636.366812][ C1] RDX: 0000000080010000 RSI: 0000000000000002 RDI: 0000000000000001 [ 636.366812][ C1] RBP: ffff88813fd05d30 R08: ffffffff871cacd2 R09: ffff88813fffa000 [ 636.366812][ C1] R10: 000000004d1d8650 R11: ffff88813fd05ff8 R12: 0000000000000000 [ 636.366812][ C1] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88813fd27b00 [ 636.366812][ C1] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 636.366812][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.366812][ C1] CR2: 00007fa0029fc718 CR3: 000000012bbeb000 CR4: 00000000001526e0 [ 636.366812][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.366812][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 636.366812][ C1] Call Trace: [ 636.366812][ C1] [ 636.366812][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 636.366812][ C1] ? vkms_get_vblank_timestamp+0x3d0/0x3d0 [ 636.366812][ C1] __run_hrtimer+0x48b/0xd20 [ 636.366812][ C1] hrtimer_interrupt+0x6e2/0x1b50 [ 636.366812][ C1] ? kmsan_get_metadata+0x116/0x180 [ 636.366812][ C1] ? hrtimer_init+0x570/0x570 [ 636.366812][ C1] __sysvec_apic_timer_interrupt+0xfd/0x470 [ 636.366812][ C1] sysvec_apic_timer_interrupt+0xc1/0xf0 [ 636.366812][ C1] [ 636.366812][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 636.366812][ C1] RIP: 0010:console_unlock+0x1929/0x1d70 [ 636.366812][ C1] Code: db 74 0c 4d 85 ff 75 19 e8 64 45 2d 00 eb 18 8b 7c 24 64 e8 49 36 b0 00 4d 85 ff 74 eb 0f 1f 40 00 e8 4b 45 2d 00 fb 44 89 f0 <34> 01 22 44 24 2f 44 89 f3 0a 5c 24 1f 3c 01 74 10 f6 c3 01 74 21 [ 636.366812][ C1] RSP: 0018:ffff8881024ab890 EFLAGS: 00000293 [ 636.366812][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888102509f40 [ 636.366812][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 636.366812][ C1] RBP: ffff8881024aba08 R08: ffffffff818eee73 R09: ffff88813fffa000 [ 636.366812][ C1] R10: 000000006d574000 R11: 00000000ffffffff R12: 0000000000000000 [ 636.366812][ C1] R13: ffff88810250a9c8 R14: 0000000000000000 R15: 0000000000000200 [ 636.366812][ C1] ? console_unlock+0x18f3/0x1d70 [ 636.366812][ C1] ? console_trylock+0x288/0x2c0 [ 636.366812][ C1] vprintk_emit+0x3cd/0x8b0 [ 636.366812][ C1] vprintk_default+0x86/0xa0 [ 636.366812][ C1] vprintk_func+0x2ed/0x2f0 [ 636.366812][ C1] printk+0x180/0x1cd [ 636.366812][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 636.366812][ C1] kauditd_hold_skb+0x30b/0x380 [ 636.366812][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 636.366812][ C1] ? kauditd_send_queue+0x840/0x840 [ 636.366812][ C1] kauditd_send_queue+0x1f4/0x840 [ 636.366812][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 636.366812][ C1] ? kmsan_get_metadata+0x116/0x180 [ 636.366812][ C1] ? kauditd_send_queue+0x840/0x840 [ 636.366812][ C1] kauditd_thread+0xbcc/0x1260 [ 636.366812][ C1] ? kmsan_get_metadata+0x116/0x180 [ 636.366812][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 636.366812][ C1] ? init_wait_entry+0x190/0x190 [ 636.366812][ C1] kthread+0x521/0x560 [ 636.366812][ C1] ? audit_log+0x310/0x310 [ 636.366812][ C1] ? kthread_blkcg+0x110/0x110 [ 636.366812][ C1] ret_from_fork+0x1f/0x30 [ 636.366812][ C1] ---[ end trace ddbc873d75eb72a4 ]--- [ 636.450816][ C1] ------------[ cut here ]------------ [ 636.450816][ C1] WARNING: CPU: 1 PID: 35 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x1eb/0x700 [ 636.450816][ C1] Modules linked in: [ 636.450816][ C1] CPU: 1 PID: 35 Comm: kauditd Tainted: G W 5.12.0-rc6-syzkaller #0 [ 636.450816][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.450816][ C1] RIP: 0010:vkms_vblank_simulate+0x1eb/0x700 [ 636.450816][ C1] Code: 22 fb e9 b2 fe ff ff 8b 3a e8 71 77 22 fb e9 bf fe ff ff 44 89 e7 e8 64 77 22 fb 49 83 fe 01 0f 84 6e ff ff ff e8 65 86 9f fa <0f> 0b e9 67 ff ff ff 41 8b bf a8 0f 00 00 e8 42 77 22 fb 84 db 75 [ 636.450816][ C1] RSP: 0018:ffff88813fd05cb0 EFLAGS: 00010046 [ 636.450816][ C1] RAX: ffffffff871cad8b RBX: 0000000000000000 RCX: ffff888102509f40 [ 636.450816][ C1] RDX: 0000000000010000 RSI: 0000000000000002 RDI: 0000000000000001 [ 636.450816][ C1] RBP: ffff88813fd05d30 R08: ffffffff871cacd2 R09: ffff88813fffa000 [ 636.450816][ C1] R10: 000000004d1d8650 R11: ffff88813fd05ff8 R12: 0000000000000000 [ 636.450816][ C1] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88813fd27b00 [ 636.450816][ C1] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 636.450816][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.450816][ C1] CR2: 00007fa0029fc718 CR3: 000000012bbeb000 CR4: 00000000001526e0 [ 636.450816][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.450816][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 636.450816][ C1] Call Trace: [ 636.450816][ C1] [ 636.450816][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 636.450816][ C1] ? vkms_get_vblank_timestamp+0x3d0/0x3d0 [ 636.450816][ C1] __run_hrtimer+0x48b/0xd20 [ 636.450816][ C1] hrtimer_interrupt+0x6e2/0x1b50 [ 636.450816][ C1] ? hrtimer_init+0x570/0x570 [ 636.450816][ C1] __sysvec_apic_timer_interrupt+0xfd/0x470 [ 636.450816][ C1] sysvec_apic_timer_interrupt+0xc1/0xf0 [ 636.450816][ C1] [ 636.450816][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 636.450816][ C1] RIP: 0010:console_unlock+0x1929/0x1d70 [ 636.450816][ C1] Code: db 74 0c 4d 85 ff 75 19 e8 64 45 2d 00 eb 18 8b 7c 24 64 e8 49 36 b0 00 4d 85 ff 74 eb 0f 1f 40 00 e8 4b 45 2d 00 fb 44 89 f0 <34> 01 22 44 24 2f 44 89 f3 0a 5c 24 1f 3c 01 74 10 f6 c3 01 74 21 [ 636.450816][ C1] RSP: 0018:ffff8881024ab890 EFLAGS: 00000293 [ 636.450816][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888102509f40 [ 636.450816][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 636.450816][ C1] RBP: ffff8881024aba08 R08: ffffffff818eee73 R09: ffff88813fffa000 [ 636.450816][ C1] R10: 000000006d574000 R11: 00000000ffffffff R12: 0000000000000000 [ 636.450816][ C1] R13: ffff88810250a9c8 R14: 0000000000000000 R15: 0000000000000200 [ 636.450816][ C1] ? console_unlock+0x18f3/0x1d70 [ 636.450816][ C1] ? console_trylock+0x288/0x2c0 [ 636.450816][ C1] vprintk_emit+0x3cd/0x8b0 [ 636.450816][ C1] vprintk_default+0x86/0xa0 [ 636.450816][ C1] vprintk_func+0x2ed/0x2f0 [ 636.450816][ C1] printk+0x180/0x1cd [ 636.450816][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 636.450816][ C1] kauditd_hold_skb+0x30b/0x380 [ 636.450816][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 636.450816][ C1] ? kauditd_send_queue+0x840/0x840 [ 636.450816][ C1] kauditd_send_queue+0x1f4/0x840 [ 636.450816][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 636.450816][ C1] ? kmsan_get_metadata+0x116/0x180 [ 636.450816][ C1] ? kauditd_send_queue+0x840/0x840 [ 636.450816][ C1] kauditd_thread+0xbcc/0x1260 [ 636.450816][ C1] ? kmsan_get_metadata+0x116/0x180 [ 636.450816][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 636.450816][ C1] ? init_wait_entry+0x190/0x190 [ 636.450816][ C1] kthread+0x521/0x560 [ 636.450816][ C1] ? audit_log+0x310/0x310 [ 636.450816][ C1] ? kthread_blkcg+0x110/0x110 [ 636.450816][ C1] ret_from_fork+0x1f/0x30 [ 636.450816][ C1] ---[ end trace ddbc873d75eb72a5 ]--- [ 636.649379][ C1] ------------[ cut here ]------------ [ 636.649379][ C1] WARNING: CPU: 1 PID: 35 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x1eb/0x700 [ 636.649379][ C1] Modules linked in: [ 636.649379][ C1] CPU: 1 PID: 35 Comm: kauditd Tainted: G W 5.12.0-rc6-syzkaller #0 [ 636.649379][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.649379][ C1] RIP: 0010:vkms_vblank_simulate+0x1eb/0x700 [ 636.649379][ C1] Code: 22 fb e9 b2 fe ff ff 8b 3a e8 71 77 22 fb e9 bf fe ff ff 44 89 e7 e8 64 77 22 fb 49 83 fe 01 0f 84 6e ff ff ff e8 65 86 9f fa <0f> 0b e9 67 ff ff ff 41 8b bf a8 0f 00 00 e8 42 77 22 fb 84 db 75 [ 636.649379][ C1] RSP: 0018:ffff88813fd05cb0 EFLAGS: 00010046 [ 636.649379][ C1] RAX: ffffffff871cad8b RBX: 0000000000000000 RCX: ffff888102509f40 [ 636.649379][ C1] RDX: 0000000000010000 RSI: 0000000000000002 RDI: 0000000000000001 [ 636.649379][ C1] RBP: ffff88813fd05d30 R08: ffffffff871cacd2 R09: ffff88813fffa000 [ 636.649379][ C1] R10: 000000004d1d8650 R11: ffff88813fd05ff8 R12: 0000000000000000 [ 636.649379][ C1] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88813fd27b00 [ 636.649379][ C1] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 636.649379][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.649379][ C1] CR2: 00007fa0029fc718 CR3: 000000012bbeb000 CR4: 00000000001526e0 [ 636.649379][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 636.649379][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 636.649379][ C1] Call Trace: [ 636.649379][ C1] [ 636.649379][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 636.649379][ C1] ? vkms_get_vblank_timestamp+0x3d0/0x3d0 [ 636.649379][ C1] __run_hrtimer+0x48b/0xd20 [ 636.649379][ C1] hrtimer_interrupt+0x6e2/0x1b50 [ 636.649379][ C1] ? hrtimer_init+0x570/0x570 [ 636.649379][ C1] __sysvec_apic_timer_interrupt+0xfd/0x470 [ 636.649379][ C1] sysvec_apic_timer_interrupt+0xc1/0xf0 [ 636.649379][ C1] [ 636.649379][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 636.649379][ C1] RIP: 0010:console_unlock+0x1929/0x1d70 [ 636.649379][ C1] Code: db 74 0c 4d 85 ff 75 19 e8 64 45 2d 00 eb 18 8b 7c 24 64 e8 49 36 b0 00 4d 85 ff 74 eb 0f 1f 40 00 e8 4b 45 2d 00 fb 44 89 f0 <34> 01 22 44 24 2f 44 89 f3 0a 5c 24 1f 3c 01 74 10 f6 c3 01 74 21 [ 636.649379][ C1] RSP: 0018:ffff8881024ab890 EFLAGS: 00000293 [ 636.649379][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888102509f40 [ 636.649379][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 636.649379][ C1] RBP: ffff8881024aba08 R08: ffffffff818eee73 R09: ffff88813fffa000 [ 636.649379][ C1] R10: 000000006d574000 R11: 00000000ffffffff R12: 0000000000000000 [ 636.649379][ C1] R13: ffff88810250a9c8 R14: 0000000000000000 R15: 0000000000000200 [ 636.649379][ C1] ? console_unlock+0x18f3/0x1d70 [ 636.649379][ C1] ? console_trylock+0x288/0x2c0 [ 636.649379][ C1] vprintk_emit+0x3cd/0x8b0 [ 636.649379][ C1] vprintk_default+0x86/0xa0 [ 636.649379][ C1] vprintk_func+0x2ed/0x2f0 [ 636.649379][ C1] printk+0x180/0x1cd [ 636.649379][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 636.649379][ C1] kauditd_hold_skb+0x30b/0x380 [ 636.649379][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 636.649379][ C1] ? kauditd_send_queue+0x840/0x840 [ 636.649379][ C1] kauditd_send_queue+0x1f4/0x840 [ 636.649379][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 636.649379][ C1] ? kmsan_get_metadata+0x116/0x180 [ 636.649379][ C1] ? kauditd_send_queue+0x840/0x840 [ 636.649379][ C1] kauditd_thread+0xbcc/0x1260 [ 636.649379][ C1] ? kmsan_get_metadata+0x116/0x180 [ 636.649379][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 636.649379][ C1] ? init_wait_entry+0x190/0x190 [ 636.649379][ C1] kthread+0x521/0x560 [ 636.649379][ C1] ? audit_log+0x310/0x310 [ 636.649379][ C1] ? kthread_blkcg+0x110/0x110 [ 636.649379][ C1] ret_from_fork+0x1f/0x30 [ 636.649379][ C1] ---[ end trace ddbc873d75eb72a6 ]--- [ 637.100698][ C1] ------------[ cut here ]------------ [ 637.100698][ C1] WARNING: CPU: 1 PID: 35 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x1eb/0x700 [ 637.100698][ C1] Modules linked in: [ 637.100698][ C1] CPU: 1 PID: 35 Comm: kauditd Tainted: G W 5.12.0-rc6-syzkaller #0 [ 637.100698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.100698][ C1] RIP: 0010:vkms_vblank_simulate+0x1eb/0x700 [ 637.100698][ C1] Code: 22 fb e9 b2 fe ff ff 8b 3a e8 71 77 22 fb e9 bf fe ff ff 44 89 e7 e8 64 77 22 fb 49 83 fe 01 0f 84 6e ff ff ff e8 65 86 9f fa <0f> 0b e9 67 ff ff ff 41 8b bf a8 0f 00 00 e8 42 77 22 fb 84 db 75 [ 637.100698][ C1] RSP: 0018:ffff88813fd05cb0 EFLAGS: 00010046 [ 637.100698][ C1] RAX: ffffffff871cad8b RBX: 0000000000000000 RCX: ffff888102509f40 [ 637.100698][ C1] RDX: 0000000000010000 RSI: 0000000000000002 RDI: 0000000000000001 [ 637.100698][ C1] RBP: ffff88813fd05d30 R08: ffffffff871cacd2 R09: ffff88813fffa000 [ 637.100698][ C1] R10: 000000004d1d8650 R11: ffff88813fd05ff8 R12: 0000000000000000 [ 637.100698][ C1] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88813fd27b00 [ 637.100698][ C1] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 637.100698][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.100698][ C1] CR2: 00007fa0029fc718 CR3: 000000012bbeb000 CR4: 00000000001526e0 [ 637.100698][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 637.100698][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 637.100698][ C1] Call Trace: [ 637.100698][ C1] [ 637.100698][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 637.100698][ C1] ? vkms_get_vblank_timestamp+0x3d0/0x3d0 [ 637.100698][ C1] __run_hrtimer+0x48b/0xd20 [ 637.100698][ C1] hrtimer_interrupt+0x6e2/0x1b50 [ 637.100698][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 637.100698][ C1] ? hrtimer_init+0x570/0x570 [ 637.100698][ C1] __sysvec_apic_timer_interrupt+0xfd/0x470 [ 637.100698][ C1] sysvec_apic_timer_interrupt+0xc1/0xf0 [ 637.100698][ C1] [ 637.100698][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 637.100698][ C1] RIP: 0010:console_unlock+0x1929/0x1d70 [ 637.100698][ C1] Code: db 74 0c 4d 85 ff 75 19 e8 64 45 2d 00 eb 18 8b 7c 24 64 e8 49 36 b0 00 4d 85 ff 74 eb 0f 1f 40 00 e8 4b 45 2d 00 fb 44 89 f0 <34> 01 22 44 24 2f 44 89 f3 0a 5c 24 1f 3c 01 74 10 f6 c3 01 74 21 [ 637.100698][ C1] RSP: 0018:ffff8881024ab890 EFLAGS: 00000293 [ 637.100698][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888102509f40 [ 637.100698][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 23:42:25 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000000c0)) [ 637.100698][ C1] RBP: ffff8881024aba08 R08: ffffffff818eee73 R09: ffff88813fffa000 [ 637.100698][ C1] R10: 000000006d574000 R11: 00000000ffffffff R12: 0000000000000000 [ 637.100698][ C1] R13: ffff88810250a9c8 R14: 0000000000000000 R15: 0000000000000200 [ 637.100698][ C1] ? console_unlock+0x18f3/0x1d70 [ 637.100698][ C1] ? console_trylock+0x288/0x2c0 [ 637.100698][ C1] vprintk_emit+0x3cd/0x8b0 [ 637.100698][ C1] vprintk_default+0x86/0xa0 [ 637.100698][ C1] vprintk_func+0x2ed/0x2f0 [ 637.100698][ C1] printk+0x180/0x1cd [ 637.100698][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 637.100698][ C1] kauditd_hold_skb+0x30b/0x380 [ 637.100698][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 637.100698][ C1] ? kauditd_send_queue+0x840/0x840 [ 637.100698][ C1] kauditd_send_queue+0x1f4/0x840 [ 637.100698][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 637.100698][ C1] ? kmsan_get_metadata+0x116/0x180 [ 637.100698][ C1] ? kauditd_send_queue+0x840/0x840 [ 637.100698][ C1] kauditd_thread+0xbcc/0x1260 [ 637.100698][ C1] ? kmsan_get_metadata+0x116/0x180 [ 637.100698][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 637.100698][ C1] ? init_wait_entry+0x190/0x190 [ 637.100698][ C1] kthread+0x521/0x560 [ 637.100698][ C1] ? audit_log+0x310/0x310 [ 637.100698][ C1] ? kthread_blkcg+0x110/0x110 [ 637.100698][ C1] ret_from_fork+0x1f/0x30 [ 637.100698][ C1] ---[ end trace ddbc873d75eb72a7 ]--- [ 637.546990][ C1] ------------[ cut here ]------------ [ 637.546990][ C1] WARNING: CPU: 1 PID: 35 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x1eb/0x700 [ 637.546990][ C1] Modules linked in: [ 637.546990][ C1] CPU: 1 PID: 35 Comm: kauditd Tainted: G W 5.12.0-rc6-syzkaller #0 [ 637.546990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.546990][ C1] RIP: 0010:vkms_vblank_simulate+0x1eb/0x700 [ 637.546990][ C1] Code: 22 fb e9 b2 fe ff ff 8b 3a e8 71 77 22 fb e9 bf fe ff ff 44 89 e7 e8 64 77 22 fb 49 83 fe 01 0f 84 6e ff ff ff e8 65 86 9f fa <0f> 0b e9 67 ff ff ff 41 8b bf a8 0f 00 00 e8 42 77 22 fb 84 db 75 [ 637.546990][ C1] RSP: 0018:ffff88813fd05cb0 EFLAGS: 00010046 [ 637.546990][ C1] RAX: ffffffff871cad8b RBX: 0000000000000000 RCX: ffff888102509f40 [ 637.546990][ C1] RDX: 0000000000010000 RSI: 0000000000000002 RDI: 0000000000000001 [ 637.546990][ C1] RBP: ffff88813fd05d30 R08: ffffffff871cacd2 R09: ffff88813fffa000 [ 637.546990][ C1] R10: 000000004d1d8650 R11: ffff88813fd05ff8 R12: 0000000000000000 [ 637.546990][ C1] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88813fd27b00 [ 637.546990][ C1] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 637.546990][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.546990][ C1] CR2: 00007fa0029fc718 CR3: 000000012bbeb000 CR4: 00000000001526e0 [ 637.546990][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 23:42:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 637.546990][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 637.546990][ C1] Call Trace: [ 637.546990][ C1] [ 637.546990][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 637.546990][ C1] ? vkms_get_vblank_timestamp+0x3d0/0x3d0 [ 637.546990][ C1] __run_hrtimer+0x48b/0xd20 [ 637.546990][ C1] hrtimer_interrupt+0x6e2/0x1b50 [ 637.546990][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 637.546990][ C1] ? hrtimer_init+0x570/0x570 [ 637.546990][ C1] __sysvec_apic_timer_interrupt+0xfd/0x470 [ 637.546990][ C1] sysvec_apic_timer_interrupt+0xc1/0xf0 [ 637.546990][ C1] [ 637.546990][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 637.546990][ C1] RIP: 0010:console_unlock+0x1929/0x1d70 [ 637.546990][ C1] Code: db 74 0c 4d 85 ff 75 19 e8 64 45 2d 00 eb 18 8b 7c 24 64 e8 49 36 b0 00 4d 85 ff 74 eb 0f 1f 40 00 e8 4b 45 2d 00 fb 44 89 f0 <34> 01 22 44 24 2f 44 89 f3 0a 5c 24 1f 3c 01 74 10 f6 c3 01 74 21 [ 637.546990][ C1] RSP: 0018:ffff8881024ab890 EFLAGS: 00000293 [ 637.546990][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888102509f40 [ 637.546990][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 637.546990][ C1] RBP: ffff8881024aba08 R08: ffffffff818eee73 R09: ffff88813fffa000 [ 637.546990][ C1] R10: 000000006d574000 R11: 00000000ffffffff R12: 0000000000000000 [ 637.546990][ C1] R13: ffff88810250a9c8 R14: 0000000000000000 R15: 0000000000000200 [ 637.546990][ C1] ? console_unlock+0x18f3/0x1d70 [ 637.546990][ C1] ? console_trylock+0x288/0x2c0 [ 637.546990][ C1] vprintk_emit+0x3cd/0x8b0 [ 637.546990][ C1] vprintk_default+0x86/0xa0 [ 637.546990][ C1] vprintk_func+0x2ed/0x2f0 [ 637.546990][ C1] printk+0x180/0x1cd [ 637.546990][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 23:42:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 637.546990][ C1] kauditd_hold_skb+0x30b/0x380 [ 637.546990][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 637.546990][ C1] ? kauditd_send_queue+0x840/0x840 [ 637.546990][ C1] kauditd_send_queue+0x1f4/0x840 [ 637.546990][ C1] ? auditd_conn_free+0x1c0/0x1c0 [ 637.546990][ C1] ? kmsan_get_metadata+0x116/0x180 [ 637.546990][ C1] ? kauditd_send_queue+0x840/0x840 [ 637.546990][ C1] kauditd_thread+0xbcc/0x1260 [ 637.546990][ C1] ? kmsan_get_metadata+0x116/0x180 [ 637.546990][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 637.546990][ C1] ? init_wait_entry+0x190/0x190 [ 637.546990][ C1] kthread+0x521/0x560 [ 637.546990][ C1] ? audit_log+0x310/0x310 [ 637.546990][ C1] ? kthread_blkcg+0x110/0x110 [ 637.546990][ C1] ret_from_fork+0x1f/0x30 [ 637.546990][ C1] ---[ end trace ddbc873d75eb72a8 ]--- [ 637.759682][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 638.137299][ T18] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 638.141454][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 638.547964][ T18] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 638.763995][ T18] usb 5-1: config 0 has no interface number 1 [ 638.770737][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 23:42:26 executing program 2: mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x3, 0x1ff, 0x0) mbind(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x8002, &(0x7f00000000c0)=0x5, 0x3, 0x0) 23:42:26 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x80) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:42:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 23:42:27 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x0, 0x7, 0x4d, 0xd2}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "1f04b790af727d4928ef328738bd506b4451fb38e5fb211d9d23eb2b50ea4f87b6859b9cf9c2c8b1a1531eb01ee461f7191a37368dafa7b6848bb0d09aace155ea91b9f431c89b65643da09a7e700ad446d0f7217901dc6d2a5cde32875d90f7d200536fc8b82552fef9fa41823752341977ee183ac9479dac22756b91709752bddaa553e141a490d15ba533eb01f654b65e8355c45a744f9c2c83bce73ec8751826bf9aeafa4ee787e42fb3ceb504d9173a2ccccc5729eac2b279bef7935065e83c16de43c31c1cc6bcf2e47bffd7e55e56d0d33b5d7e702b55eec6c7312957d8c2a1cead5bca9ba9f8d8550e124876ca5b8a041543e01ecae7ccb94dd1cc"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) 23:42:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 23:42:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) [ 640.735749][ T18] usb 5-1: string descriptor 0 read error: -22 [ 640.745098][ T18] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 640.755454][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:42:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000014000700000000000000000002ff0006"], 0x48}}, 0x0) [ 641.091888][ T18] usb 5-1: config 0 descriptor?? 23:42:28 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x0, 0x0) [ 641.182810][ T18] usb 5-1: can't set config #0, error -71 [ 641.265997][ T18] usb 5-1: USB disconnect, device number 107 23:42:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 641.707076][ T18] usb 5-1: new high-speed USB device number 108 using dummy_hcd 23:42:28 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 23:42:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x227b, 0xfffffffffffffffc) [ 642.098085][ T18] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 642.108055][ T18] usb 5-1: config 0 has no interface number 1 [ 642.115262][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 642.314877][ T18] usb 5-1: string descriptor 0 read error: -22 [ 642.322130][ T18] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 642.333847][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.577443][ T18] usb 5-1: config 0 descriptor?? [ 642.864781][ T1983] usb 5-1: USB disconnect, device number 108 23:42:31 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 23:42:31 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a04000001000000000301"], 0x1}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x268, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "aa01bc9273e59ad1264c1151212c8c4aa3972b4716ec963816e20ae235910631", "b9b9382af87ce581467825867577bf7d78079be2e994d2accbdeb9db6c349e4b", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8, 0x9}]}}}]}, 0x268}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 23:42:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 23:42:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') lseek(r1, 0x4, 0x0) 23:42:31 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001800010000000000000000000200000000000008000000000600150006000000100016"], 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 23:42:31 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x0, 0x7, 0x4d, 0xd2}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "1f04b790af727d4928ef328738bd506b4451fb38e5fb211d9d23eb2b50ea4f87b6859b9cf9c2c8b1a1531eb01ee461f7191a37368dafa7b6848bb0d09aace155ea91b9f431c89b65643da09a7e700ad446d0f7217901dc6d2a5cde32875d90f7d200536fc8b82552fef9fa41823752341977ee183ac9479dac22756b91709752bddaa553e141a490d15ba533eb01f654b65e8355c45a744f9c2c83bce73ec8751826bf9aeafa4ee787e42fb3ceb504d9173a2ccccc5729eac2b279bef7935065e83c16de43c31c1cc6bcf2e47bffd7e55e56d0d33b5d7e702b55eec6c7312957d8c2a1cead5bca9ba9f8d8550e124876ca5b8a041543e01ecae7ccb94dd1cc"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 644.363081][T17007] netlink: 35877 bytes leftover after parsing attributes in process `syz-executor.2'. [ 644.378330][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 644.409538][ T18] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 644.509358][T17010] netlink: 35877 bytes leftover after parsing attributes in process `syz-executor.2'. 23:42:31 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x7fff, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10008, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[], 0x1000000c8) r5 = syz_open_dev$media(&(0x7f0000000480), 0x81, 0x80c1) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000640), 0x804c1, 0x0) io_submit(r1, 0x6, &(0x7f00000016c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffc, r2, &(0x7f00000000c0)="a6b1a7bdb72ca411f791735d8232784148be403c795dbafd27876ef535163cd055894c1d888a577c6475e7f0ab31e3892b8b5bf2e372b5d48278bcd626af35dcc4f7d7e39f824530baa4", 0x4a, 0xbcfc, 0x0, 0x1, r4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9ed, r0, &(0x7f0000000180), 0x0, 0xd90}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x81d8, r0, &(0x7f0000000280)="64295c27b497a3275392abf64a2f9e77713ef4b8ae2152b7092badc83dbb131213ea80c29996b21c2c59e3a6aea90f5a84c851fcebbe4f66373f56778db17b309f6cb1bb05359eb529b777cd0a8ee683f25c609608783eb7d528c27449a2270a56f1969be1d549213feee8239c2ccdb32046a9949ccf31c5ece3281b469f15b321238e22cdcc464e370b5096d34fbedb201e070e7f751b01b57931e3fa9ad3419f2930087850cca941df3d1dc1a7993beccac83fef87fd12ded3ae2f5c199779a38d0876", 0xc4, 0x7ff, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x80, r0, &(0x7f00000003c0)="7fc2edf5334bd597b438b5e7106f311268dd46b838c00027d5ab40452de818edd1a64b1be16adb482d32ecc0b5436fe6270ee0419fcb3b0939041f8699abc6e09c018ed0ebd69ae1df050b7c765711112a4aea0974873fb4194849ed4c914f", 0x5f, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xfff, r5, &(0x7f00000004c0)="9fe40aa552144a43da4c4c42daf199317e40b12d0be14316033a5fd86b9654a6a94538cab674c100fca908d52c62173f5b1cc7b55b040e5c505895d604d9171c6407a4244bb886a2ce097c69dedce8235fe6ba9c4e188756908092f7af6089effd6cb940c52f618bcd5ddc0246c622e950ef0e230a4927e75481175392d26078f81d405ae2f9f448d0bdc3bccc1881bd39f94d5159813290c8ed46ebf90f9c8a16c313f55eb45c", 0xa7, 0x3, 0x0, 0x1}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x6, 0x20, r6, &(0x7f0000000680), 0x0, 0x6, 0x0, 0x3}]) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 644.778889][ T18] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 644.791221][ T18] usb 5-1: config 0 has no interface number 1 [ 644.798701][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 644.967016][ T18] usb 5-1: string descriptor 0 read error: -22 [ 644.974361][ T18] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 644.984475][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.176722][ T18] usb 5-1: config 0 descriptor?? 23:42:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8007}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x8000000000004, 0x4) creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) 23:42:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_LINK={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1f}]}, 0x54}}, 0x0) 23:42:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) [ 645.431702][ T3086] usb 5-1: USB disconnect, device number 109 [ 645.731878][T17028] IPv4: Oversized IP packet from 127.0.0.1 [ 645.740185][ C1] IPv4: Oversized IP packet from 127.0.0.1 23:42:33 executing program 3: r0 = io_uring_setup(0x2af0, &(0x7f0000001dc0)) r1 = eventfd2(0x0, 0x0) unshare(0x400) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) 23:42:33 executing program 4: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x0, 0x8, 0x10, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 646.555467][T17033] device geneve2 entered promiscuous mode [ 647.027171][ T1983] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 647.457586][ T1983] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 647.469757][ T1983] usb 5-1: config 0 has no interface number 1 [ 647.478058][ T1983] usb 5-1: config 0 interface 205 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 647.491698][ T1983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 23:42:34 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 23:42:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x8201, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000200ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468315f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) 23:42:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce30dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2108d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa28a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0x5000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:42:34 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1}) 23:42:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x5, 0xd9f, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0xffffffff}, &(0x7f0000000040), 0x0, 0x7, 0x1, 0x2, 0x1, 0x20}}], 0x58}, 0x0) [ 647.598203][ T1983] usb 5-1: string descriptor 0 read error: -22 [ 647.605894][ T1983] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 647.617093][ T1983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.793000][T17049] atomic_op ffff88812bb4f928 conn xmit_atomic 0000000000000000 [ 647.832878][ T1983] usb 5-1: config 0 descriptor?? [ 647.895003][T17051] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 648.257883][ T1983] usb 5-1: USB disconnect, device number 110 23:42:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000093000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 23:42:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = dup3(r1, r0, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000002c00)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)="ff", 0x1}], 0x1, &(0x7f00000006c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x2}}], 0x20}], 0x1, 0x0) 23:42:35 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x398, 0x0, 0x0, 0x228, 0x0, 0x228, 0x300, 0x300, 0x300, 0x300, 0x300, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'bridge_slave_0\x00', 'veth1\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00', {0x93, 0x0, 0x41, 0x0, 0x0, 0x5, 0x40, 0x3a4}}}]}, @common=@inet=@HMARK={0x60}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dae7bbe9998a260a8f00a30e54d356de8911e05d607ed2184b8a7d2f9d2e"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 23:42:36 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) clone(0xc1b25d00, 0x0, 0x0, 0x0, 0x0) 23:42:36 executing program 4: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x0, 0x8, 0x10, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 649.336178][T17095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) 23:42:36 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f000000b740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000005c00)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) [ 650.217316][ T3086] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 650.591240][ T3086] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 650.600076][ T3086] usb 5-1: config 0 has no interface number 1 [ 650.607135][ T3086] usb 5-1: config 0 interface 205 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 650.618627][ T3086] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 650.720583][ T3086] usb 5-1: string descriptor 0 read error: -22 [ 650.729376][ T3086] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 650.740357][ T3086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.850166][ T3086] usb 5-1: config 0 descriptor?? [ 651.104610][ T3086] usb 5-1: USB disconnect, device number 111 23:42:38 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 23:42:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x8) 23:42:38 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:42:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x30, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x0, [{@multicast2}, {@multicast1}, {@remote}]}]}}}], 0x30}, 0x0) 23:42:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000093000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 23:42:39 executing program 4: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x0, 0x8, 0x10, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) 23:42:39 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:42:39 executing program 2: socket$kcm(0xa, 0x802, 0x88) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 23:42:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000093000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 23:42:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000b40)={0x7b, 0x5, [0x10a]}) 23:42:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x62}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) [ 653.207483][ T8449] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 653.397346][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 653.568776][ T8449] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 653.578188][ T8449] usb 5-1: config 0 has no interface number 1 [ 653.584925][ T8449] usb 5-1: config 0 interface 205 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 653.598386][ T8449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 653.927533][ T8449] usb 5-1: string descriptor 0 read error: -22 [ 653.934497][ T8449] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 653.945061][ T8449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:42:41 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x70041, 0x0) [ 654.171136][ T8449] usb 5-1: config 0 descriptor?? [ 654.449977][T13090] usb 5-1: USB disconnect, device number 112 23:42:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000093000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 23:42:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)) 23:42:42 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @rumble}) 23:42:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x68}}, 0x0) 23:42:42 executing program 4: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 655.517078][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="000202010000000000000000000000000000a1"], 0x18) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000840)="bd", 0x1}], 0x1}, 0x8044) 23:42:42 executing program 3: add_key$user(0x0, 0x0, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)}, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000600)="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", 0x2c3, 0x0) r0 = add_key$user(&(0x7f0000000280), &(0x7f0000000000), &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 23:42:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x2, {0x2, 0x0, @multicast2}, 'sit0\x00'}) 23:42:43 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x40602, 0x0) write$P9_RREMOVE(r0, &(0x7f0000001140)={0x7}, 0x7) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="8d", 0x1}], 0x1) [ 656.557284][T13090] usb 5-1: new high-speed USB device number 113 using dummy_hcd 23:42:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) [ 657.018372][T13090] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 657.028843][T13090] usb 5-1: config 0 has no interface number 1 [ 657.036184][T13090] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping 23:42:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}}, 0x0) [ 657.265632][T13090] usb 5-1: string descriptor 0 read error: -22 [ 657.274367][T13090] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 657.289501][T13090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:42:44 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 657.621670][T13090] usb 5-1: config 0 descriptor?? 23:42:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x64}, {0x6c}, {0x6}]}) 23:42:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0x0, 0xffff7fff}]}) 23:42:44 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x0) [ 657.912795][T13090] usb 5-1: USB disconnect, device number 113 [ 658.125193][ T35] audit: type=1326 audit(1621294965.261:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17211 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc1a8969fd code=0x0 23:42:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x540, 0x308, 0x0, 0xffffffff, 0x308, 0x308, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private2, @ipv4=@empty, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x118, 0x148, 0x0, {}, [@common=@hl={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={{0x30}}, @common=@hbh]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x50d) 23:42:46 executing program 4: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x0, 0x9f, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) 23:42:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 23:42:46 executing program 0: socketpair(0x24, 0x0, 0x0, &(0x7f0000000000)) [ 658.949182][ T35] audit: type=1326 audit(1621294966.091:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17211 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc1a8969fd code=0x0 23:42:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, "f71e44ac9d194ce772b416e564e7c058416c8fd9166e8ac709ff3ac00a57495a"}) 23:42:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:42:46 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x0) 23:42:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 659.895720][T10825] usb 5-1: new high-speed USB device number 114 using dummy_hcd 23:42:47 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) [ 660.290014][T10825] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 660.299519][T10825] usb 5-1: config 0 has no interface number 1 [ 660.307246][T10825] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 660.318164][T10825] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 660.397254][ T9212] usb 4-1: new high-speed USB device number 19 using dummy_hcd 23:42:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x1}, {0x15}, {0x6}]}) [ 660.508082][T10825] usb 5-1: string descriptor 0 read error: -22 [ 660.515036][T10825] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 660.524742][T10825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 23:42:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 23:42:47 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) [ 660.692433][T10825] usb 5-1: config 0 descriptor?? [ 660.778487][ T9212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.790293][ T9212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.801144][ T9212] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 660.811385][ T9212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.950057][T10825] usb 5-1: USB disconnect, device number 114 [ 661.097938][ T9212] usb 4-1: config 0 descriptor?? 23:42:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x0) [ 661.571530][ T9212] elecom 0003:056E:00FF.000D: item fetching failed at offset 0/1 [ 661.661446][ T9212] elecom: probe of 0003:056E:00FF.000D failed with error -22 [ 661.773097][ T9212] usb 4-1: USB disconnect, device number 19 [ 661.891108][ T35] audit: type=1326 audit(1621294969.031:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17266 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 23:42:49 executing program 4: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7f, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) 23:42:49 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 23:42:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 662.547433][ T9212] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 662.569869][ T35] audit: type=1326 audit(1621294969.711:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17266 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 23:42:49 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x0) [ 662.927533][ T9212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.940119][ T9212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.953036][ T9212] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 662.963624][ T9212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.107220][ T9212] usb 4-1: config 0 descriptor?? 23:42:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d1ed6540720501cb020175d25f5b09021b00010000000009040000017c6f7c0009058102"], 0x0) 23:42:50 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 23:42:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x1}, {0x15}, {0x6}]}) 23:42:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b5"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002780)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8b08}, {}, {0x1}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x4}}]}, 0x34}}, 0x0) [ 663.367239][ T8449] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 663.417211][ T9212] usbhid 4-1:0.0: can't add hid device: -71 [ 663.426199][ T9212] usbhid: probe of 4-1:0.0 failed with error -71 [ 663.513884][ T9212] usb 4-1: USB disconnect, device number 20 [ 663.649873][ T35] audit: type=1326 audit(1621294970.791:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17298 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 [ 663.731200][ T8449] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 663.740237][ T8449] usb 5-1: config 0 has no interface number 1 [ 663.746703][ T8449] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 663.757233][ T8449] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping 23:42:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, 0x16, 0xa01, 0x0, 0x0, {}, [@nested={0x4}, @nested={0x4, 0x5}]}, 0x1c}}, 0x0) [ 663.856088][ T8449] usb 5-1: string descriptor 0 read error: -22 [ 663.863824][ T8449] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 663.873542][ T8449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.982149][ T1983] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 664.055897][ T8449] usb 5-1: config 0 descriptor?? [ 664.306033][ T8449] usb 5-1: USB disconnect, device number 115 [ 664.308339][ T1983] usb 2-1: too many configurations: 91, using maximum allowed: 8 [ 664.451677][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:42:51 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x255a, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 664.591881][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 664.687374][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:42:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5}, {0x44}, {0x6}]}) [ 664.787335][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:42:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x3, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "bb"}, @union, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @array, @array, @restrict, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @int]}, {0x0, [0x0]}}, 0x0, 0x13b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) [ 664.907392][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 665.007377][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:42:52 executing program 4: syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0xc23}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) 23:42:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x1}, {0x15}, {0x6}]}) [ 665.107988][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 665.176091][T17322] not chained 10000 origins [ 665.176898][T17322] CPU: 1 PID: 17322 Comm: syz-executor.5 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 665.176898][T17322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.176898][T17322] Call Trace: [ 665.176898][T17322] dump_stack+0x24c/0x2e0 [ 665.176898][T17322] kmsan_internal_chain_origin+0x6f/0x130 [ 665.176898][T17322] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 665.176898][T17322] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 665.176898][T17322] ? kmsan_get_metadata+0x116/0x180 [ 665.176898][T17322] ? kmsan_internal_check_memory+0xb5/0x520 [ 665.176898][T17322] ? kmsan_internal_set_origin+0x85/0xc0 [ 665.176898][T17322] ? kmsan_get_metadata+0x116/0x180 [ 665.176898][T17322] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 665.176898][T17322] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 665.176898][T17322] ? kmsan_get_metadata+0x116/0x180 [ 665.176898][T17322] ? kmsan_internal_set_origin+0x85/0xc0 [ 665.176898][T17322] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 665.176898][T17322] ? kmsan_unpoison_shadow+0x74/0xa0 [ 665.176898][T17322] ? _copy_from_user+0x1fd/0x300 [ 665.176898][T17322] ? kmsan_get_metadata+0x116/0x180 [ 665.176898][T17322] __msan_chain_origin+0x54/0xa0 [ 665.176898][T17322] do_recvmmsg+0x17fc/0x22d0 [ 665.176898][T17322] ? kmsan_internal_set_origin+0x85/0xc0 [ 665.176898][T17322] ? __msan_poison_alloca+0xec/0x110 [ 665.176898][T17322] ? kmsan_get_metadata+0x116/0x180 [ 665.176898][T17322] ? __se_sys_recvmmsg+0xd6/0x410 [ 665.176898][T17322] __se_sys_recvmmsg+0x24a/0x410 [ 665.176898][T17322] __x64_sys_recvmmsg+0x62/0x80 [ 665.176898][T17322] do_syscall_64+0x9f/0x140 [ 665.176898][T17322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.176898][T17322] RIP: 0033:0x4665d9 [ 665.176898][T17322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 665.176898][T17322] RSP: 002b:00007f88e5cb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 665.176898][T17322] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 665.176898][T17322] RDX: 000000000000045b RSI: 0000000020008880 RDI: 0000000000000003 [ 665.176898][T17322] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 665.176898][T17322] R10: 0000000044000102 R11: 0000000000000246 R12: 000000000056bf60 [ 665.176898][T17322] R13: 0000000000a9fb1f R14: 00007f88e5cb1300 R15: 0000000000022000 [ 665.176898][T17322] Uninit was stored to memory at: [ 665.176898][T17322] kmsan_internal_chain_origin+0xad/0x130 [ 665.176898][T17322] __msan_chain_origin+0x54/0xa0 [ 665.176898][T17322] do_recvmmsg+0x17fc/0x22d0 [ 665.176898][T17322] __se_sys_recvmmsg+0x24a/0x410 [ 665.176898][T17322] __x64_sys_recvmmsg+0x62/0x80 [ 665.176898][T17322] do_syscall_64+0x9f/0x140 [ 665.176898][T17322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.176898][T17322] [ 665.176898][T17322] Uninit was stored to memory at: [ 665.176898][T17322] kmsan_internal_chain_origin+0xad/0x130 [ 665.176898][T17322] __msan_chain_origin+0x54/0xa0 [ 665.176898][T17322] do_recvmmsg+0x17fc/0x22d0 [ 665.176898][T17322] __se_sys_recvmmsg+0x24a/0x410 [ 665.176898][T17322] __x64_sys_recvmmsg+0x62/0x80 [ 665.176898][T17322] do_syscall_64+0x9f/0x140 [ 665.176898][T17322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.176898][T17322] [ 665.176898][T17322] Uninit was stored to memory at: [ 665.176898][T17322] kmsan_internal_chain_origin+0xad/0x130 [ 665.176898][T17322] __msan_chain_origin+0x54/0xa0 [ 665.176898][T17322] do_recvmmsg+0x17fc/0x22d0 [ 665.176898][T17322] __se_sys_recvmmsg+0x24a/0x410 [ 665.176898][T17322] __x64_sys_recvmmsg+0x62/0x80 [ 665.176898][T17322] do_syscall_64+0x9f/0x140 [ 665.176898][T17322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.176898][T17322] [ 665.176898][T17322] Uninit was stored to memory at: [ 665.176898][T17322] kmsan_internal_chain_origin+0xad/0x130 [ 665.176898][T17322] __msan_chain_origin+0x54/0xa0 [ 665.176898][T17322] do_recvmmsg+0x17fc/0x22d0 [ 665.176898][T17322] __se_sys_recvmmsg+0x24a/0x410 [ 665.176898][T17322] __x64_sys_recvmmsg+0x62/0x80 [ 665.176898][T17322] do_syscall_64+0x9f/0x140 [ 665.176898][T17322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.176898][T17322] [ 665.176898][T17322] Uninit was stored to memory at: [ 665.176898][T17322] kmsan_internal_chain_origin+0xad/0x130 [ 665.176898][T17322] __msan_chain_origin+0x54/0xa0 [ 665.176898][T17322] do_recvmmsg+0x17fc/0x22d0 [ 665.176898][T17322] __se_sys_recvmmsg+0x24a/0x410 [ 665.176898][T17322] __x64_sys_recvmmsg+0x62/0x80 [ 665.176898][T17322] do_syscall_64+0x9f/0x140 [ 665.176898][T17322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.176898][T17322] [ 665.176898][T17322] Uninit was stored to memory at: [ 665.176898][T17322] kmsan_internal_chain_origin+0xad/0x130 [ 665.176898][T17322] __msan_chain_origin+0x54/0xa0 [ 665.176898][T17322] do_recvmmsg+0x17fc/0x22d0 [ 665.176898][T17322] __se_sys_recvmmsg+0x24a/0x410 [ 665.176898][T17322] __x64_sys_recvmmsg+0x62/0x80 [ 665.176898][T17322] do_syscall_64+0x9f/0x140 [ 665.176898][T17322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.176898][T17322] [ 665.176898][T17322] Uninit was stored to memory at: [ 665.176898][T17322] kmsan_internal_chain_origin+0xad/0x130 [ 665.176898][T17322] __msan_chain_origin+0x54/0xa0 [ 665.176898][T17322] do_recvmmsg+0x17fc/0x22d0 [ 665.176898][T17322] __se_sys_recvmmsg+0x24a/0x410 [ 665.176898][T17322] __x64_sys_recvmmsg+0x62/0x80 [ 665.176898][T17322] do_syscall_64+0x9f/0x140 [ 665.176898][T17322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.176898][T17322] [ 665.176898][T17322] Local variable ----msg_sys@do_recvmmsg created at: [ 665.176898][T17322] do_recvmmsg+0xbf/0x22d0 [ 665.176898][T17322] do_recvmmsg+0xbf/0x22d0 [ 665.810642][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 665.962883][ T35] audit: type=1326 audit(1621294973.101:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17324 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffda57e89fd code=0x0 [ 666.018859][ T1983] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice= 1.02 [ 666.029941][ T1983] usb 2-1: New USB device strings: Mfr=117, Product=210, SerialNumber=95 [ 666.040246][ T1983] usb 2-1: Product: syz [ 666.045562][ T1983] usb 2-1: Manufacturer: syz [ 666.051372][ T1983] usb 2-1: SerialNumber: syz [ 666.209954][ T1983] usb 2-1: config 0 descriptor?? [ 666.230382][T17302] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 666.517700][ T1983] cxacru 2-1:0.0: submit of write urb for cm 0x90 failed (-2) [ 666.526468][ T1983] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 666.655895][ T35] audit: type=1326 audit(1621294973.791:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17331 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 [ 666.660662][ T1983] cxacru: probe of 2-1:0.0 failed with error -22 23:42:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) [ 667.105480][ T1983] usb 2-1: USB disconnect, device number 7 23:42:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x801, 0x0, 0x800000000000}, {0x801, 0x0, 0xfffffffffffffffc}]}) [ 667.427394][T13090] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 667.638938][ T1983] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 667.828494][T13090] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 667.837956][T13090] usb 5-1: config 0 has no interface number 1 [ 667.845139][T13090] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 667.860295][T13090] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 667.877294][ T1983] usb 2-1: device descriptor read/64, error 18 23:42:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d1ed6540720501cb020175d25f5b09021b00010000000009040000017c6f7c0009058102"], 0x0) 23:42:55 executing program 3: setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 23:42:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x41}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xcf, &(0x7f0000000100)=""/207, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:42:55 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x1dee8ca, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab01120bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffff000b}}], 0x400000000000132, 0x4000000) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 23:42:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x15, 0x0, 0x1}, {0x15}, {0x6}]}) [ 668.139175][T13090] usb 5-1: string descriptor 0 read error: -22 [ 668.146445][T13090] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 668.157440][T13090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.340873][T13090] usb 5-1: config 0 descriptor?? [ 668.711184][T13090] usb 5-1: USB disconnect, device number 116 23:42:56 executing program 5: unshare(0x20400) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) [ 668.927342][ T1983] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 668.933402][ T35] audit: type=1326 audit(1621294976.071:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17369 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 23:42:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 23:42:56 executing program 3: setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) [ 669.238697][ T1983] usb 2-1: too many configurations: 91, using maximum allowed: 8 [ 669.338795][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 669.448881][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 669.559136][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 669.683754][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:42:56 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x19, 0xa, "cf2328cb4fa28d0fac42c7138ff6a1cfe927d46af262c5"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 669.779195][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:42:57 executing program 5: socket$rxrpc(0x21, 0x2, 0xa) [ 669.909045][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:42:57 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fchdir(r1) exit(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)='0') 23:42:57 executing program 3: setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) [ 670.038748][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 670.188804][ T1983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 670.378479][ T1983] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice= 1.02 [ 670.393086][ T1983] usb 2-1: New USB device strings: Mfr=117, Product=210, SerialNumber=95 [ 670.402888][ T1983] usb 2-1: Product: syz [ 670.407784][ T1983] usb 2-1: Manufacturer: syz [ 670.413341][ T1983] usb 2-1: SerialNumber: syz [ 670.689059][ T1983] usb 2-1: config 0 descriptor?? [ 670.721680][T17366] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 670.878133][ T8449] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 671.067765][ T1983] cxacru 2-1:0.0: submit of write urb for cm 0x90 failed (-2) [ 671.077394][ T1983] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 671.147872][ T1983] cxacru: probe of 2-1:0.0 failed with error -22 [ 671.191363][ T1983] usb 2-1: USB disconnect, device number 9 [ 671.248012][ T8449] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 671.257084][ T8449] usb 5-1: config 0 has no interface number 1 [ 671.263351][ T8449] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 671.273836][ T8449] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 671.373406][ T8449] usb 5-1: string descriptor 0 read error: -22 [ 671.380588][ T8449] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 671.390335][ T8449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.504150][ T8449] usb 5-1: config 0 descriptor?? [ 671.756659][ T1983] usb 5-1: USB disconnect, device number 117 23:42:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 23:42:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d1ed6540720501cb020175d25f5b09021b00010000000009040000017c6f7c0009058102"], 0x0) 23:42:59 executing program 5: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000340)={0x4826, 0x0, 0x0, 0x0, 0x1, [0x4, 0x2, 0x5]}) r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r5, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/244, 0xf4, 0x40000042, &(0x7f00000001c0)={0x11, 0xb, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4040) 23:42:59 executing program 3: setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 23:42:59 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fchdir(r1) exit(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)='0') 23:42:59 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x4, 0x9, 0x3, 0xff, 0xe1}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f00000005c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "abc09bd44ba095292efd55b63f8280b3de187ed6169bed6e1e2797dfeb8b4ca33f0a50748648a2077cf10b426d3cbaab625c9b4b6d7f07032ff9bc69c82dfcb98ca6d7e555301d38b1c12186c8142737208d80b5fa4b38f7a64ca33c83ada80277ff90aec061e8cb8721a0b5b833dd"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x814}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "27929a1b00a6b2c8fd5ca42b14e250f880626159861f28d2fce0a0b9a9a2d99bce29512de7e82966684c797734e2577de457e4e63afc80b7454b172c2c669132f52a9ba35d8d3a4151f877dccdfc944152d24acaf6ed55"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42b}}, {0x32, &(0x7f00000008c0)=@string={0x32, 0x3, "7495c25cc9549155e0c159eeca5459090aa99fbd6777bf23736db3473aa14ab0ea67acd558c377c12b8f748e38ea6482"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 672.767083][T13090] usb 2-1: new high-speed USB device number 10 using dummy_hcd 23:43:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0xad, 0x0, 0x0, 0x0, "c584e65377b95fe141ed1683c4bc8a1a858381"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) [ 673.078486][T13090] usb 2-1: too many configurations: 91, using maximum allowed: 8 [ 673.188450][T13090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 673.298747][T13090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:43:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xe40}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0)=@ipx, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) [ 673.448500][T13090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 673.543067][ T52] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 673.581501][T13090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 673.708669][T13090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:43:00 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fchdir(r1) exit(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)='0') [ 673.812069][T13090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 673.938985][T13090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 673.942577][T17436] syz-executor.3 sent an empty control message without MSG_MORE. [ 673.970147][ T52] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 673.979604][ T52] usb 5-1: config 0 has no interface number 1 [ 673.986142][ T52] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 673.996736][ T52] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 674.154102][ T52] usb 5-1: string descriptor 0 read error: -22 [ 674.161784][T13090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 674.161963][ T52] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 674.184813][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.397748][T13090] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice= 1.02 [ 674.408652][T13090] usb 2-1: New USB device strings: Mfr=117, Product=210, SerialNumber=95 [ 674.418278][T13090] usb 2-1: Product: syz [ 674.423346][T13090] usb 2-1: Manufacturer: syz [ 674.429260][T13090] usb 2-1: SerialNumber: syz [ 674.532715][ T52] usb 5-1: config 0 descriptor?? [ 674.698465][T13090] usb 2-1: config 0 descriptor?? [ 674.729816][T17425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 674.791898][ T52] usb 5-1: USB disconnect, device number 118 [ 675.088186][T13090] cxacru 2-1:0.0: submit of write urb for cm 0x90 failed (-2) [ 675.102945][T13090] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 675.246683][T13090] cxacru: probe of 2-1:0.0 failed with error -22 23:43:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0xad, 0x0, 0x0, 0x0, "c584e65377b95fe141ed1683c4bc8a1a858381"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) [ 675.359150][T13090] usb 2-1: USB disconnect, device number 10 23:43:02 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd\x00') fchdir(r1) exit(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)='0') 23:43:02 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0xa6, 0xbf, 0x40, 0xbb4, 0xa16, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x1, 0x7, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x78, 0x5e, 0x16, 0x0, [], [{{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) 23:43:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xe40}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0)=@ipx, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 23:43:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d1ed6540720501cb020175d25f5b09021b00010000000009040000017c6f7c0009058102"], 0x0) 23:43:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0xad, 0x0, 0x0, 0x0, "c584e65377b95fe141ed1683c4bc8a1a858381"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 23:43:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0xad, 0x0, 0x0, 0x0, "c584e65377b95fe141ed1683c4bc8a1a858381"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) [ 676.667154][ T52] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 676.667786][T13090] usb 5-1: new high-speed USB device number 119 using dummy_hcd 23:43:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xe40}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0)=@ipx, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) [ 676.948721][ T52] usb 2-1: too many configurations: 91, using maximum allowed: 8 23:43:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0xad, 0x0, 0x0, 0x0, "c584e65377b95fe141ed1683c4bc8a1a858381"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) [ 677.047260][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 677.108450][T13090] usb 5-1: config 0 has an invalid interface number: 205 but max is 1 [ 677.118246][T13090] usb 5-1: config 0 has no interface number 1 [ 677.125574][T13090] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 677.137861][T13090] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 677.144522][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 677.259636][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:43:04 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x1c8, 0xf8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'geneve1\x00', 'sit0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@length={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private0, @mcast1, [], [], 'erspan0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'wlan1\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 677.358146][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 677.473532][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 677.607405][T13090] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=c2.9d [ 677.619190][T13090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.628338][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 677.639997][T13090] usb 5-1: Product: syz [ 677.645147][T13090] usb 5-1: Manufacturer: syz [ 677.651082][T13090] usb 5-1: SerialNumber: syz [ 677.708126][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 677.798415][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 23:43:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0xad, 0x0, 0x0, 0x0, "c584e65377b95fe141ed1683c4bc8a1a858381"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) [ 677.969871][T13090] usb 5-1: config 0 descriptor?? [ 677.991138][ T52] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice= 1.02 [ 678.001108][ T52] usb 2-1: New USB device strings: Mfr=117, Product=210, SerialNumber=95 [ 678.010444][ T52] usb 2-1: Product: syz [ 678.014951][ T52] usb 2-1: Manufacturer: syz [ 678.019959][ T52] usb 2-1: SerialNumber: syz [ 678.118883][T17492] x_tables: duplicate underflow at hook 2 [ 678.177395][T17492] x_tables: duplicate underflow at hook 2 [ 678.210056][ T52] usb 2-1: config 0 descriptor?? [ 678.229790][T17474] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 678.253850][T13090] usb 5-1: USB disconnect, device number 119 23:43:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xe40}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0)=@ipx, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) [ 678.517898][ T52] cxacru 2-1:0.0: submit of write urb for cm 0x90 failed (-2) [ 678.526099][ T52] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02! 23:43:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x1000000000016) ptrace(0x4206, r0) rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffc5ab}) tkill(r0, 0x36) tkill(r0, 0x13) [ 678.635589][ T52] cxacru: probe of 2-1:0.0 failed with error -22 [ 678.754935][ T52] usb 2-1: USB disconnect, device number 11 23:43:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) 23:43:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0xad, 0x0, 0x0, 0x0, "c584e65377b95fe141ed1683c4bc8a1a858381"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 23:43:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r2, 0xa}) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r3, r1) 23:43:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x44}}, 0x0) [ 680.312678][T17525] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 680.328072][T17525] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 680.340300][T17525] bond0: (slave ipvlan2): Error -95 calling set_mac_address 23:43:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ctr(des3_ede)\x00'}, 0x59}}]}, 0x138}}, 0x0) 23:43:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r2, 0xa}) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r3, r1) [ 680.681901][T17525] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 680.694929][T17525] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 680.706480][T17525] bond0: (slave ipvlan2): Error -95 calling set_mac_address 23:43:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x5, 0x4}) 23:43:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001b00)=ANY=[@ANYBLOB="7f"], 0x87b) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x9, 0x80, 0x1, 0x0, 0x0, 0x9, 0x81419, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, @perf_config_ext={0x1, 0x1000}, 0x9, 0xdcc6, 0x5, 0x6f11b2cfbf1cddb4, 0xc3c851a, 0xffff, 0x7, 0x0, 0x8, 0x0, 0x1}, r2, 0x7, r3, 0x19) dup3(r0, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\'%'}, {0x20, '\':$&/.,\x00'}, {0x20, '\xbb\xbb\xbb\xbb\xbb\xbb'}], 0xa, "3bd4f2875cd1a8425ea980f528c8970736828ea04675fd72939cc24f001db24ee5bf8bd43ae328d6668ce9e570b8afef31eaf3e6e742b90a313328ecdfff4bda034e6440dbe7d4"}, 0x65) clone(0x20026045dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "65db07", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @mcast2}}}}}}, 0x0) 23:43:08 executing program 3: r0 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 23:43:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r2, 0xa}) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r3, r1) 23:43:08 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x228, 0x240, 0x241, 0x228, 0x240, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1, 0x0, 0x0, 0xec, 0x7}}}, @common=@unspec=@devgroup={{0x38}, {0xf}}]}, @unspec=@TRACE={0x20}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'macvlan0\x00', 'hsr0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 23:43:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) shutdown(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x0, 0xf8}, 0xc) 23:43:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000036200000000", 0x4c}], 0x1}, 0x0) 23:43:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x5, 0x4}) 23:43:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="090f0f"]}) 23:43:09 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r2, 0xa}) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r3, r1) 23:43:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x54}}, 0x0) 23:43:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x5, 0x4}) 23:43:10 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000600)={0x0, r2}) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 683.418337][T13090] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 683.687246][T13090] usb 1-1: Using ep0 maxpacket: 8 [ 683.908857][T13090] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 684.108901][T13090] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 684.119385][T13090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.128769][T13090] usb 1-1: Product: syz [ 684.133848][T13090] usb 1-1: Manufacturer: syz [ 684.139861][T13090] usb 1-1: SerialNumber: syz [ 684.484545][T13090] usb 1-1: USB disconnect, device number 22 23:43:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 23:43:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000480)=""/244) 23:43:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') sendfile(r2, r3, 0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) read(r4, &(0x7f0000000000), 0x20002000) 23:43:12 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x5, 0x4}) 23:43:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001840), 0x3d62, 0xa02) ioctl$USBDEVFS_CONTROL(r0, 0xc00c5512, 0x0) 23:43:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000080)={0x0, 0x0, 0xc, {0xc, 0x0, "60adbf6fe3253132eb18"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "4cf7c48b"}]}}, 0x0}, 0x0) 23:43:13 executing program 2: r0 = epoll_create(0x2) r1 = io_uring_setup(0x603, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x2016}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 23:43:13 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") [ 686.298107][ T52] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 686.537597][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 686.658237][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.672078][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.682990][ T52] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 686.693344][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:43:13 executing program 4: ioprio_set$pid(0x3, 0x0, 0x0) 23:43:14 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$sequencer(r0, 0x0, 0x0) 23:43:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x5, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x3) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff0b, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a0002840200400402004e20000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) [ 687.070378][ T52] usb 1-1: config 0 descriptor?? 23:43:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 687.174951][ T52] hub 1-1:0.0: USB hub found [ 687.337503][ T52] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 687.787638][ T52] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v0.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 23:43:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="1c9fe5471a2a02bf0429fa4af9d7bd11f985721b057c80b4815652d47fb02462e9ad6a07fa87cabf989da2b73d99ea2549c004b8dd4666e5fe9f136d067d5ec0404e5302f4494fade5b5886aded1a903c5d4c4578e04f1be2ef90e8f92bb39aa2ac4bc01712dde270e07cd64a5c9d409dee1e63d209951313da222f49effd62f66a12e5bd74608b9c8ca61c28a5b84938dad26811af2c937ffdd0ff3bb9efad7e68f9755b43cf3a888d22948eb084569724d20e2891660691b67dd5697e59fd06a2d0e477ede6c880117e8b8048cca17", 0xd0}, {&(0x7f0000000140)="06b2677b88623691cd2f3565997496b233f7235b7c5e0c98f61b7f503e24ad18a96993a6a3de938e2b3cc15c54c6e86109f0305654310d44adc2bcae34d446ea6b89544913a92246ecb67ce94fb988f0595bdf8d8894044b77ba02e1f1a09378c703972b3e616e9afecfa24554c09e826d22c7f80ad2152291e36b214653d98e7ea4ae0ee7977d93c7d51c7bae37f952519574e38d3540ea931d294f507ed2fbd38af70df1cf835d6db8349a72725005a3", 0xb1}, {&(0x7f0000000200)="00e1aba16b5ddc2a4af248253d504394cef936a1f918ea1ad6b469b26ad35964b8569200e6c3", 0x26}, {&(0x7f0000000240)="7159a89325fd641bbdf6c8f979ce47a4360aaceed0f90d51450dfddaee93b9d68f118e68b88becefe26cebc8c93547d7a3c78f4fb87c8e78dbb3c930254e69385848eba9cf4cb5f792565bdcdc82c6e27c43d1ac3902a5d3588905e0b775939be6a9da70a69c9913eb5822caea09450fa448f3f083e8cd132f70ac89f4fa82c9cda19cf3ffeee9b107fc2d9bbda2373494a5fd9eb1125f4455", 0x99}], 0x4}], 0x1, 0x0) [ 687.939467][ T35] audit: type=1326 audit(1621294995.071:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 688.069543][ T52] usb 1-1: USB disconnect, device number 23 23:43:15 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") 23:43:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") [ 688.757127][ T52] usb 1-1: new high-speed USB device number 24 using dummy_hcd 23:43:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") 23:43:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 688.997144][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 689.118569][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.132139][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.143309][ T52] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 689.153153][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.294651][ T35] audit: type=1800 audit(1621294996.431:49): pid=17661 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=13913 res=0 errno=0 [ 689.565147][ T35] audit: type=1800 audit(1621294996.701:50): pid=17666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=13907 res=0 errno=0 [ 689.608362][ T52] usb 1-1: config 0 descriptor?? 23:43:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) shutdown(r0, 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x7c, &(0x7f00000005c0), 0xe) 23:43:17 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/154, 0x9a}], 0x1, 0xffff, 0x0) [ 689.827377][ T52] usb 1-1: can't set config #0, error -71 [ 689.866723][ T52] usb 1-1: USB disconnect, device number 24 23:43:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") 23:43:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") 23:43:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") [ 690.191645][T17679] new mount options do not match the existing superblock, will be ignored [ 690.322429][T17680] new mount options do not match the existing superblock, will be ignored 23:43:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 690.732889][ T35] audit: type=1800 audit(1621294997.871:51): pid=17686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=13913 res=0 errno=0 23:43:17 executing program 5: io_setup(0x400, &(0x7f0000000000)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 691.028787][ T35] audit: type=1800 audit(1621294998.171:52): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=13917 res=0 errno=0 23:43:18 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") 23:43:18 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {r1, 0xa4}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 691.232897][ T35] audit: type=1800 audit(1621294998.371:53): pid=17694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=13907 res=0 errno=0 23:43:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") 23:43:19 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000012c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0, 0x0) 23:43:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r3, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) quotactl(0x7, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000680)="6e54fd72d01796e7dcb20263982249792995e99fe7b6e4a764950082e79a522830687b6f67b821ed297a456bf9c51e37a6983a5435af57b997b224c472540ea40301f3451b9584d98593f56525a5da5cc5777214b1a6723008db8099761ef0ea36fbd60516b80fb6b27db1d919ff34350d31cafaf524f2301df13d509dd2e4d0c9b9f8086a25ee40cceb9ed2daa20a9279fd6461788966d600955e13cb726fa3e4c6e19bde03d253") [ 692.174260][ T35] audit: type=1800 audit(1621294999.311:54): pid=17709 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=13917 res=0 errno=0 23:43:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 692.982906][ T35] audit: type=1326 audit(1621295000.121:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17718 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 23:43:20 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040015}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x20080, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1140, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="24000019a6058cc38e67fe6a1f74d5773e69a769fa7ff4da3929c450cbe32f691be0120000fff0ffffff0000000000007d765560d7d2896ae37aa8d8970ed06daf37b5661e3e6b966472bbbd06ab1a65082a812a4fc60fee9eab0b3008334b68b70d0311c0e72bda5cd05f1e12928fca5893bd2c1b7e00dac954b9cdb4cedb7c0dbed4c8443c1bffd9cb176c8396450b16ceae68235738dcc215d224539ae93d422302d5c0c29b5b575a8a2a8a88b5cc7cbab088c932a81435187f8fd22c339e2eeeff5d855658768d5b31dc72fe71039dbbba1b1ebde951a3ebf2660e481b497f4fbfbd8eb65d76"]) write$binfmt_misc(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x259) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0x1}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0xa4, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3f, 0x3}, {0x2, 0x2}, {0xee, 0x3}, {0x2, 0x1}, {0xc2, 0x5}, {0x81, 0x3}, {0x2, 0x2}, {0x1, 0x7}], "c0db0bc4aeae708e"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x8}, {0x6, 0x5}, {0x98, 0x7}, {0x1}, {0x3, 0x5}, {0x81, 0x7}], "22cf32531a7f5488"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1, 0x7}, {}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0xa9, 0x7}, {0x40, 0x3}, {0x5, 0x2}, {0xa5, 0x7}, {0x3, 0x6}, {0x8, 0x5}, {0x3c, 0x2}, {0x3a, 0x3}, {0x5, 0x3}], "32f9e0c752ab0143"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "728798321eae077a"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0e415c0898efaa77"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2, 0x5}, {0xe7, 0x6}, {0x5}, {0x1, 0x3}, {0x7f}, {0xfc, 0x5}, {0x7f, 0x1}], "978736d2ce244ace"}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40044}, 0x11) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001c00)=[@text64={0x40, &(0x7f0000000380)="c4e19167b0c9000000c421b5f26c4500c744240072000000c7442402a8ed9ba5ff1c24440f0766baf80cb89745cc81efb0b3eeb9800000c00f3235010000000f30b9800000c00f9c35000400000f30c74424002b000000c744240200000000ff1c243e66440f6f7100f2a5", 0x6b}], 0x1, 0x11, 0x0, 0x0) [ 693.155177][ T35] audit: type=1800 audit(1621295000.171:56): pid=17720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=13907 res=0 errno=0 23:43:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@getsa={0x28, 0x12, 0x321, 0x0, 0x0, {@in6=@local}}, 0x28}}, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 23:43:20 executing program 4: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), 0x4) 23:43:20 executing program 1: clock_getres(0x8, &(0x7f0000000040)) 23:43:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541b, &(0x7f0000000000)=0x3) [ 693.868486][T17732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 693.991114][T17732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.019917][ C1] sd 0:0:1:0: [sg0] tag#5949 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 694.031065][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB: Test Unit Ready [ 694.037986][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.048125][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.058721][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.069542][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.080393][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.091377][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.101909][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.112551][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.122823][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.133411][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.144131][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.154594][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.165560][ C1] sd 0:0:1:0: [sg0] tag#5949 CDB[c0]: 00 00 00 00 00 00 00 00 [ 694.228922][ T3129] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.236279][ T3129] ieee802154 phy1 wpan1: encryption failed: -22 23:43:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541b, &(0x7f0000000000)=0x3) [ 694.548562][ C1] sd 0:0:1:0: [sg0] tag#5950 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 694.560554][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB: Test Unit Ready [ 694.567877][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.578968][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 23:43:21 executing program 4: unshare(0x40400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) [ 694.589728][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.600531][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.612429][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.622983][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.634692][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.644966][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.655802][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.666437][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.677727][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.687833][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 694.698307][ C1] sd 0:0:1:0: [sg0] tag#5950 CDB[c0]: 00 00 00 00 00 00 00 00 23:43:21 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x8a, 0x0, &(0x7f00000000c0)) 23:43:21 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x200007) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe6, &(0x7f0000000100), &(0x7f0000000000)=0x4) 23:43:22 executing program 0: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) umount2(&(0x7f0000000000)='./file0\x00', 0x2) 23:43:22 executing program 3: r0 = syz_io_uring_setup(0x6f3, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a80)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x40c302}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:43:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541b, &(0x7f0000000000)=0x3) 23:43:22 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x8a, 0x0, &(0x7f00000000c0)) 23:43:22 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x8a, 0x0, &(0x7f00000000c0)) 23:43:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 23:43:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541b, &(0x7f0000000000)=0x3) 23:43:23 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x8a, 0x0, &(0x7f00000000c0)) 23:43:23 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x8a, 0x0, &(0x7f00000000c0)) 23:43:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x200007) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe6, &(0x7f0000000100), &(0x7f0000000000)=0x4) 23:43:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) 23:43:24 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f00000069c0)=[{{&(0x7f0000000040)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@timestamping={{0x14}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) 23:43:24 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x8a, 0x0, &(0x7f00000000c0)) 23:43:24 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x8a, 0x0, &(0x7f00000000c0)) 23:43:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000040)="f00fc74f906766c7442400010000006766c7442402000000006766c744240600000000670f0114240f22c2baf80c66b8d01a968d66efbafc0c6660b8b5e0000000ef2e99640f0f8200700cbaf80c66b81cb7068166efbafc0cb8aa4feff40f01df0fae060010", 0x66}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x200007) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe6, &(0x7f0000000100), &(0x7f0000000000)=0x4) 23:43:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4020ae46, &(0x7f0000000100)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}]}) 23:43:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xc, 0x121041) write$evdev(r0, &(0x7f0000000240)=[{{}, 0x4, 0x4}], 0x18) 23:43:25 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$cont(0x9, r0, 0x0, 0x1) 23:43:25 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x68, 0xd9, 0x41, 0x10, 0x61d, 0xc020, 0xf2e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="74c1e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:43:26 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x200007) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe6, &(0x7f0000000100), &(0x7f0000000000)=0x4) 23:43:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0600"}, 0x0, 0x2, @planes=&(0x7f0000000080)={0x0, 0x0, @fd}, 0x96000}) 23:43:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000003c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x32a10}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 699.337310][T10825] usb 5-1: new high-speed USB device number 120 using dummy_hcd 23:43:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0xffffff75, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) [ 699.577802][T10825] usb 5-1: Using ep0 maxpacket: 16 [ 699.865946][T10825] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=f2.e5 [ 699.877976][T10825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.886588][T10825] usb 5-1: Product: syz [ 699.891946][T10825] usb 5-1: Manufacturer: syz [ 699.897367][T10825] usb 5-1: SerialNumber: syz [ 700.300206][T10825] usb 5-1: config 0 descriptor?? [ 700.343971][T10825] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected 23:43:27 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000004dd6000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400000000000000040004800900020073797a30002e37000900010073797a3000000000080003400000000022000200b717fa41", @ANYRES16, @ANYBLOB="a1e309d5eeda171508fa3e32363a6bc2"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 23:43:28 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601bfc97004d8880fe8000337d8266000000000000000600ff02000000000000000000000000000101004e20004590"], 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 23:43:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x145) write$binfmt_misc(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xff6c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)=ANY=[]) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000340)={0x0, 0x2, 0x4, 0x7fffffd}) [ 700.987514][T10825] ssu100: probe of 5-1:0.0 failed with error -71 [ 701.050734][T10825] usb 5-1: USB disconnect, device number 120 23:43:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0) 23:43:28 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x10a040000, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, &(0x7f0000003700), 0x0, 0x0, &(0x7f0000000140)) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) [ 701.737894][T17860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 701.767254][T10825] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 701.898197][ C0] sd 0:0:1:0: [sg0] tag#5888 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 701.912148][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB: Test Unit Ready [ 701.920090][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.931644][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.943651][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.955743][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.967150][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.978367][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 701.989968][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 702.001557][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 702.013003][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 702.024242][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 702.027893][T10825] usb 5-1: Using ep0 maxpacket: 16 [ 702.037001][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 702.053375][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 702.065191][ C0] sd 0:0:1:0: [sg0] tag#5888 CDB[c0]: 00 00 00 00 00 00 00 00 [ 702.116600][T17860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 702.210904][T17871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 702.228382][ T52] usb 3-1: new high-speed USB device number 27 using dummy_hcd 23:43:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ae", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000240)='\t', 0x0) [ 702.661448][ T52] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 702.673537][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.685624][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.695958][ T52] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 702.710391][ T52] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 702.720340][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:43:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x800000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x0, 0x2710}, 0x12}, 0x18) 23:43:30 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x68, 0xd9, 0x41, 0x10, 0x61d, 0xc020, 0xf2e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="74c1e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:43:30 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 702.927222][T10825] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=f2.e5 [ 702.936968][T10825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.945661][T10825] usb 5-1: Product: syz [ 702.952037][T10825] usb 5-1: Manufacturer: syz [ 702.995603][ C0] sd 0:0:1:0: [sg0] tag#5889 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 703.008300][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB: Test Unit Ready [ 703.016382][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.027854][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.039445][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.051065][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.062593][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.074261][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.085475][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.096930][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.108344][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.121070][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.133688][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.150961][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 703.163364][ C0] sd 0:0:1:0: [sg0] tag#5889 CDB[c0]: 00 00 00 00 00 00 00 00 [ 703.238434][T10825] usb 5-1: config 0 descriptor?? [ 703.276601][T10825] usb 5-1: can't set config #0, error -71 [ 703.359203][T10825] usb 5-1: USB disconnect, device number 121 [ 703.493102][ T52] usb 3-1: config 0 descriptor?? [ 703.629044][T17889] input: syz0 as /devices/virtual/input/input13 [ 703.781722][T17889] input: syz0 as /devices/virtual/input/input14 [ 703.990321][ T52] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 704.064507][ T52] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 704.107171][T10825] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 704.213712][ T52] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 704.347559][T10825] usb 5-1: Using ep0 maxpacket: 16 [ 704.411414][ T52] usb 3-1: USB disconnect, device number 27 [ 704.628454][T10825] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=f2.e5 [ 704.638508][T10825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.647339][T10825] usb 5-1: Product: syz [ 704.651877][T10825] usb 5-1: Manufacturer: syz [ 704.656741][T10825] usb 5-1: SerialNumber: syz [ 704.817516][T10825] usb 5-1: config 0 descriptor?? [ 704.880156][T10825] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 705.068872][T10371] usb 3-1: new high-speed USB device number 28 using dummy_hcd 23:43:30 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x30) 23:43:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ae", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000240)='\t', 0x0) 23:43:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ae", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000240)='\t', 0x0) 23:43:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x84}, {0xc}, {0x6}]}) 23:43:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0xe0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x6, 0x0, 0x0) [ 705.327109][ T35] audit: type=1326 audit(1621295012.461:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17930 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 23:43:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ae", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000240)='\t', 0x0) [ 705.509376][T10825] ssu100: probe of 5-1:0.0 failed with error -71 [ 705.512598][T10371] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 705.529695][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.542680][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.553954][T10371] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 705.568578][T10371] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 705.571569][T10825] usb 5-1: USB disconnect, device number 122 [ 705.579151][T10371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.075218][ T35] audit: type=1326 audit(1621295013.211:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17930 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 [ 706.151163][T10371] usb 3-1: config 0 descriptor?? 23:43:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0) 23:43:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ae", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000240)='\t', 0x0) 23:43:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) 23:43:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x84}, {0xc}, {0x6}]}) [ 706.564087][T10371] usb 3-1: can't set config #0, error -71 [ 706.618359][T10371] usb 3-1: USB disconnect, device number 28 23:43:33 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x68, 0xd9, 0x41, 0x10, 0x61d, 0xc020, 0xf2e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="74c1e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:43:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ae", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000240)='\t', 0x0) [ 707.114116][ T35] audit: type=1326 audit(1621295014.251:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17955 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 23:43:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0xd, &(0x7f0000000000)={r2}, 0x8) 23:43:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ae", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000240)='\t', 0x0) [ 707.638949][T10371] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 707.717189][ T9820] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 707.928048][T10371] usb 5-1: Using ep0 maxpacket: 16 23:43:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x0, 0x1, [{}]}) 23:43:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000080)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 708.139251][ T9820] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 708.152793][ T9820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.165919][ T9820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.181873][ T9820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 708.197512][ T9820] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 708.207549][ T9820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.320798][ T9820] usb 3-1: config 0 descriptor?? [ 708.347691][T10371] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=f2.e5 [ 708.359076][T10371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.368389][T10371] usb 5-1: Product: syz [ 708.378280][T10371] usb 5-1: Manufacturer: syz [ 708.383683][T10371] usb 5-1: SerialNumber: syz 23:43:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x84}, {0xc}, {0x6}]}) [ 708.693371][T10371] usb 5-1: config 0 descriptor?? 23:43:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xaa, 0xc5, 0x1d, 0x20, 0x2770, 0x9052, 0xcb32, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x54, 0x7d, 0xbd}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 708.781761][T10371] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 708.882978][ T9820] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 708.994360][ T9820] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 709.140561][ T9820] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 709.253178][ T35] audit: type=1326 audit(1621295016.391:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17985 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 [ 709.301277][ T9820] usb 3-1: USB disconnect, device number 29 [ 709.387658][T10371] ssu100: probe of 5-1:0.0 failed with error -71 [ 709.518860][T10371] usb 5-1: USB disconnect, device number 123 [ 709.711425][ T52] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 709.957786][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 710.078615][ T52] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=cb.32 [ 710.088645][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.195231][ T52] usb 2-1: config 0 descriptor?? 23:43:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0) 23:43:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x17a}]}) 23:43:37 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x2, {0xe7ffffff}}) [ 710.262569][ T52] gspca_main: sq905c-2.14.0 probing 2770:9052 23:43:37 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x68, 0xd9, 0x41, 0x10, 0x61d, 0xc020, 0xf2e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="74c1e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:43:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x84}, {0xc}, {0x6}]}) [ 710.667758][ T52] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 710.675312][ T52] sq905c 2-1:0.0: Reading version command failed [ 710.684204][ T52] sq905c: probe of 2-1:0.0 failed with error -71 [ 710.802037][ T52] usb 2-1: USB disconnect, device number 12 [ 710.939046][ T35] audit: type=1326 audit(1621295018.070:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18021 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 [ 711.077346][T10371] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 711.107688][ T9212] usb 5-1: new high-speed USB device number 124 using dummy_hcd 23:43:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30000, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8f}, 0xe) shutdown(r0, 0x2) 23:43:38 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) inotify_init() r0 = socket$inet6(0xa, 0x802, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0xbb8) getpid() pipe(&(0x7f0000000540)) [ 711.347620][ T9212] usb 5-1: Using ep0 maxpacket: 16 [ 711.500097][T10371] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 711.513656][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.517508][ T52] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 711.526542][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.545395][T10371] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 711.564546][T10371] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 711.575656][T10371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.628463][ T9212] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=f2.e5 [ 711.638452][ T9212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.647358][ T9212] usb 5-1: Product: syz [ 711.653903][ T9212] usb 5-1: Manufacturer: syz [ 711.659656][ T9212] usb 5-1: SerialNumber: syz [ 711.788072][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 711.882207][ T9212] usb 5-1: config 0 descriptor?? [ 711.909623][ T52] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=cb.32 [ 711.919857][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.031674][ T9212] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 712.114604][ T52] usb 2-1: config 0 descriptor?? [ 712.207542][ T52] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 712.322893][T10371] usb 3-1: config 0 descriptor?? [ 712.592946][ T9212] ssu100: probe of 5-1:0.0 failed with error -71 23:43:39 executing program 5: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f0000001240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) open$dir(&(0x7f0000000000)='./file0\x00', 0x24200, 0x0) write(r0, &(0x7f0000001400), 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0xa906}, 0x100) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0xfc30) [ 712.698880][ T9212] usb 5-1: USB disconnect, device number 124 [ 712.737319][ T52] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 712.745638][ T52] sq905c 2-1:0.0: Get version command failed [ 712.752680][ T52] sq905c: probe of 2-1:0.0 failed with error -110 [ 712.831842][T10371] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 712.884797][T10371] appleir 0003:05AC:8243.0011: No inputs registered, leaving 23:43:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x54}}, 0x0) [ 713.040541][T10371] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 23:43:40 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10000b9, 0x0) [ 713.240169][T10372] usb 2-1: USB disconnect, device number 13 [ 713.257901][T10371] usb 3-1: USB disconnect, device number 30 23:43:40 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) inotify_init() r0 = socket$inet6(0xa, 0x802, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0xbb8) getpid() pipe(&(0x7f0000000540)) [ 714.061710][T18095] fuse: Bad value for 'fd' 23:43:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0) 23:43:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x54}}, 0x0) 23:43:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @private0}}}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r2, 0x10, "78e37c7bea0265be482be55717fae89a"}, &(0x7f00000002c0)=0x18) 23:43:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2}, 0x10) write(r0, &(0x7f00000000c0)="240000001a005f0014f9f407000904000afe800000000000000000000800190000000000", 0x24) [ 714.947787][ T9212] usb 3-1: new high-speed USB device number 31 using dummy_hcd 23:43:42 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000300000000000000000006000000000000000000000000000000ffffffff0000000000000000000000060002000000000000000000000000000105000500000000000a0000000000000002000000000000000000ffffac141400000000000000000005000600000000000a"], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 715.322165][ T9212] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 715.334313][ T9212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.347796][ T9212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.358582][ T9212] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 715.372895][ T9212] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 715.382755][ T9212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:43:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x2) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8ae4}], "", ['\x00']}, 0x178) 23:43:42 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) inotify_init() r0 = socket$inet6(0xa, 0x802, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0xbb8) getpid() pipe(&(0x7f0000000540)) 23:43:43 executing program 0: open(&(0x7f0000000580)='./file0\x00', 0x22637d4725860b9e, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 715.920338][ T9212] usb 3-1: config 0 descriptor?? 23:43:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x54}}, 0x0) 23:43:43 executing program 4: syz_emit_ethernet(0xae6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000c80)=ANY=[@ANYBLOB="66696c74650ee1b843000038a73c65e2a6b62c000200d86d00000701000400"/44], 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 716.414374][ T9212] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 716.462705][ T9212] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 716.645269][ T9212] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 23:43:43 executing program 0: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000424, 0x7) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0x10fec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 23:43:43 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$AUDIT_USER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x10}}, 0x0) [ 716.805128][ T9212] usb 3-1: USB disconnect, device number 31 23:43:44 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) inotify_init() r0 = socket$inet6(0xa, 0x802, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0xbb8) getpid() pipe(&(0x7f0000000540)) 23:43:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x54}}, 0x0) 23:43:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)) 23:43:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x2d, 0x1}]}}}]}, 0x3c}}, 0x0) 23:43:45 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000010095811d", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23:43:45 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4400, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x600}, {&(0x7f0000003400)=""/4096, 0xfec00}], 0x30, 0x0, 0x0) 23:43:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "ffa1756e16e6ab5e56b82994c041b3061f174e9a8c9c1566032af0468f277cbb", "846ddae093b3773b508ce4deafa1aa637e9d232301b847173aff36850c30413a", "f6715f8f32ababc79a8cd581681024942aaf55d8a648662cb4433833672b9d24", "d4fe4885de609fe92955b8773958a6090283b74e15526ebe55f933f429287787", "1e6e5face4ae220f26e484ee157cab303c513ea1e132c6292626920d76d74c02", "3862ddbe0b5c387573f7df35"}}) 23:43:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000000240)=0x91) 23:43:46 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0x402c5342, &(0x7f0000000240)={0x0, 0x7, 0x1f}) [ 719.367719][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 719.377683][T18174] netlink: 'syz-executor.5': attribute type 18 has an invalid length. [ 719.386467][T18174] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 719.403809][T18174] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.413054][T18174] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.422685][T18174] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.431980][T18174] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.082850][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 720.092909][T18174] netlink: 'syz-executor.5': attribute type 18 has an invalid length. [ 720.102073][T18174] netlink: 'syz-executor.5': attribute type 19 has an invalid length. 23:43:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7d, &(0x7f00000001c0), 0x20) 23:43:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="1643021fe26c"}, 0x14) 23:43:47 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @loopback, [@hopopts={0x0, 0x0, '\x00', [@ra]}]}}}}}}}, 0x0) 23:43:47 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 23:43:47 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000010095811d", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23:43:47 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x101d0}, 0x0) 23:43:48 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @loopback, [@hopopts={0x0, 0x0, '\x00', [@ra]}]}}}}}}}, 0x0) 23:43:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc7, 0x34, 0x20203843, 0x0, [0x2], [0x800]}) r1 = openat(0xffffffffffffffff, &(0x7f0000000840)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 23:43:48 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 23:43:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', 0x0}) r0 = socket(0x1, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) [ 721.387596][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 721.398576][T18202] netlink: 'syz-executor.5': attribute type 18 has an invalid length. [ 721.408794][T18202] netlink: 'syz-executor.5': attribute type 19 has an invalid length. 23:43:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='ns\x00') fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x51, &(0x7f0000007380), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000000000000b2b6a77f06ddcb33a8fac63016b69944fbc6b2c7a0a923cbd4c6aeb00ae99a70317fb463bed350139e79abfc7f613357ff620000000000001c1421cad4910cf35f692ac78060c337b177cade4df0316c3f87965e969a4f09b5ebf7e9ccfe1f65b4b3a3a7a9319ae4a7377c40069deaef75c16bc4c174245e27d4e906f5f2cf08c6100e9c76b966033abfc97274fcd48343e03a3567def958bc8fce778376af23b0c228da443220e53e8a814ee38dc6c04c502797c0b01d09e1"], 0x48}}], 0x2, 0x0) 23:43:48 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @loopback, [@hopopts={0x0, 0x0, '\x00', [@ra]}]}}}}}}}, 0x0) 23:43:49 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x3, 0x8, 0x201}, 0x14}}, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfe9c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000005c, 0x0) 23:43:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000004c0), 0x4) 23:43:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x6e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) close(r1) 23:43:49 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000010095811d", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23:43:50 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @loopback, [@hopopts={0x0, 0x0, '\x00', [@ra]}]}}}}}}}, 0x0) 23:43:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) recvmsg(r3, &(0x7f00000002c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000000380)=""/204, 0xcc}, 0x40) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="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", 0x40e}], 0x1, 0x0, 0x0, 0xa000a0}, 0x4000) close(r1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) close(0xffffffffffffffff) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) 23:43:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000034fa1d0809122323e9e2010203010902120001000002000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0}) 23:43:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x5}, {0x8}}}, 0x24}}, 0x0) 23:43:50 executing program 1: r0 = getpgrp(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x6cb2e100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 723.544344][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 723.555996][T18236] netlink: 'syz-executor.5': attribute type 18 has an invalid length. [ 723.565741][T18236] netlink: 'syz-executor.5': attribute type 19 has an invalid length. 23:43:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) recvmsg(r3, &(0x7f00000002c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000000380)=""/204, 0xcc}, 0x40) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="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", 0x40e}], 0x1, 0x0, 0x0, 0xa000a0}, 0x4000) close(r1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) close(0xffffffffffffffff) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) [ 723.937492][T10825] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 724.187338][T10825] usb 3-1: Using ep0 maxpacket: 8 [ 724.292111][T18247] IPVS: ftp: loaded support on port[0] = 21 23:43:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r1, &(0x7f00000048c0)={0x2020}, 0x7f) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0x2020) 23:43:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) recvmsg(r3, &(0x7f00000002c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000000380)=""/204, 0xcc}, 0x40) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="276c5bd6f0db828036f59b152925d176a9e51a4722f8fd829657ff48969c3c5f309ceaf42e7b242b7fe4fa128061aec9827004000c31fd9e31cb1c79990c2b89045ea4dc3ad63a775c80850ea10827e8a40a6c8b5fa7cc514639bb99f13c6a3d0825a738a1a53433042c75230d368c95f8a0b5562b58ecf50fd78e5def7375cd62fb5728535bf371b2ffc7d8058398075e1d0a7a4451395c39f79c26b7287cebd130de7737e77714686b9d67d87a3cf8da02cc70fdc99c1a7c916ae542b9d5baaf1f9daa4fb845fd5d5cad2073a61ce51c345150f84b3900997296d55c7d394af17b01d445465ef377508a1a29a5d6b03b0da22c973f22814fb2a802d50fb1f051e7d95d53d598a0599ec79cd27123fa1d13b7996609d4548e81ef7b1e8de8f32593ef46c3081ab55929a3c1cb1fa28a485518391a76b7b80d5941aa42222cb6f25be29ebc938af75971ffffdd4dea114ac37f38e69cb670020a7448d99b7b5e3d09bcf2625c94d6599182ce9edb0bbfea111dae3b1c9d6cd3162ce0aaebcdcf22a8d29dca0d04ebf5944168f398c500915579070586dff7a2ec6d345d1f69a8c749740aea0dbb2d30c9f7e3afd498a886c906fe09a83322d8e94b3ebe288ec1601e6a16122fa44191b6b3f5315eb0b35cb628540438919b906502eeb7cacc7d15753e456b056e6145ab65ac7c01253f3c5663495a74a0598feed07436a72d3ee1185d0fbcf89e8c5d449e0216cab8110efe923be24366dffc65bb386e7f015bb40b6fd9abbf7180b217f88d99f168c113f3ff187c202e2ae32a0238e43af612678a44a3d8373b6dc6bf820f8bf73e6411c51152f51993c66effe25c6e72a3127da6996f13691ded659e1f9d6eab1124435750dfeb60de2b2d59d9196bda3a3c5cd5054b2960481d50ce28ac4159b54f3f26a9decfc8ab36b6110eda741e21c95e3631b3de40fd3c7828fb0e3c85070eb233d4d4b1b75e0167ec62e81f1a12a0cd2e02a7a43edb384e4d0d59744bbe86611575966efe25b4191f14a368a72c13aeb4de7caff7a9439b583d08714fd22a9b1ff08297a562a859e2d21dd4f8ecf6701bcd9a30d28909c52c56a8ef739f0841ae895ad858121b1ec82ae1bbec856730aba8e2f42841c33caa862fdf8b651d90055b6725e5bf0af348ec550ad23c5a3c15c7455fdb13a57a6e452bdebbeb32200ab7dce3fab98b206ec2571e3de8904bea2265288dbaec64359cb5cd926dc025343fff78e7bdab6f541a3d2b569f37b8339d14e706163854d01ba5380d648391740e1fc2e118557692796acf6e0fa8ab21c5657259bf05a8b510eb285f306c8cdd6e185094b0ff46ec71d5a9b8e344176f263730468db893eaba00c32bdafdb1ebdc3ec441abaf4e7b2db744411ae02f33b340a373ea1a485b88073c2da7bd6828bbe4028fef4c30088c9b28daf899741029da8f52d2927250c582f16c", 0x40e}], 0x1, 0x0, 0x0, 0xa000a0}, 0x4000) close(r1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) close(0xffffffffffffffff) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) [ 724.497324][T10825] usb 3-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=e2.e9 [ 724.507892][T10825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.516423][T10825] usb 3-1: Product: syz [ 724.521240][T10825] usb 3-1: Manufacturer: syz [ 724.526413][T10825] usb 3-1: SerialNumber: syz [ 724.884225][T10825] usb 3-1: config 0 descriptor?? 23:43:52 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500000000010095811d", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 725.130409][T18272] IPVS: ftp: loaded support on port[0] = 21 23:43:52 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x80181, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) [ 725.387583][T10825] gs_usb 3-1:0.0: Configuring for 1 interfaces 23:43:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x40) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) recvmsg(r3, &(0x7f00000002c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000000380)=""/204, 0xcc}, 0x40) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="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", 0x40e}], 0x1, 0x0, 0x0, 0xa000a0}, 0x4000) close(r1) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) close(0xffffffffffffffff) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) [ 725.748872][T18302] misc userio: Begin command sent, but we're already running [ 725.823120][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 725.833349][T18305] netlink: 'syz-executor.5': attribute type 18 has an invalid length. [ 725.843214][T18305] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 725.859741][ T52] usb 3-1: USB disconnect, device number 32 23:43:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r1, &(0x7f00000048c0)={0x2020}, 0x7f) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0x2020) [ 726.637343][T17236] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 726.887430][T17236] usb 3-1: Using ep0 maxpacket: 8 23:43:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x4, 0x0, &(0x7f0000000240)=0x300) 23:43:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r1, &(0x7f00000048c0)={0x2020}, 0x7f) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0x2020) [ 727.167679][T17236] usb 3-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=e2.e9 [ 727.177456][T17236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.186226][T17236] usb 3-1: Product: syz [ 727.191455][T17236] usb 3-1: Manufacturer: syz [ 727.197936][T17236] usb 3-1: SerialNumber: syz [ 727.427682][T17236] usb 3-1: config 0 descriptor?? 23:43:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 23:43:54 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045009, 0x0) [ 727.808672][T17236] usb 3-1: can't set config #0, error -71 [ 727.856165][T17236] usb 3-1: USB disconnect, device number 33 23:43:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000200)) 23:43:57 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x40045010, 0x0) 23:43:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r1, &(0x7f00000048c0)={0x2020}, 0x7f) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0x2020) 23:43:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 23:43:57 executing program 1: r0 = getpgrp(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x6cb2e100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:43:57 executing program 2: clone3(&(0x7f0000002680)={0x90000, 0x0, 0x0, 0x0, {}, &(0x7f0000002540)=""/75, 0xffffffffffffff58, 0x0, 0x0}, 0x58) 23:43:58 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5403) 23:43:58 executing program 3: unshare(0x400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0xa, &(0x7f0000000100)=0x5, 0x4) 23:43:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETAW(r0, 0x5433, 0x0) [ 731.684569][T18373] IPVS: ftp: loaded support on port[0] = 21 23:43:59 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xea, 0x35, 0x13, 0x40, 0x763, 0x1021, 0xec85, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1c, 0xc6}}]}}]}}, 0x0) 23:43:59 executing program 5: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ffffffffffffffff", 0x8}], 0x1) 23:43:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs trusted:'], 0x32, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 23:43:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x12a0, 0x1148, 0xa, 0xd0e0000, 0x0, 0x100, 0x1208, 0x1d8, 0x1d8, 0x1208, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'sane-20000\x00'}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x2}}, {{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@addrtype={{0x30}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1300) 23:44:00 executing program 2: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x3e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000001c0)) [ 733.035597][T18412] encrypted_key: master key parameter 'trusted:' is invalid [ 733.097182][T10372] usb 5-1: new high-speed USB device number 125 using dummy_hcd 23:44:00 executing program 3: process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/99, 0x63}], 0x10000000000000e2, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/46, 0x2e}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/47, 0x2f}, {&(0x7f0000001140)=""/171, 0xab}, {&(0x7f0000001200)=""/122, 0xfffffffffffffd81}, {&(0x7f0000001280)=""/174, 0xae}, {&(0x7f0000001340)=""/191, 0xcd}, {&(0x7f0000001440)=""/158, 0x9e}, {&(0x7f0000001500)=""/74, 0x4a}, {&(0x7f0000001580)=""/2, 0x2}], 0xa, 0x0) [ 733.375188][T18419] x_tables: ip_tables: SET.2 target: invalid size 16 (kernel) != (user) 64 [ 733.481792][T10372] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=ec.85 [ 733.493549][T10372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.687883][T10372] usb 5-1: config 0 descriptor?? [ 733.789555][T10372] snd-usb-audio: probe of 5-1:0.0 failed with error -2 23:44:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x800000000401, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3012}) 23:44:01 executing program 1: r0 = getpgrp(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x6cb2e100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:44:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004a000704ab092500090007000aab80", 0x13) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 733.970864][T10372] usb 5-1: USB disconnect, device number 125 23:44:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) [ 734.453681][T18436] IPVS: ftp: loaded support on port[0] = 21 [ 734.747255][T10372] usb 5-1: new high-speed USB device number 126 using dummy_hcd 23:44:02 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x20000058, &(0x7f0000000080)={&(0x7f00000000c0)='4', 0x6fffff9}}, 0xee) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) [ 735.232041][T10372] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=ec.85 [ 735.242940][T10372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:44:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x29, 0x1f, 0x0, 0x0) [ 735.404348][T10372] usb 5-1: config 0 descriptor?? [ 735.548443][T10372] snd-usb-audio: probe of 5-1:0.0 failed with error -2 23:44:03 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xea, 0x35, 0x13, 0x40, 0x763, 0x1021, 0xec85, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1c, 0xc6}}]}}]}}, 0x0) 23:44:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 23:44:03 executing program 1: r0 = getpgrp(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x6cb2e100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:44:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000080)) [ 736.033938][T10372] usb 5-1: USB disconnect, device number 126 23:44:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)='/proc/sys/\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\x91l,\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/45, 0x2d) getdents(r2, &(0x7f0000000180)=""/59, 0x3b) [ 736.440517][T18485] IPVS: ftp: loaded support on port[0] = 21 23:44:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003640)=ANY=[@ANYBLOB="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"], 0x1240}, 0x0) [ 736.827408][ T52] usb 5-1: new high-speed USB device number 127 using dummy_hcd 23:44:04 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x78, {0x78, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aaa2407a8dc5ef46e337efd077511df95f823c2da28bfcc14fd52cf33fd95716c6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)) [ 737.118941][ C1] vcan0: j1939_tp_rxtimer: 0xffff888094eb4c00: rx timeout, send abort [ 737.129233][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888094eb4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 23:44:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000080)) [ 737.288125][ T52] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=ec.85 [ 737.297805][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:44:04 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) [ 737.397474][ T52] usb 5-1: config 0 descriptor?? [ 737.446667][ T52] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 737.645641][ T52] usb 5-1: USB disconnect, device number 127 [ 737.655728][T18528] "syz-executor.2" (18528) uses obsolete ecb(arc4) skcipher [ 737.745329][T18528] "syz-executor.2" (18528) uses obsolete ecb(arc4) skcipher [ 737.837029][ T3086] usb 4-1: new high-speed USB device number 21 using dummy_hcd 23:44:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}, {&(0x7f0000001d00)=""/222, 0xde}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 738.198282][ T3086] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 738.210070][ T3086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.221979][ T3086] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.232937][ T3086] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 738.249172][ T3086] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 738.258941][ T3086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:44:05 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xea, 0x35, 0x13, 0x40, 0x763, 0x1021, 0xec85, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1c, 0xc6}}]}}]}}, 0x0) 23:44:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000080)) 23:44:05 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) [ 738.812466][ T3086] usb 4-1: config 0 descriptor?? 23:44:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}, {&(0x7f0000001d00)=""/222, 0xde}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 739.306996][ T3086] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 739.332444][ T3086] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.3-1/input0 [ 739.367972][T10372] usb 5-1: new high-speed USB device number 2 using dummy_hcd 23:44:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000080)) [ 739.777669][T10372] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=ec.85 [ 739.788674][T10372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.917954][T10372] usb 5-1: config 0 descriptor?? 23:44:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}, {&(0x7f0000001d00)=""/222, 0xde}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 739.991501][T10372] snd-usb-audio: probe of 5-1:0.0 failed with error -2 23:44:07 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) [ 740.083178][T18524] udc-core: couldn't find an available UDC or it's busy [ 740.091142][T18524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 740.260655][T13090] usb 5-1: USB disconnect, device number 2 23:44:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="06040600ad73d054067041e8f47827c4062d1d8d9e90fa66005d27749312a087bc06670043d93806ad53e75ad398fdd15871a80beccb2883f9c8e6062bed543aba20650eed59", 0x5d, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 740.600173][ T3086] usb 4-1: USB disconnect, device number 21 23:44:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}, {&(0x7f0000001d00)=""/222, 0xde}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:44:08 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x14, 0x0, 0xb, 0x301}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2f6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) 23:44:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x103302, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00004b8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000a0000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000005c0)="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", 0x6df}, 0x68) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) ftruncate(0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 23:44:08 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xea, 0x35, 0x13, 0x40, 0x763, 0x1021, 0xec85, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1c, 0xc6}}]}}]}}, 0x0) 23:44:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') exit_group(0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 23:44:08 executing program 5: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) 23:44:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x8) poll(&(0x7f00000005c0)=[{r0}], 0x1, 0x25) [ 741.987762][ T3086] usb 5-1: new high-speed USB device number 3 using dummy_hcd 23:44:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000000c0)='./file0/file1/../file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008bc0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000066c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0xfffffffffffffffe, r2}, 0x28) 23:44:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x2000081, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) [ 742.357879][ T3086] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=ec.85 [ 742.367742][ T3086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.514930][ T3086] usb 5-1: config 0 descriptor?? [ 742.612319][ T3086] snd-usb-audio: probe of 5-1:0.0 failed with error -2 23:44:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=[{0x10}, {0x10}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 742.777630][ T3086] usb 5-1: USB disconnect, device number 3 23:44:10 executing program 2: ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x70, 0xa2, 0x1, 0x8, 0x18e8, 0x6238, 0xe9ab, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x63, 0x69, 0xbf, 0x0, [], [{{0x9, 0x5, 0xb, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "04adc7550e8f3d"}]}}, {{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0xd}}, {}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:44:10 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2}, @call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:44:11 executing program 1: unshare(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000040)}, {&(0x7f0000000380)}, {&(0x7f00000005c0)="228b98219af7776317237085ee1da3ebb12fad52ef91f32785d25e518fea7c8faf82501bcbb04be1a25aea6c06aff84b6e187bd120c8cb9e02a03ba4c003ddf100a51be4c506f8729240def7f4d2be03770addbc5558cd716d03f046a791b28a1974b7d3f68f51cca033844bc94d6d44c8d458139949ca5100", 0x79}, {&(0x7f0000000440)="a36b4ec6c338fae24776d78a85d7927ef6f9630947667c9f22e13757cbeb1a3c151c6e53b68bb27220d1fe1e95f7c294d99c6c737cf89cbb48b3b966ec35c32ccb045dcacf7f062e096bbbf16098e58f5ea064c45cfe0711c1c512fda7c58430c7f4c4e97ae4700688c357b350e74dc2c8f70da8897324315b26afe62d1ceae286ae3aac52a963d9f15bcc1d5a77c8ae8105b244391548efbcacae5694a09b19e34e444eac394a08cf49755df9fc4bc07bda69927226effb85f73648b48c6390cd5943283f14d2a796a18e25f009cece1837fa32f49b2f2f66d19bb7d88af1", 0xdf}], 0x6}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:44:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x2000081, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 23:44:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) [ 744.047280][T17236] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 744.297379][T17236] usb 3-1: Using ep0 maxpacket: 8 23:44:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x30, r1, 0xcb6558c9fec7d23, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x30}}, 0x0) [ 744.424318][T17236] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 744.433493][T17236] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 744.443588][T17236] usb 3-1: config 0 has no interface number 1 [ 744.450214][T17236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 744.462661][T17236] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 744.474399][T17236] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 744.488483][T17236] usb 3-1: too many endpoints for config 0 interface 4 altsetting 173: 199, using maximum allowed: 30 [ 744.501711][T17236] usb 3-1: config 0 interface 4 altsetting 173 endpoint 0xD has invalid wMaxPacketSize 0 [ 744.512076][T17236] usb 3-1: config 0 interface 4 altsetting 173 has a duplicate endpoint with address 0xD, skipping [ 744.525342][T17236] usb 3-1: config 0 interface 4 altsetting 173 has an invalid endpoint with address 0x0, skipping [ 744.537972][T17236] usb 3-1: config 0 interface 4 altsetting 173 has 3 endpoint descriptors, different from the interface descriptor's value: 199 [ 744.552721][T17236] usb 3-1: config 0 interface 4 has no altsetting 0 [ 744.559747][T17236] usb 3-1: New USB device found, idVendor=18e8, idProduct=6238, bcdDevice=e9.ab [ 744.569886][T17236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:44:11 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2}, @call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:44:12 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xd, 0x0, 0x10) 23:44:12 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f00000002c0)=@name, 0x10) 23:44:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000040)) 23:44:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x2000081, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) [ 745.871986][T17236] usb 3-1: config 0 descriptor?? 23:44:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2}, @call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 746.147398][T17236] usb 3-1: string descriptor 0 read error: -71 [ 746.257566][T17236] usb 3-1: USB disconnect, device number 34 23:44:14 executing program 4: r0 = fork() r1 = gettid() kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 23:44:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], 'R'}, @volatile, @func_proto={0x0, 0xc, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @typedef, @const, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x106}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 23:44:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x58}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x96, &(0x7f00000000c0)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:44:14 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x228101, 0x0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 23:44:14 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000040), 0xc) 23:44:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2}, @call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:44:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x2000081, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 23:44:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:44:15 executing program 1: r0 = socket(0xa, 0x3, 0x7) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) 23:44:15 executing program 2: r0 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}c\x10dc\xad\x89\x9cK\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\x00\x00\x00\x00\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x00\x00\x00\x00\x90\xcc\xe1\xe67\x1e\xcd[0\xa7z\xb57z\xe7wP\xaf\xa9\x92\xda\xa79%\xc0\x9a\x88\x01\x00p\xfe@\xf6l~\xd3\x15&\fU\x849\xa5\xec\xc5\xa3aI~\x13\xc2\xc0@K\xf9 R-\xa8=`\xd4\xa0S3Q+\x9a2r\xf3|kZ#u\xcc\x1dJ\xc7\x97\xf7\x90#B\xd7\x10\xa7Q\x00\x00\x00\x00\x00\x01\x00\x00sY\xa6M@\xf0\x06\xe1x\x94\xcb-\xca3!J\xc7\xf2\xa3\xe4\xe3\xa1\xe6\xb6\x8b\xb4\xbb^\x84\x86q\xa6Z\\8\x04\xa9\x9cUN\xa3\t*\x91\xed\x10\xb9\x8b\xa0\x80+\xcf5\x91\xcc>\xd3\xb5\xeb\x98\xbd\x14\xb1\x00\x00\x00A \x19@\xd5sK\x87\xb4\x14\v\xce\xc4g\x8ciM\xd2\x16\xf9\xb7\xe5\x0f\x92\x93;`3N#Q\xb1\\\b~\xba(\xe5\xc2\xf6p\xd38\xc7\xb9\xb1\xc1\xee\"\xedL\f\xd3\xb8\x8c\xc4\xdcg\x01\xa2S\xf9\x8eF\xfd`\xc3\x92\xf2\xdc\xd2\x9a\xdb\f#\xc2P\xae\xd1\\\xd0\xa7p\xb9)\xfb+', 0x0) write(r0, &(0x7f00000004c0)='1', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2710, 0x0, &(0x7f0000000040)) 23:44:15 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10012, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x7e}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:44:15 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 23:44:16 executing program 4: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x100, 0x4, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x190, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a7a9"}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x8000, 0xe303}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 23:44:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x5c) 23:44:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r0, 0x0, 0x18) 23:44:16 executing program 2: r0 = memfd_create(&(0x7f0000000200)='Y', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)="bb", 0x1}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="2d13368a655ad4c3feaf02cde4b694d9becbad4e471fbf2ebb5e42e473bc94ae144c6ac91a7386a2863742b8d055b5d4f246807574fb6079e919ec7b73329fbb952f27a3e7352d05fdf28a0837fda7dd3bfd2015cb08fe03b47359d4fa7d47213fb94526273b2c3228f46d5022931f4e425b344912ab1b261802fbd1277028214f853c", 0x83}, {&(0x7f0000001040)="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", 0xf5c}], 0x2) symlink(&(0x7f0000001000)='./bus\x00', 0x0) 23:44:16 executing program 5: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x1b59, 0x8}}}}}, 0x0) 23:44:16 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff00000000140001000000000000000000000001"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}}, 0x0) [ 749.733589][T18738] xt_NFQUEUE: number of queues (58115) out of range (got 90882) [ 749.902980][T18743] xt_NFQUEUE: number of queues (58115) out of range (got 90882) 23:44:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a70381691f296d588ee40d58160fa80f4e9461103fa13cdce25381a61500f763b300ac9c3b764a21eae193e82bb2368d59d1ffc82", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x400004}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 750.218643][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:44:17 executing program 2: r0 = socket(0x22, 0x2, 0x1) close(r0) 23:44:17 executing program 4: setrlimit(0x9, &(0x7f0000000100)) syz_io_uring_setup(0x6d6a, &(0x7f0000000000), &(0x7f0000800000/0x800000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 23:44:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x522, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 751.957191][T10372] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 752.344277][T10372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.357547][T10372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.368871][T10372] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 752.384286][T10372] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 752.396352][T10372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.467787][T10372] usb 1-1: config 0 descriptor?? 23:44:20 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10012, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x7e}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:44:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@nested={0x4, 0x0, 0x0, 0x1, [@generic]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, @generic="af", @generic]}, 0x28}}, 0x0) 23:44:20 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x47, 0x40, 0x8, 0xbda, 0x139, 0xa483, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6f, 0xef, 0x82, 0x0, [], [{{0x9, 0x5, 0x1, 0x3, 0x8}}]}}]}}]}}, 0x0) 23:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:44:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xfffffffffffffe7d, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) [ 753.050094][T10372] uclogic 0003:5543:0522.0014: item fetching failed at offset 0/1 [ 753.112971][T10372] uclogic 0003:5543:0522.0014: parse failed [ 753.120599][T10372] uclogic: probe of 0003:5543:0522.0014 failed with error -22 [ 753.178626][T18782] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 753.187608][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 753.234118][T18784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 753.270181][T18783] binder: 18778:18783 ioctl c0306201 20000380 returned -14 [ 753.368844][T10372] usb 1-1: USB disconnect, device number 25 [ 753.414061][T18795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 753.647098][ T52] usb 2-1: new high-speed USB device number 14 using dummy_hcd 23:44:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="5001000010000307ebff0006f2c6000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="0e1cd7716116e18f600776a6dc90fbe1292006d91be0b3aefac0e44faa6e57345e642c271e1fcca4ba7fbb91263d0533b372c2d57fcc5e986d31904cd8a497f3b087a895fcbeaaddf64f08630cc049715119ae122ce1b6113c9b015a3801"], 0x200}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x10, 0x800000000080002, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 23:44:20 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x100, 0x89) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x2, 0x3, 0x0, 'queue1\x00', 0x80000000}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) exit_group(0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000000180)="99", 0x1}], 0x2) [ 753.887683][ T52] usb 2-1: Using ep0 maxpacket: 8 23:44:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r1, 0x901, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c500a90fbaec7fe7af069ac4c73a48e67066081a5bc3c7"}]]}, 0x40}}, 0x0) [ 754.008235][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 754.020030][ T52] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=a4.83 [ 754.029753][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.157152][T10372] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 754.192639][ T52] usb 2-1: config 0 descriptor?? [ 754.394572][T18809] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. [ 754.406462][T18809] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'. [ 754.569087][T10372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.582762][T10372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.594468][T10372] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 754.609273][T10372] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.40 [ 754.609419][ T52] rtsx_usb: probe of 2-1:0.0 failed with error -71 [ 754.619470][T10372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.727802][ T52] usb 2-1: USB disconnect, device number 14 23:44:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000004000000000", @ANYRES32=r4, @ANYBLOB="0000080008000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)={0x40, r1, 0x421, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x40}}, 0x0) [ 755.194156][T10372] usb 1-1: config 0 descriptor?? 23:44:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x234}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ppoll(&(0x7f0000000600)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) [ 755.397499][ T52] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 755.397671][T10372] usb 1-1: can't set config #0, error -71 [ 755.523589][T10372] usb 1-1: USB disconnect, device number 26 [ 755.532459][ T3129] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.532638][ T3129] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.554295][ T5] kworker/dying (5) used greatest stack depth: 3888 bytes left [ 755.647470][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 755.768470][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 755.781404][ T52] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=a4.83 [ 755.792738][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.000830][ T52] usb 2-1: config 0 descriptor?? [ 756.277922][ T52] rtsx_usb: probe of 2-1:0.0 failed with error -71 [ 756.408938][ T52] usb 2-1: USB disconnect, device number 15 [ 756.422769][T18834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 756.492448][T18855] fuse: Bad value for 'fd' [ 756.675394][T18809] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. [ 756.686260][T18809] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'. 23:44:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) 23:44:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x14, 0x0, &(0x7f0000000040)) [ 757.275952][T18854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 23:44:24 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10012, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x7e}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:44:24 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 23:44:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) 23:44:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x14, 0x0, &(0x7f0000000040)) 23:44:25 executing program 1: socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='me7\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00'}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003c80)) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x11, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 23:44:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000006ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0xc}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}}, 0x0) 23:44:25 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 23:44:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x14, 0x0, &(0x7f0000000040)) 23:44:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001940)=@abs, 0x6e) 23:44:26 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@hyper}) 23:44:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc010100"], 0x1ec}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0) 23:44:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x14, 0x0, &(0x7f0000000040)) 23:44:28 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10012, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x7e}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:44:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 23:44:28 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 23:44:28 executing program 1: r0 = gettid() capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f00000000c0)) 23:44:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e80000000055fedbe9d8f3b423cdacfa7e32fe023136f9f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0ae669e173a649c1cf96574d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c33283ba58d31a20a2251258f8a97db00fab5e2658d496c01085c8e09aa88100002aefce2cff42cf5558624bbddf18b041c7ccdd904b158094737d54202c06dccdd7854115b2ca8600fb1e4e37b082701756d6b2464a86590506d75135857e5afdf1cbcecf39e97e0e9927ff7f0000f92ed1b632f1813b87dfa3610bd098ec9255d4997c5fccd4f4e68dafb59d6af51e4eb486735965611c62f397b14b58f81da8f92d48c264663ed40e0573029b660549419bfb941482094840e6e04c56424da000ec3d28f148db3454345477e4f33ed978c173c8cb0b7e5d2b26169b53fcf97148e20e6da55a9c86ab0b4f138b5f932bf92d0b5a765051b1496e7ce9710e8c50752d4e251af4b631ba0bf50748395febcb907cb130fe6bcd4c6fd440b99af90670"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc010100"], 0x1ec}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0) 23:44:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e80000000055fedbe9d8f3b423cdacfa7e32fe023136f9f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0ae669e173a649c1cf96574d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c33283ba58d31a20a2251258f8a97db00fab5e2658d496c01085c8e09aa88100002aefce2cff42cf5558624bbddf18b041c7ccdd904b158094737d54202c06dccdd7854115b2ca8600fb1e4e37b082701756d6b2464a86590506d75135857e5afdf1cbcecf39e97e0e9927ff7f0000f92ed1b632f1813b87dfa3610bd098ec9255d4997c5fccd4f4e68dafb59d6af51e4eb486735965611c62f397b14b58f81da8f92d48c264663ed40e0573029b660549419bfb941482094840e6e04c56424da000ec3d28f148db3454345477e4f33ed978c173c8cb0b7e5d2b26169b53fcf97148e20e6da55a9c86ab0b4f138b5f932bf92d0b5a765051b1496e7ce9710e8c50752d4e251af4b631ba0bf50748395febcb907cb130fe6bcd4c6fd440b99af90670"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc010100"], 0x1ec}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0) [ 761.676562][T18919] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 23:44:29 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 23:44:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x8a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0xa) 23:44:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc010100"], 0x1ec}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0) 23:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x311, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) 23:44:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc010100"], 0x1ec}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0) 23:44:30 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x35, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 23:44:33 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002940)=[{&(0x7f00000015c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/169, 0xa9, 0x3) 23:44:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc010100"], 0x1ec}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0) 23:44:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x8a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0xa) 23:44:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc010100"], 0x1ec}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0) 23:44:33 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000500)="0100000000000000180100000500c10003050000000000b42e2f") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x9371, &(0x7f0000000500)) 23:44:33 executing program 0: clone(0x20087104ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') exit_group(0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1, 0x0, 0x0) 23:44:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800004, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x2, 0x0, &(0x7f00000003c0)) 23:44:33 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x102, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) write$eventfd(r1, &(0x7f0000000100), 0x8) 23:44:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="cd", 0x1}], 0x1, 0x0) 23:44:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="bf16000000000000b7070000fbffefff4870000002000000400000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150c84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa80a666963c474c287b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcfcf49822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b9b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e5efdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4badd80800000000000000e88d10acd06864eac434bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41fa7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c20680c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0fb5bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905906e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b7cbe066c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b760d645d0fbd45084b76bb6bab2417b6deaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70c0860c1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d34b919f1c76affeed2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c42d4a22646e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895fbd4e2a757a4249a855632ca30e09789811bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f0e20d10ea7e3e62639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557400000000e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d934927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd94b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cd09e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c0ed888a57fcc50400a084a3060030ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b4306301855c89afe345d881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26af150f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8b57a2a35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9bef779df49dfa68a8222f9b41ba8c07cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da8646dc1379d1acbb72fd929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b0755d6be5afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c4468a4808ae562a6bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b50000000001b8357a00"/4462], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000cff000e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x2c3, 0xd17e91c4eaae85fe}, 0x28) 23:44:34 executing program 1: r0 = epoll_create(0x1000) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, &(0x7f0000000100)={[0x5]}, 0x8) 23:44:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x8a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0xa) 23:44:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="550000001800fd0c00000000000081930a600000fca84302910000003900090020000c0002", 0x25}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 23:44:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x102, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) write$eventfd(r1, &(0x7f0000000100), 0x8) 23:44:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "80"}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast=0x5000000}}]}, 0x60}, 0x1, 0x7}, 0x0) 23:44:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001280)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x3) 23:44:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x8a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0xa) 23:44:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x102, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) write$eventfd(r1, &(0x7f0000000100), 0x8) 23:44:35 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f00000000c0)) 23:44:36 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r0, 0x0, 0x0) 23:44:36 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x102, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) write$eventfd(r1, &(0x7f0000000100), 0x8) 23:44:36 executing program 5: futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x4000000) 23:44:36 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001280)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x3) 23:44:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x2}]}, 0x10) 23:44:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0xfd61, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 23:44:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000040)) 23:44:37 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) dup3(r1, r0, 0x0) 23:44:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 23:44:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001280)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x3) 23:44:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}]}, 0x44}}, 0x0) 23:44:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000040)) 23:44:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4, 0x6, 0x2, r4}) dup3(r3, r1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:44:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2c65603ca00000f7f89000000200000000101ff0000000309ff5bffff0400000000000018b0638f0482b3b8", 0x48}], 0x1) 23:44:39 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4}, {0x3d}, {0x6}]}) 23:44:39 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001280)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x3) 23:44:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x2068}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) [ 772.528562][ T35] audit: type=1326 audit(1621295079.660:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19090 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc1a8969fd code=0x0 23:44:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000040)) 23:44:40 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc2604110, &(0x7f0000000100)={0x0, "953515b4d47514434fcbdc7694fb0d9be859409ed56baff77cf5041e30c1c1b1c2a29d5ddef2beda96ea7a4ed40325d8bd2852e554a95e4fe909b74912e8393b"}) [ 773.347448][ T35] audit: type=1326 audit(1621295080.480:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19090 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc1a8969fd code=0x0 23:44:40 executing program 1: fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) 23:44:40 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000806ff0169a70000001100030000140413000300686173079946a0742c696665636c9bf80500040000fd00000900020073797a30000000000c000780080006400010000405000500020000000500010006"], 0x58}}, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xffad) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:44:40 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 23:44:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc028ae92, &(0x7f0000000040)) 23:44:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}, {{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0xfe46}}], 0x18}}], 0x2, 0x0) 23:44:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000000180), 0x12) 23:44:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000005c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580), r1, 0x0, 0x2, 0x4}}, 0x20) 23:44:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000200)) 23:44:42 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x0, @local}}, 0x0, 0x9}, 0xd8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200187ac, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7, 0x1, 0x1, 0x2, 0x0, 0xffffffffffffffbd, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x1000, 0x8000, 0xfffffff7, 0x8, 0x5, 0x4, 0x80, 0x0, 0x200, 0x0, 0x59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfea7) 23:44:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x200, 0x8, 0x200, 0x200, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {0x0, 0xe802000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x9}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 23:44:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="263e660f2b612a0f01cf0fc79e0600baa100b8dc00ef0f380267e30fc79c0c0066b9c909000066b80400000066ba000000000f300f01c566b9800000c00f326635004000000f30e200", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="d5"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x80) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 23:44:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4) sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000040)="82410368e583713f2222391b92e2d7edec776465a46569b747e71bc67c731e34b1b595358a126314da82f687166ea7b6aedd7b9ecd10997ad842997cc6cf289f3915a908295ab0acb6749417df7f6c54713a9dd4140fd3a59127bf535ba7faea699c16b885d69fa410cc48a48cb20714eb7d0227785717544d5071ebd092d9f47566645f41074dc7491344fd4417d31396c72c509ddb09edbde5f2a9f7e79e71812bfece8c20e24d7f", 0xa9}, {&(0x7f0000000100)="28c0f915030cacddf595eca0ce0705f026e6ba3adc91d5a6f2f0ee387297040ac90bd036d9f806ae6d9d128ef2f83b65e1dd3bf31c8fcf5ab31117b0dbfda4ad7d578abe9c8075cc737fcbeaf6657933290c1f337eb7dc0a4ee47c012c7f51871588f72d71ed4706f946ba04e8546bdfabba6a95baa53cd30b6cd91ae11894c435aa035d184d19118feb37c391ad8738b430c5779c4d3b72b521df068e34a3c04fe646f1bd5e44dc71cbf023d91300a1705e38545e3654761a9f730073d19588cd6a91c041aaed70e770fecdd0e9fe691ea38c01b4e34b96f052fc2f4eb71382f9a1e0f00d7831132920ae96dea66162d208d09dc7ae29a9f9815fb23ae8413c43a68df2463daf9ecdfc34547b2b57e278c064e925700002174b09bed6b6f9992e4f3dfe16ba7805a703f35f2a40c395da54bed26f04088d672eaa554c5687da0d03ce5ec45eebc5e363db2f31eeca3db3d67ad8a3ae7d7eba1a38ddcb6d91cec8f6d65ffa451cecc09051aa390b9f360dcca10394b10ffcef6990b3e0553fcfd92508d65b8a33b199b0fdcbbf0dc476c560b90894cabbc8478786ba23f73cf4a3ac51c3d50a5ed199693de7a9eea5cb2c4090c933c0c62a60e20a1346122e9384484b25ccc39bf9db8456bae88f9712fcec9f4275d6e077834b84d84fc67114d8c5593bdf2f8119a78acdd472e834d95222411a05b6815b6dd9cd650a73be40e13e5d41d765823db8cd26f0d9f93b9de43e90f68e5cf534746da04521c4cfe39480d55067279879592ea0570e47a1c92c0744b2657a1aba0df4ca3d726f3e08acad68549a9c55a568711c683a3e007fc2ab744f89c22c78e6c5b15a13b51cf2fdadeb7ee4508b7213a6ba06e5d05db7b58230b3f0cfec0edcaec9c4423e156941dd027bfb9a607c9902f783ab1bba21ad151825652be5e7c2b160d8c863ba42ce501e56880a962e4712727d1f9d2b6600c2dfcf7bb115acb6166b6a66fb75ba54236d02b77ac6c0701ae7f268b2f2da4eefde05cb0896a766b59e38d27c53cdbdff49b8908fe86f63ba0f1686d7fe26459e3df6891aa1373b86905b0915a984c09913fe784a93f2265efda7780a152e9f1a92bb772cdb9cdd2bcd9ac26f81090775fed2a17ccddda5733a702f202eed8621818933b3be89cb565eef0e21ca9b6b0df8522b978e43dabb8ba9e4d3d110117d4a2f02c3464e26c82356507c7a43254f9ebb8d3961fa741b1a2c856a9795b3629710efe552a3be1d6590bcde6a8b07f281476d68d49311d00ef30506d3f0bd00af72800328c8ab445743d933f6c7247c74dd8350f1c84b9de092c793a16e184929c2050688514980ef3deab06cf35cd721da15979ed53c08c1a47506318287f62701b3c677b62901cec747a781ccff56c53a90ffba305863805e4597f3192d7607de824b582ff7ea75320dc3cca1d296611201e7ec3ba0786e3a4aafe1d5c4506247be3f74f4d5317243baa69e9a77ea3f5f7e1326b72133e6b52959827df5a7b774a881f45029294b8a36a03406b3e05c60b8b5cd6514982bd0d843fb1cbdac27fd09acf2fc1da821951ca214b24e6ebe22958501ff1c4cb9fc508c1a5f81b6462c17836ed66714603cf0554d2c1588b2ff38875eacd15f7473d85ea797934ba5e6c28822e288dc0d8063430f809e25554a0fd5a89139c7ac9282d9b2b87399ccfea0b0c8d78dfcf8f447e3859f1c04c70e1290799cf70387d40d476821768d8a12a901a67a8405cc03e28b6f73608971229b134311b8218479e301c92fe2177b2a6675e77de1b93c49c2ffd9c1694ccd90e8197a9f42696794d03929cd64b266ddc41693a2", 0x518}, {0x0, 0x2}, {0x0}, {&(0x7f00000011c0)="d1", 0x1}], 0x5, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote}}}], 0x40}, 0x0) 23:44:42 executing program 0: open$dir(&(0x7f0000000700)='./file0\x00', 0x4840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) 23:44:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) write$vhost_msg(r0, &(0x7f0000000300)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 23:44:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x3}, 0x1c) 23:44:43 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 23:44:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4) sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000040)="82410368e583713f2222391b92e2d7edec776465a46569b747e71bc67c731e34b1b595358a126314da82f687166ea7b6aedd7b9ecd10997ad842997cc6cf289f3915a908295ab0acb6749417df7f6c54713a9dd4140fd3a59127bf535ba7faea699c16b885d69fa410cc48a48cb20714eb7d0227785717544d5071ebd092d9f47566645f41074dc7491344fd4417d31396c72c509ddb09edbde5f2a9f7e79e71812bfece8c20e24d7f", 0xa9}, {&(0x7f0000000100)="28c0f915030cacddf595eca0ce0705f026e6ba3adc91d5a6f2f0ee387297040ac90bd036d9f806ae6d9d128ef2f83b65e1dd3bf31c8fcf5ab31117b0dbfda4ad7d578abe9c8075cc737fcbeaf6657933290c1f337eb7dc0a4ee47c012c7f51871588f72d71ed4706f946ba04e8546bdfabba6a95baa53cd30b6cd91ae11894c435aa035d184d19118feb37c391ad8738b430c5779c4d3b72b521df068e34a3c04fe646f1bd5e44dc71cbf023d91300a1705e38545e3654761a9f730073d19588cd6a91c041aaed70e770fecdd0e9fe691ea38c01b4e34b96f052fc2f4eb71382f9a1e0f00d7831132920ae96dea66162d208d09dc7ae29a9f9815fb23ae8413c43a68df2463daf9ecdfc34547b2b57e278c064e925700002174b09bed6b6f9992e4f3dfe16ba7805a703f35f2a40c395da54bed26f04088d672eaa554c5687da0d03ce5ec45eebc5e363db2f31eeca3db3d67ad8a3ae7d7eba1a38ddcb6d91cec8f6d65ffa451cecc09051aa390b9f360dcca10394b10ffcef6990b3e0553fcfd92508d65b8a33b199b0fdcbbf0dc476c560b90894cabbc8478786ba23f73cf4a3ac51c3d50a5ed199693de7a9eea5cb2c4090c933c0c62a60e20a1346122e9384484b25ccc39bf9db8456bae88f9712fcec9f4275d6e077834b84d84fc67114d8c5593bdf2f8119a78acdd472e834d95222411a05b6815b6dd9cd650a73be40e13e5d41d765823db8cd26f0d9f93b9de43e90f68e5cf534746da04521c4cfe39480d55067279879592ea0570e47a1c92c0744b2657a1aba0df4ca3d726f3e08acad68549a9c55a568711c683a3e007fc2ab744f89c22c78e6c5b15a13b51cf2fdadeb7ee4508b7213a6ba06e5d05db7b58230b3f0cfec0edcaec9c4423e156941dd027bfb9a607c9902f783ab1bba21ad151825652be5e7c2b160d8c863ba42ce501e56880a962e4712727d1f9d2b6600c2dfcf7bb115acb6166b6a66fb75ba54236d02b77ac6c0701ae7f268b2f2da4eefde05cb0896a766b59e38d27c53cdbdff49b8908fe86f63ba0f1686d7fe26459e3df6891aa1373b86905b0915a984c09913fe784a93f2265efda7780a152e9f1a92bb772cdb9cdd2bcd9ac26f81090775fed2a17ccddda5733a702f202eed8621818933b3be89cb565eef0e21ca9b6b0df8522b978e43dabb8ba9e4d3d110117d4a2f02c3464e26c82356507c7a43254f9ebb8d3961fa741b1a2c856a9795b3629710efe552a3be1d6590bcde6a8b07f281476d68d49311d00ef30506d3f0bd00af72800328c8ab445743d933f6c7247c74dd8350f1c84b9de092c793a16e184929c2050688514980ef3deab06cf35cd721da15979ed53c08c1a47506318287f62701b3c677b62901cec747a781ccff56c53a90ffba305863805e4597f3192d7607de824b582ff7ea75320dc3cca1d296611201e7ec3ba0786e3a4aafe1d5c4506247be3f74f4d5317243baa69e9a77ea3f5f7e1326b72133e6b52959827df5a7b774a881f45029294b8a36a03406b3e05c60b8b5cd6514982bd0d843fb1cbdac27fd09acf2fc1da821951ca214b24e6ebe22958501ff1c4cb9fc508c1a5f81b6462c17836ed66714603cf0554d2c1588b2ff38875eacd15f7473d85ea797934ba5e6c28822e288dc0d8063430f809e25554a0fd5a89139c7ac9282d9b2b87399ccfea0b0c8d78dfcf8f447e3859f1c04c70e1290799cf70387d40d476821768d8a12a901a67a8405cc03e28b6f73608971229b134311b8218479e301c92fe2177b2a6675e77de1b93c49c2ffd9c1694ccd90e8197a9f42696794d03929cd64b266ddc41693a2", 0x518}, {0x0, 0x2}, {0x0}, {&(0x7f00000011c0)="d1", 0x1}], 0x5, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote}}}], 0x40}, 0x0) 23:44:43 executing program 5: request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xffffffffffffffff) 23:44:44 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="d5"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x80) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 23:44:44 executing program 0: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)) 23:44:44 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x4c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000240)="e6271df2", 0x4}]) 23:44:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4) sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000040)="82410368e583713f2222391b92e2d7edec776465a46569b747e71bc67c731e34b1b595358a126314da82f687166ea7b6aedd7b9ecd10997ad842997cc6cf289f3915a908295ab0acb6749417df7f6c54713a9dd4140fd3a59127bf535ba7faea699c16b885d69fa410cc48a48cb20714eb7d0227785717544d5071ebd092d9f47566645f41074dc7491344fd4417d31396c72c509ddb09edbde5f2a9f7e79e71812bfece8c20e24d7f", 0xa9}, {&(0x7f0000000100)="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", 0x518}, {0x0, 0x2}, {0x0}, {&(0x7f00000011c0)="d1", 0x1}], 0x5, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote}}}], 0x40}, 0x0) 23:44:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b19, &(0x7f0000000740)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x00\x04@\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x06\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\xb9 \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1\xff\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06\xcd9\x97S\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\P\x9b\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97w\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99\x81\x15\xd4\xbe\x15\xe7\x1eA\x1b\x87q\'D\xd8\xebj+m\xab\xc2\xd1id\"\xfd\v\xc5\x0e\x83k\t}\x9f\xcf\xb8\xdd\xbe\xd6<\xe8\x0f\xd4:i\x84\x97\xe1\x02\x1c\x00\xfd\x13h\x92F\xf9\xda\xfd\xf6\xae\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\xab\xf2\a\xe3\xd9\xec\x16\xd3{\xf2\xf8\xc5\x94Y\x18X\xe5L\xafX\t\xec+\x8c1\xd6\xa1\xec\xfbG\x8b+%\xb1\xd9/\x10l\xe0\xb4\xfc\xf9=v\xa7.\xe6\xbdai\xc7\x9e\xd5\xcd\xd9@I\xeb\xe0\xf9\xd5\x81x\tN\x92VD\x16\xeaV4q\xeb\x92K\xd2\xb0\x1b?\x19\xa1*F\x8b\xf9\x9a\x86\x87\xe7\x01\xf2\xa7\x97\xf1\xe2\xfe\xef\xcfX[d\xbc\t<\x03\xdb\xe0\xa5K$q\xcc\xe3\x9fA\xfb\xc6\a\x82\xa9\x1a\x80\x7f\xc0\xeb\xb4t\xa4\xdf\x17\xe9\xf8\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\vhh6\xc2\x98\xaf\tQ0\xa1\xfeh\xe7\xba\x8e\xe0\x0f\x10Bx\x109\xa1tg\x93V\x7f$\xbb\xdc^\xb9g\x9b\xfa\xfd\x96q\x84\xd9\xf3zD\x9b\x02\xc0\xda<\x8dB\x1f\"\xdb4\xfa\xb7v\xa0;B\xac\xed\a\x8c\x19F4G\x9d\x1c\x917\x02K\xeb\xf8\x0f\x9a\xdc\\\x86\n\xd5\xfdm\x85|\x0f\xa4\xe3\xb4P\xca\xd0\x1e^\x17\t4\xa3.h\x16:\xa1d\xc1\xdd\x00\xf1\xba\x02,\xceP\xe0\f\x9a\t\xab\"\xfd\xbc\xb59\x8b\x00/\n\x84h\xe7\xf5\x1d\xfd\a\xa8Z;rK\x83\x18\xdc~\x0e\xfd\x91\x9d\xb2\xe7l\xa1z\ni\x7f\x8er^\xdbHi\xe0\x95W\xad\xa4L\xd3<\x9b\x05\x8e\xd7ss{/\xd7\xc4\x1b.\xc6\xe6\x85\xab^(\xc3\xedP)\xc9\xdf\xb4\"^}\x96)P9\x14m\xe0\xef\x00\x13v\x19p\xeb\xd5\x04\xa5I\'\x02\xe1\xf241\xf5\x99\xb1zvN\xe4\xca\xaf\xdfb#1\xa8\xe4?\x89!#\x1dp`\x02\xa8\x90\x98%\xb1\xdc\xc8t\x9e?6\x1d\n\xf0\xf5\x93\xb4\xb6\x00\x00\x00\x00\x00\x00V\xac\xe0\xd1M,\x87\xa8cWo\"\'j\xa8\xc3\n\x95\xa2\x8c_\x7fzH\x17F\xbc\x01\x12\xeck\xf4L1\x80_\x8a\x12\xb7a=k\xfb\xa1\be\xb68f\xbf\x93\xcf\xd47\x94GX\xad(\\\xedg~\xed#O\x9e\xe7\x89\xa6\xa8!w\x9e_Sp\x87\xc0\xc6\x02\x02c\xdc\x15\xcf\x1c\x8a\xcb\x97\xe6\x14=\xf1\x89\xe3\x02~\x19\xe0\xf1\xcdK\xce[\xb8W\x16t\x01\a.P\x80\xb7\xc4\xac\rY\xa4e\xcf\xd0\xf3\xd6\xeaD\x8b\xaald\x92\xb1n\xe21\xf1\x1f\xc4\xd3$\xf2\xb0\x13\x1993\x86\xdb|fK\x02\x89[\x9dC\x81\xe5\x921\x9a\xfc*y`\\8f\xc33\x8e\xf1\xc8.\v~\x87\fri[v\x193\x0eS\x7fE\x98S\x13\xf4\xaa\x8b\x9c\xfe\xc2\xbe\x03X?\xe7\xd5P\xd1[\xb52\xdb\xfc\xfd\xa3\x91\xc3\x884f.\x8e\x00\xd5\x85\x10\x18|xq\xf0\xcc\xcf\x96o\xe5@\x171!\xa64\xe0\xaf\xc2\x1fr\xe0\xf6\x85\xdb\xe32\x8e\xa3\xc4\xa4/\xd0\xef\xb6\r)u\x1b\x1c\xd6\v\x8bPO\ni\xd7\x7f4k\xf9\xe5<\xcdy\xac\xe7N\'\xf3\xf4\r\x90*\xb5\xe4\f\t\x1dYQ\xf6Ez\x96\a\x1b48\xa0\xff\xa0\x9a\xf8\xac\a\xa1u<\xdc\xff\x05\xea\xa8J6%Ju\x86\xd0\xfe;\xab\x80\xfbWk|\xa6fM\xb1\xcfI\xbf\xb7\xfd%\x85\x91\xf8\xf9?\t\xfee\xff\x8d\xb3\xcb2\x90\x15\x83}\xa92/0u\xf3\x12a\xf9\xba\xd7\xf4E?\xe6j\xe8^\xdf\xd2\xef*\xf9p*\xa5\xa4\x0f\xab\xcf\n\xecH\xb7\xa8Vf\x02\x03\x97\x170*\n\x87=A\xb2a\xdeD\x88\'\x06>\xecIQ\xf8\x95K\xcf\xbb5`\xb9`\xd3\x1d\xf5\x97t%\x98\xc3o\xc9e\xfbP\xbf\"l\xc7X\x98\xbe=1\xf6\xf0M%\x95rP\xf3\xd0\xa6\x11\xf1Y,\xbe\aW\"r\x8c\xa85Z.@]\xc5s\xd0_b\fw`{\xfe\x05f\xcb\v\'\xd6\xb7I+\xe1\xd3\xe4\xd1\xc9\xcc\'\xc2\xd1\xdc+\xd2\x14\xa85\x93\x06h\xd9D(\xaaL\x00!\xf9~\xa4\x85\xceMz\xc5t\xbag\xc4\xba[\x83B\xc7\xad&a\xec\x9dY,\'Y\x98\xf6\xb1rx\xbd\xff\t\xf6:\xd0\xeb\xbcV\xf1\xda\xec\xcezc\xc8g\x1f\xaf\xeb\xf8\x95\x17o8\xb2q\x1d\xaa-y\x15') 23:44:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="d5"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x80) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 23:44:45 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1ed) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) close(r0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:44:45 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) 23:44:45 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1ed) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) close(r0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:44:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x101802) ioctl$USBDEVFS_RESETEP(r0, 0x8008550e, 0x0) 23:44:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4) sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000040)="82410368e583713f2222391b92e2d7edec776465a46569b747e71bc67c731e34b1b595358a126314da82f687166ea7b6aedd7b9ecd10997ad842997cc6cf289f3915a908295ab0acb6749417df7f6c54713a9dd4140fd3a59127bf535ba7faea699c16b885d69fa410cc48a48cb20714eb7d0227785717544d5071ebd092d9f47566645f41074dc7491344fd4417d31396c72c509ddb09edbde5f2a9f7e79e71812bfece8c20e24d7f", 0xa9}, {&(0x7f0000000100)="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", 0x518}, {0x0, 0x2}, {0x0}, {&(0x7f00000011c0)="d1", 0x1}], 0x5, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @remote}}}], 0x40}, 0x0) 23:44:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='#', 0x1}], 0x1, &(0x7f00000001c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x5e}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x38}, 0xc880) 23:44:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="d5"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x80) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 23:44:46 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1ed) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) close(r0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:44:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@mcast2}, 0x14) 23:44:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1007fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @mcast1}, 0xffffffffffffff47) sendmmsg$alg(r0, &(0x7f0000000480)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x29, 0x36}], 0x18}], 0x1, 0x0) 23:44:47 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1ed) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) close(r0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:44:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x48, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x48}}, 0x0) 23:44:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x22}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 23:44:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x48}, {}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 23:44:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x0, @remote}], 0x10) 23:44:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1007fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @mcast1}, 0xffffffffffffff47) sendmmsg$alg(r0, &(0x7f0000000480)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x29, 0x36}], 0x18}], 0x1, 0x0) 23:44:47 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, "53045b365df8687a13f7acc15a85e95e15454687c666e20000000000fbffffff"}) 23:44:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getitimer(0x2, &(0x7f0000000000)) 23:44:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x2a, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/74, 0x4a) 23:44:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x170, 0x170, 0x180, 0x170, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x80000000000}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, 'macvlan1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x270) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x1}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb01001f1}, 0x1e) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c090}, 0x4040880) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r5, 0x0) preadv(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) 23:44:48 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1007fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @mcast1}, 0xffffffffffffff47) sendmmsg$alg(r0, &(0x7f0000000480)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x29, 0x36}], 0x18}], 0x1, 0x0) 23:44:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x24}, {0x6c}, {0x6}]}) 23:44:49 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) 23:44:49 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1007fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @mcast1}, 0xffffffffffffff47) sendmmsg$alg(r0, &(0x7f0000000480)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x29, 0x36}], 0x18}], 0x1, 0x0) 23:44:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@get={0x1, 0x0, 0x255ce852}) [ 782.340192][ T35] audit: type=1326 audit(1621295089.480:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19265 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffe623dc9fd code=0x0 23:44:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 23:44:50 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000280)="0cdd64495baf853afcd01c3bae125969cbc415c41a0c1dd55243ca036a5fa9cce514ecbf258c4f886aba40f3c9037b89b67c623ef9833a22acca9b2dd762d1e679", 0x41}) 23:44:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) shutdown(r0, 0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180), 0x14) 23:44:50 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x380, 0x150, 0x150, 0x0, 0x0, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x10001, 0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x7f, 0x7fffffff}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4db) 23:44:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc0046686, 0x0) 23:44:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000b, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 23:44:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) keyctl$dh_compute(0x2, 0x0, 0x0, 0x0, 0x0) 23:44:51 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) fork() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:44:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 23:44:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc0046686, 0x0) 23:44:51 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x38}}, 0x0) 23:44:51 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:44:52 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000180)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400000f30b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x50}], 0x1, 0x0, 0x0, 0x0) fork() ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:44:52 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x2001, 0x3, 0x290, 0x120, 0x150, 0x150, 0x120, 0x150, 0x1f8, 0x1e8, 0x1e8, 0x1f8, 0x1e8, 0x3, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@local, @empty, 0x0, 0x0, 'batadv_slave_1\x00', 'caif0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) 23:44:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc0046686, 0x0) 23:44:52 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x8, &(0x7f0000000640)=0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:44:53 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0x0, @dev}}]}, 0x110) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="03366dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) [ 785.904330][T19315] ipt_CLUSTERIP: Please specify destination IP [ 785.979689][T19319] ipt_CLUSTERIP: Please specify destination IP 23:44:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc0046686, 0x0) 23:44:53 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) fork() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:44:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0xffffffff}}, 0x0) 23:44:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, &(0x7f0000000180)=0x8) 23:44:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, '&//-}/${$-\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}}, 0x0) 23:44:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x2c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xa}) 23:44:54 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x39, 0xcd, 0xc3, 0x8, 0xaf9, 0x10, 0x5027, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaf, 0xeb, 0xdc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0}) [ 788.417513][ T52] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 788.477674][ C1] sd 0:0:1:0: tag#5894 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 788.488744][ C1] sd 0:0:1:0: tag#5894 CDB: Write(6) 0a 00 00 00 00 00 [ 788.657614][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 788.778999][ T52] usb 1-1: New USB device found, idVendor=0af9, idProduct=0010, bcdDevice=50.27 [ 788.790445][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.875991][ T52] usb 1-1: config 0 descriptor?? [ 788.959806][ T52] gspca_main: spca508-2.14.0 probing 0af9:0010 23:44:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x24}, {0x3d}, {0x6}]}) 23:44:56 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) fork() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:44:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) 23:44:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000200)) 23:44:56 executing program 3: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x300000}, 0xffffffffffffff04, 0x0}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="100000400300000000", 0x9}]) [ 789.387478][ T52] gspca_spca508: reg_read err -71 [ 789.411154][ T52] gspca_spca508: reg_read err -71 [ 789.432896][ T52] gspca_spca508: reg_read err -71 [ 789.482300][ T52] gspca_spca508: reg_read err -71 [ 789.520491][ T52] gspca_spca508: reg write: error -71 [ 789.526704][ T52] spca508: probe of 1-1:0.0 failed with error -71 [ 789.659986][ T52] usb 1-1: USB disconnect, device number 27 [ 789.958171][ T35] audit: type=1326 audit(1621295097.090:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19366 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 23:44:57 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, '\x00', 0x1}, 0x10000019a) r0 = syz_open_dev$media(&(0x7f0000000040), 0x9, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) [ 790.277588][ T52] usb 1-1: new high-speed USB device number 28 using dummy_hcd 23:44:57 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000100)="5500000018007f7000fe01b282a280930a60000248a84302910000003900090023001f00180000e60d000500fe8000072000000000000014e9030b9d566881b16732009b1100b1df13000000fb0000400900000040", 0x55}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 23:44:57 executing program 3: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x300000}, 0xffffffffffffff04, 0x0}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="100000400300000000", 0x9}]) [ 790.529256][ T52] usb 1-1: Using ep0 maxpacket: 8 23:44:57 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) fork() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) [ 790.648131][ T52] usb 1-1: New USB device found, idVendor=0af9, idProduct=0010, bcdDevice=50.27 [ 790.658464][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.707295][T19378] IPv6: NLM_F_CREATE should be specified when creating new route [ 790.728859][ T35] audit: type=1326 audit(1621295097.860:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19366 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 [ 790.825826][ T52] usb 1-1: config 0 descriptor?? [ 790.921532][ T52] gspca_main: spca508-2.14.0 probing 0af9:0010 23:44:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000012000000000a0000000600010015"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) 23:44:58 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 791.447295][ T52] gspca_spca508: reg_read err -110 [ 791.467975][ T52] gspca_spca508: reg_read err -32 [ 791.487418][ T52] gspca_spca508: reg_read err -32 [ 791.557270][ T52] gspca_spca508: reg_read err -32 [ 791.578042][ T52] gspca_spca508: reg_read err -32 [ 791.615450][ T52] gspca_spca508: reg write: error -32 [ 791.622428][ T52] spca508: probe of 1-1:0.0 failed with error -32 23:44:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000880)={'wlan1\x00'}) 23:44:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x6, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="07007af70200001283cc0e1a0007b65caba62d0000000000dc6f0d4ae113"], 0x41) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xffffffff) read(r1, &(0x7f0000001c40)=""/242, 0xf2) r2 = syz_open_pts(r1, 0x0) r3 = dup2(r2, r1) ioctl$TCXONC(r3, 0x540a, 0x3) 23:44:58 executing program 3: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x300000}, 0xffffffffffffff04, 0x0}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="100000400300000000", 0x9}]) [ 791.734601][ T52] usb 1-1: USB disconnect, device number 28 23:44:59 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 23:44:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x400}]}}}]}, 0x3c}}, 0x0) 23:44:59 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 23:45:00 executing program 3: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x300000}, 0xffffffffffffff04, 0x0}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="100000400300000000", 0x9}]) 23:45:00 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_newneigh={0x1c}, 0x1c}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000040), 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="e7", 0x1}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 23:45:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x6, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="07007af70200001283cc0e1a0007b65caba62d0000000000dc6f0d4ae113"], 0x41) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xffffffff) read(r1, &(0x7f0000001c40)=""/242, 0xf2) r2 = syz_open_pts(r1, 0x0) r3 = dup2(r2, r1) ioctl$TCXONC(r3, 0x540a, 0x3) 23:45:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000880)={'wlan1\x00'}) 23:45:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 23:45:01 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 23:45:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) 23:45:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000880)={'wlan1\x00'}) 23:45:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0207000702"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) [ 794.590766][T19445] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 23:45:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x6, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="07007af70200001283cc0e1a0007b65caba62d0000000000dc6f0d4ae113"], 0x41) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xffffffff) read(r1, &(0x7f0000001c40)=""/242, 0xf2) r2 = syz_open_pts(r1, 0x0) r3 = dup2(r2, r1) ioctl$TCXONC(r3, 0x540a, 0x3) [ 795.029890][T19445] device bond3 entered promiscuous mode [ 795.058290][T19449] bond3: (slave bridge1): making interface the new active one [ 795.067384][T19449] device bridge1 entered promiscuous mode [ 795.075513][T19449] bond3: (slave bridge1): Enslaving as an active interface with an up link 23:45:02 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 795.323746][T19445] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 795.388194][T19490] bond3: (slave bridge2): Enslaving as a backup interface with an up link 23:45:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000880)={'wlan1\x00'}) 23:45:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) 23:45:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x6, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="07007af70200001283cc0e1a0007b65caba62d0000000000dc6f0d4ae113"], 0x41) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xffffffff) read(r1, &(0x7f0000001c40)=""/242, 0xf2) r2 = syz_open_pts(r1, 0x0) r3 = dup2(r2, r1) ioctl$TCXONC(r3, 0x540a, 0x3) 23:45:03 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x400, 0x10001) [ 796.997980][ T35] audit: type=1800 audit(1621295104.130:67): pid=19566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=13917 res=0 errno=0 23:45:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_PIT2(r1, 0x8048ae66, &(0x7f0000000000)) 23:45:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) 23:45:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x3c, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:45:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100e721faffff43790f000138", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100005"], 0x30}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000010000108000000000000ac6d50665c51", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500"], 0x30}, 0x1, 0xffffa888}, 0x0) 23:45:05 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x1d}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@local}, @host, 0x0, 0x0, 0x8546}) 23:45:05 executing program 5: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) dup2(r2, r1) r3 = dup(r0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000140)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 23:45:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 798.428797][T19631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 798.462992][T19631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 798.473070][T19631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:45:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x76}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 799.334590][T19653] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.360091][T19653] bridge0: port 2(bridge_slave_1) entered disabled state 23:45:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x175d900f) 23:45:07 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x1d}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@local}, @host, 0x0, 0x0, 0x8546}) 23:45:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x100fa00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480), &(0x7f0000000180)=0x1, 0x8, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="532dd8e10a23383798b5862ed01ee3c6cab370d76b2c0500000063ea690371152d7fbed6c1b068a44d62ac7aaeac85c3f601c607ced7c6fea96ef3225ddbfca457cbb5c4c77807d8a3cc7695eeabf85e8e13fbc67d2757aebd60070fc64a3e88b5b6165c47d59b75373e13bce70186026448fd62691300008c0e1568dfd9fff25f4d20bbff489174fac86b72f46bc0cb9485e8", 0x93}, {&(0x7f0000000280)="c04c5e53e7fe718edbe37edda913c70018267c2cfde55d6291c8932fdabeac90906d3f20a3c87ce9f93b9afad4393f65c084954cb632214a02283add27260ee66b04f3122e7f2ee2b420941d408f03268f72d042fd51e387dd3077b9eb880afc28c076e2ba79a74806b69e6a23758c872fb67e38da32f1b1b923a151b23596a2fdce1860c59c9c4b000000000000228e545fe867614a0fd371cfeeac3ae71e3ef0ef2b50747490c96ba7e5c95c282c92c270b14f3d3c899cc368ba5d27a06d77e4b6f53d10e15a70d8a6d3865a8701f6cd0e1d354624", 0xd6}, {&(0x7f00000001c0)}], 0x3, 0x100003f, 0xad, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) 23:45:07 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x1d}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@local}, @host, 0x0, 0x0, 0x8546}) 23:45:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 800.757283][ T35] audit: type=1800 audit(1621295107.890:68): pid=19671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=13917 res=0 errno=0 23:45:08 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x1d}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@local}, @host, 0x0, 0x0, 0x8546}) 23:45:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000240)="004247118506", 0x0, 0x0, 0x0, 0x0, 0x0}) 23:45:09 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x0, 0x6}, 0x10) 23:45:09 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x1d}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@local}, @host, 0x0, 0x0, 0x8546}) 23:45:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 23:45:09 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x1d}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@local}, @host, 0x0, 0x0, 0x8546}) 23:45:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 23:45:09 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "09861a", 0x10, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev}, {[@srh={0x2c}], "985a80d985b30f9c"}}}}}, 0x0) 23:45:09 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f00000020c0)=0x1, 0x40000000) 23:45:10 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x40045010, 0x0) 23:45:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 23:45:10 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x1d}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@local}, @host, 0x0, 0x0, 0x8546}) 23:45:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce4", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:45:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCXONC(r0, 0x40045436, 0x2) 23:45:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8839, 0x2) read(r0, 0x0, 0x0) 23:45:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2d, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'bridge_slave_0\x00', 'veth1\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3fe7102d90a6e69d238e8b734a3b2f9e47dbe14f23318a02e01944437b07"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 23:45:11 executing program 0: syz_emit_ethernet(0x2b, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, "c3"}}}}, 0x0) 23:45:11 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045009, &(0x7f0000000100)=0x4) 23:45:11 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bb9b40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, &(0x7f00000027c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0xfffffffffffffe4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x18, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:45:12 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) 23:45:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@dev}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 23:45:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0) 23:45:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="8d5a3b9bca0634e8e81899d188a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 805.641388][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:12 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r2], 0x1}, 0x58) [ 805.759586][T10372] usb 3-1: new high-speed USB device number 35 using dummy_hcd 23:45:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0xfa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x0, 0x3}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 806.171564][T10372] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 806.182382][T10372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:45:13 executing program 1: syz_emit_ethernet(0xbae, &(0x7f0000001900)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0505a8", 0xb78, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c791153d5791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a3a1328c5f93037dc1435c11b3000000008403af736b41e5a8"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x84, "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"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26576213e1010898b256e481da1018059f850b9131c1a16267a090b62089ee0d776d581b1bd756ff901000000000000000"}, {0x0, 0xbb, "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"}]}}}}}}, 0x0) [ 806.317677][T10372] usb 3-1: config 0 descriptor?? 23:45:13 executing program 3: syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 806.709695][T19759] IPv6: addrconf: prefix option has invalid lifetime 23:45:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="8d5a3b9bca0634e8e81899d188a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 806.800114][T19759] IPv6: addrconf: prefix option has invalid lifetime 23:45:14 executing program 1: syz_emit_ethernet(0xbae, &(0x7f0000001900)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0505a8", 0xb78, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c791153d5791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a3a1328c5f93037dc1435c11b3000000008403af736b41e5a8"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x84, "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"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26576213e1010898b256e481da1018059f850b9131c1a16267a090b62089ee0d776d581b1bd756ff901000000000000000"}, {0x0, 0xbb, "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"}]}}}}}}, 0x0) [ 807.457443][T10372] usb 3-1: ATUSB: AT86RF231 version 0 23:45:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="8d5a3b9bca0634e8e81899d188a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 807.677599][T10372] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 807.686947][T10372] usb 3-1: Firmware version (0.0) predates our first public release. [ 807.696497][T10372] usb 3-1: Please update to version 0.2 or newer [ 807.878408][T19777] IPv6: addrconf: prefix option has invalid lifetime [ 807.923401][T10372] usb 3-1: Firmware: build [ 808.337276][T10372] usb 3-1: atusb_control_msg: req 0x20 val 0xff idx 0xe, error -71 [ 808.347284][T10372] usb 3-1: atusb_probe: setup failed, error = -71 [ 808.541093][T10372] atusb: probe of 3-1:0.0 failed with error -71 [ 808.627582][T10372] usb 3-1: USB disconnect, device number 35 [ 809.275656][T10372] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 809.707584][T10372] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 809.717893][T10372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.790553][T10372] usb 3-1: config 0 descriptor?? 23:45:17 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000280)=""/187, &(0x7f0000000000)=0xbb) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:45:17 executing program 1: syz_emit_ethernet(0xbae, &(0x7f0000001900)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0505a8", 0xb78, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c791153d5791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a3a1328c5f93037dc1435c11b3000000008403af736b41e5a8"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x84, "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"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26576213e1010898b256e481da1018059f850b9131c1a16267a090b62089ee0d776d581b1bd756ff901000000000000000"}, {0x0, 0xbb, "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"}]}}}}}}, 0x0) 23:45:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @empty}}) close(r0) 23:45:17 executing program 3: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) 23:45:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="8d5a3b9bca0634e8e81899d188a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 23:45:17 executing program 5: syz_usb_connect$uac1(0x0, 0x93, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xff, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20c58637abfecad1, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 810.347364][T10372] usb 3-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 810.356790][T10372] usb 3-1: Firmware version (0.0) predates our first public release. [ 810.371542][T10372] usb 3-1: Please update to version 0.2 or newer [ 810.380369][T10372] usb 3-1: atusb_probe: initialization failed, error = -71 [ 810.390102][T10372] atusb: probe of 3-1:0.0 failed with error -71 [ 810.755257][T19815] IPv6: addrconf: prefix option has invalid lifetime [ 810.867068][ T3086] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 810.909849][T10372] usb 3-1: USB disconnect, device number 36 23:45:18 executing program 3: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) [ 811.127134][ T3086] usb 6-1: Using ep0 maxpacket: 32 [ 811.258437][ T3086] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 811.267985][ T3086] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 811.277960][ T3086] usb 6-1: config 1 has no interface number 1 [ 811.284418][ T3086] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 23:45:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbec", 0x7f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 811.300598][ T3086] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 23:45:18 executing program 1: syz_emit_ethernet(0xbae, &(0x7f0000001900)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0505a8", 0xb78, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xb, "a78c791153d5791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a3a1328c5f93037dc1435c11b3000000008403af736b41e5a8"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x84, "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"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26576213e1010898b256e481da1018059f850b9131c1a16267a090b62089ee0d776d581b1bd756ff901000000000000000"}, {0x0, 0xbb, "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"}]}}}}}}, 0x0) 23:45:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @empty}}) close(r0) [ 811.735847][T19838] IPv6: addrconf: prefix option has invalid lifetime [ 811.789625][ T3086] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.801430][ T3086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.810500][ T3086] usb 6-1: Product: syz [ 811.815240][ T3086] usb 6-1: Manufacturer: syz [ 811.820865][ T3086] usb 6-1: SerialNumber: syz 23:45:19 executing program 3: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) 23:45:19 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000280)=""/187, &(0x7f0000000000)=0xbb) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:45:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000340)="c403292116deb8010000000f01c1480fc76e1e1ea1d1ec3500000000470f00d2440f785b5a6566400f3881352f000000c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x51}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 812.357465][ T3086] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 812.366256][ T3086] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 812.574997][ T3086] usb 6-1: USB disconnect, device number 20 23:45:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 23:45:20 executing program 3: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) [ 813.137095][ T3086] usb 6-1: new high-speed USB device number 21 using dummy_hcd 23:45:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @empty}}) close(r0) 23:45:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x3c}}, 0x0) [ 813.378219][ T3086] usb 6-1: Using ep0 maxpacket: 32 [ 813.499173][ T3086] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 813.508732][ T3086] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 813.519190][ T3086] usb 6-1: config 1 has no interface number 1 [ 813.526026][ T3086] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 813.541551][ T3086] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 813.875254][T19889] input: syz1 as /devices/virtual/input/input17 23:45:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x7c, 0x81, 0x0, 0x400}, {0x2, 0x0, 0x3e}, {0x6}]}) 23:45:21 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfe9c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000005c, 0x0) 23:45:21 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000280)=""/187, &(0x7f0000000000)=0xbb) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 814.189890][T19893] input: syz1 as /devices/virtual/input/input18 [ 814.267303][ T3086] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.277541][ T3086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.470131][ T3086] usb 6-1: can't set config #1, error -71 [ 814.524658][ T3086] usb 6-1: USB disconnect, device number 21 23:45:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, 0x90) 23:45:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @empty}}) close(r0) 23:45:21 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40085400, 0x14001bf) [ 814.967970][ T35] audit: type=1326 audit(1621295122.100:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19920 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 23:45:22 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bad40440cd0c39004208010203010902120001000000000904"], 0x0) [ 815.747583][ T35] audit: type=1326 audit(1621295122.880:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19920 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 23:45:22 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000280)=""/187, &(0x7f0000000000)=0xbb) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:45:23 executing program 4: r0 = epoll_create(0x3f) r1 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000040)) 23:45:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x13, 0x0, &(0x7f0000000480)) 23:45:23 executing program 5: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f0000000080), 0xca, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x810c5701, &(0x7f0000000000)={0x0, 0x1000}) [ 816.499570][ T52] usb 2-1: new high-speed USB device number 16 using dummy_hcd 23:45:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 816.973625][ T3129] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.980851][ T3129] ieee802154 phy1 wpan1: encryption failed: -22 23:45:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) [ 817.078007][ T52] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 8.42 [ 817.088723][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.097748][ T52] usb 2-1: Product: syz [ 817.102326][ T52] usb 2-1: Manufacturer: syz [ 817.107495][ T52] usb 2-1: SerialNumber: syz [ 817.352524][ T52] usb 2-1: config 0 descriptor?? [ 817.409205][ T52] pvrusb2: Hardware description: Terratec Grabster AV400 [ 817.416991][ T52] pvrusb2: ********** [ 817.421073][ T52] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 817.434268][ T52] pvrusb2: Important functionality might not be entirely working. [ 817.443592][ T52] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. 23:45:24 executing program 3: prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) madvise(&(0x7f000047e000/0x1000)=nil, 0x1000, 0xe) [ 817.456571][ T52] pvrusb2: ********** 23:45:24 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f51108000100020100020800028001", 0x21) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0xd1c7, 0x0) 23:45:25 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='>', 0x1}], 0x1}, 0x200480c1) sendmsg$sock(r0, &(0x7f0000002c80)={&(0x7f0000001800)=@vsock={0x28, 0x0, 0x0, @local}, 0xc2, &(0x7f0000002b80)=[{&(0x7f0000001880)="392bf4cfe9b1cd5a72d9e10fb3959d5b537ea82345eb767790915a6d4ec85d03fd8760b732121001fe6cf587f64ef7a5d7a6b7a4bff7fe43e1e8552305eae007f3c278d0d67eefec94447fb0e69910a6d50b3da02cf5bf7068e4c5a68f1ed182f4b6aa983ac77511629ee85f0a4d2faca4cfbb505b97d7483764decd990b58b24704910d3e996b2656acf65090d0c5d910a3daf47c99c01e87d3d4d919ea5570b2703c5c22769833050d", 0xffffff9b}, {&(0x7f0000001940)="17dfe2b28c5d3be4ac1058e4703e940a6d4ec1f602d73b2e", 0x18}, {&(0x7f0000001980)="f6db1afd75d4082e17d8b8825f3e6252e19ebc53988c29b4f72481750f93f0b6bb3cdecd471a5ef8952be398f9df817f13a08976283f050772f306412309d2eb995f8ea933c647a1fb350d5b8f0050212d6e5137995e3495d9e384147fbca434e2f201cc17d74268cb50271546699d0a7ec81e3ee444cc765ed9f8d61a62d77cca0775fa542b4729cc416482768be717cbb802d2723eb8f8815a03b5d63bbec65b3debfc0c7e1f3759b83659bdbebbe47c3291e9c1a90f087e038a4cc4d95de5a493fadb31ebaa5aca0d4e7e179fb1f67abc13", 0xd3}, {&(0x7f0000001a80)="b3ce8401b703aa1b2e9ba1b51f5ac85677a4914d3af6beb901f2a67ecba57592e62b7012b25770719f2666fab4cba5f862", 0x31}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="3095c7538cb7702cd408e8af3cb373456860e67e859d6bfb395d72ea07b5229ed7c35386733ce03b4d54a22da48b5f13452ac4323f4454795dc190d5effbc4a00ec9a975b06f6880375239b74452c0e821870652f50d8bc0de5846a705d41c0a333ba62cf1cb713af70865ca79beda8244b2c5893623c409b590f71555b126e668f7a728a1c37123e887e5c29d40759506ee4663001dfc95803567b25c7d06c64a924579e63d16c52a82c9bcfd4133029a7dc7c532a30abd1e", 0xb9}], 0x6, &(0x7f0000002c00), 0x48}, 0x0) [ 817.997948][ T3842] pvrusb2: Invalid write control endpoint [ 818.023718][ T52] usb 2-1: USB disconnect, device number 16 [ 818.201051][ T3842] pvrusb2: Invalid write control endpoint [ 818.207661][ T3842] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 818.217924][ T3842] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 818.226105][ T3842] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 818.237109][ T3842] pvrusb2: Device being rendered inoperable [ 818.243169][ T3842] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 818.252965][ T3842] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 818.262926][ T3842] pvrusb2: Attached sub-driver cx25840 [ 818.268769][ T3842] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 818.280140][ T3842] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. 23:45:25 executing program 2: syz_emit_ethernet(0x25e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x228, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80338"}, {0x0, 0xf7, "ffffefffa0f8ca1cc8000800"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) 23:45:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) [ 818.697338][ T52] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 819.054752][ T3842] ------------[ cut here ]------------ [ 819.061145][ T3842] sysfs group 'power' not found for kobject '1-0044' [ 819.073280][ T3842] WARNING: CPU: 0 PID: 3842 at fs/sysfs/group.c:281 sysfs_remove_group+0x1d7/0x610 [ 819.084479][ T3842] Modules linked in: [ 819.089177][ T3842] CPU: 0 PID: 3842 Comm: pvrusb2-context Tainted: G W 5.12.0-rc6-syzkaller #0 [ 819.100754][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.112052][ T3842] RIP: 0010:sysfs_remove_group+0x1d7/0x610 [ 819.118873][ T3842] Code: 20 48 09 c8 49 89 87 70 09 00 00 49 c7 87 80 0c 00 00 00 00 00 00 48 c7 c7 26 9f 7c 90 4c 89 e6 4c 89 f2 31 c0 e8 89 cd be fe <0f> 0b e9 00 04 00 00 8b 7d 9c e8 aa b2 98 ff e9 68 fe ff ff 8b 7d [ 819.141544][ T3842] RSP: 0018:ffff88810c067978 EFLAGS: 00010246 [ 819.148871][ T3842] RAX: cc0f0faebe1bc000 RBX: 0000000000000000 RCX: ffff88810c089f40 [ 819.159000][ T3842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 819.168142][ T3842] RBP: ffff88810c0679e0 R08: ffffffff81a4b0aa R09: ffff88813fffa000 [ 819.177798][ T3842] R10: 0000000000000003 R11: 00000000ffffffff R12: ffffffff900217d8 [ 819.187001][ T3842] R13: 0000000000000000 R14: ffff888121367cc0 R15: ffff88810c08a9c8 [ 819.196445][ T3842] FS: 0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 [ 819.207153][ T3842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.214965][ T3842] CR2: 00000000014a53ad CR3: 00000001169e5000 CR4: 00000000001526f0 [ 819.224264][ T3842] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 819.234364][ T3842] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 819.244055][ T3842] Call Trace: [ 819.248048][ T3842] dpm_sysfs_remove+0x123/0x160 [ 819.253840][ T3842] device_del+0x3ca/0x1d30 [ 819.259994][ T3842] ? kmsan_get_metadata+0x116/0x180 [ 819.266269][ T3842] ? kmsan_get_metadata+0x116/0x180 [ 819.268134][ T52] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 8.42 [ 819.272568][ T3842] ? kmsan_get_metadata+0x116/0x180 [ 819.283232][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.288041][ T3842] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 819.296112][ T52] usb 2-1: Product: syz [ 819.296198][ T52] usb 2-1: Manufacturer: syz [ 819.296279][ T52] usb 2-1: SerialNumber: syz [ 819.319795][ T3842] device_unregister+0x37/0x80 [ 819.325876][ T3842] __unregister_client+0x3bd/0x470 [ 819.332048][ T3842] device_for_each_child+0x171/0x270 [ 819.338301][ T3842] ? __process_removed_adapter+0x730/0x730 [ 819.345059][ T3842] i2c_del_adapter+0x8b6/0xc30 [ 819.350742][ T3842] pvr2_i2c_core_done+0xb6/0x110 [ 819.356588][ T3842] pvr2_hdw_destroy+0x356/0x5a0 [ 819.362701][ T3842] pvr2_context_destroy+0xc6/0x7f0 [ 819.368956][ T3842] pvr2_context_thread_func+0x780/0x14b0 [ 819.375843][ T3842] ? init_wait_entry+0x190/0x190 [ 819.382550][ T3842] kthread+0x521/0x560 [ 819.387570][ T3842] ? pvr2_context_global_init+0x150/0x150 [ 819.394194][ T3842] ? kthread_blkcg+0x110/0x110 [ 819.400068][ T3842] ret_from_fork+0x1f/0x30 [ 819.405543][ T3842] ---[ end trace ddbc873d75eb72a9 ]--- [ 819.414777][ T3842] ------------[ cut here ]------------ [ 819.421381][ T3842] sysfs group 'power' not found for kobject 'i2c-1' [ 819.430092][ T3842] WARNING: CPU: 0 PID: 3842 at fs/sysfs/group.c:281 sysfs_remove_group+0x1d7/0x610 [ 819.441136][ T3842] Modules linked in: [ 819.445762][ T3842] CPU: 0 PID: 3842 Comm: pvrusb2-context Tainted: G W 5.12.0-rc6-syzkaller #0 [ 819.458588][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.470406][ T3842] RIP: 0010:sysfs_remove_group+0x1d7/0x610 [ 819.477250][ T3842] Code: 20 48 09 c8 49 89 87 70 09 00 00 49 c7 87 80 0c 00 00 00 00 00 00 48 c7 c7 26 9f 7c 90 4c 89 e6 4c 89 f2 31 c0 e8 89 cd be fe <0f> 0b e9 00 04 00 00 8b 7d 9c e8 aa b2 98 ff e9 68 fe ff ff 8b 7d [ 819.499986][ T3842] RSP: 0018:ffff88810c0677c0 EFLAGS: 00010246 [ 819.507780][ T3842] RAX: cc0f0faebe1bc000 RBX: 0000000000000000 RCX: ffff88810c089f40 [ 819.517957][ T3842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 819.527043][ T3842] RBP: ffff88810c067828 R08: ffffffff81a4b0aa R09: ffff88813fffa000 [ 819.536085][ T3842] R10: 0000000000000003 R11: 00000000ffffffff R12: ffffffff900217d8 [ 819.545351][ T3842] R13: 0000000000000000 R14: ffff888121367620 R15: ffff88810c08a9c8 [ 819.555075][ T3842] FS: 0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 [ 819.566148][ T3842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.574154][ T3842] CR2: 00000000014a53ad CR3: 00000001169e5000 CR4: 00000000001526f0 [ 819.583598][ T3842] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 819.593100][ T3842] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 819.602478][ T3842] Call Trace: [ 819.606380][ T3842] dpm_sysfs_remove+0x123/0x160 [ 819.612181][ T3842] device_del+0x3ca/0x1d30 [ 819.617398][ T3842] ? kmsan_internal_set_origin+0x85/0xc0 [ 819.624165][ T3842] ? kmsan_get_metadata+0x116/0x180 [ 819.630266][ T3842] ? kmsan_get_metadata+0x116/0x180 [ 819.636555][ T3842] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 819.643784][ T3842] cdev_device_del+0x53/0x1b0 [ 819.649595][ T3842] i2cdev_notifier_call+0x520/0x600 [ 819.655538][ T3842] ? i2cdev_detach_adapter+0x320/0x320 [ 819.662559][ T3842] blocking_notifier_call_chain+0x18b/0x340 [ 819.665782][ T52] usb 2-1: config 0 descriptor?? [ 819.669660][ T3842] device_del+0x395/0x1d30 [ 819.680447][ T3842] ? kmsan_get_metadata+0x116/0x180 [ 819.686675][ T3842] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 819.693805][ T3842] device_unregister+0x37/0x80 [ 819.699861][ T3842] i2c_del_adapter+0xb46/0xc30 [ 819.705493][ T3842] pvr2_i2c_core_done+0xb6/0x110 [ 819.711580][ T3842] pvr2_hdw_destroy+0x356/0x5a0 [ 819.717562][ T3842] pvr2_context_destroy+0xc6/0x7f0 [ 819.723780][ T3842] pvr2_context_thread_func+0x780/0x14b0 [ 819.730653][ T3842] ? init_wait_entry+0x190/0x190 [ 819.736388][ T3842] kthread+0x521/0x560 [ 819.741363][ T3842] ? pvr2_context_global_init+0x150/0x150 [ 819.748361][ T3842] ? kthread_blkcg+0x110/0x110 [ 819.753938][ T3842] ret_from_fork+0x1f/0x30 [ 819.759345][ T3842] ---[ end trace ddbc873d75eb72aa ]--- 23:45:27 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 23:45:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000ff00000000000600007f00060000ee34dc69cfce0819ee000001000000000000000000000009aaffe700000000000000000a"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="4100000001f6ffff8701"]) [ 820.067593][ T52] usb 2-1: can't set config #0, error -71 23:45:27 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1) recvfrom$inet6(r3, &(0x7f0000000000)=""/47, 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) [ 820.178751][ T52] usb 2-1: USB disconnect, device number 17 23:45:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8995, &(0x7f0000000240)={"0e1652d3998e3ab1bef068d42f905ebc"}) 23:45:27 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) poll(&(0x7f0000000000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) poll(&(0x7f0000000080)=[{r4, 0x100b}], 0x1, 0xa7af) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 23:45:27 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) [ 820.721209][T20006] netlink: 1296 bytes leftover after parsing attributes in process `syz-executor.4'. 23:45:28 executing program 2: keyctl$update(0x17, 0x0, 0x0, 0x0) 23:45:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000ff00000000000600007f00060000ee34dc69cfce0819ee000001000000000000000000000009aaffe700000000000000000a"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="4100000001f6ffff8701"]) 23:45:29 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) 23:45:29 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 23:45:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r0, &(0x7f0000004400)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001180)=[{&(0x7f0000004540)="0f3f568c", 0x4}], 0x1}}, {{&(0x7f00000011c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80, 0x0, 0x0, &(0x7f00000027c0)=[@mark={{0x14}}], 0x73}}], 0x2, 0x0) 23:45:29 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 23:45:30 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 23:45:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x18, 0x0, 0x0) 23:45:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000ff00000000000600007f00060000ee34dc69cfce0819ee000001000000000000000000000009aaffe700000000000000000a"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="4100000001f6ffff8701"]) 23:45:30 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[], 0xfffffe49) syz_usbip_server_init(0x5) write(r0, &(0x7f00000000c0)="83", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:45:31 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f1497840ac05199269390000000109021b000100000000090400000103c8000009058707"], 0x0) 23:45:31 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) 23:45:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x400000f1]}) 23:45:31 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 824.045847][T20047] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 824.046879][T20047] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 824.338477][ T52] usb 18-1: SetAddress Request (2) to port 0 [ 824.345455][ T52] usb 18-1: new SuperSpeed Gen 1 USB device number 2 using vhci_hcd 23:45:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000ff00000000000600007f00060000ee34dc69cfce0819ee000001000000000000000000000009aaffe700000000000000000a"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="4100000001f6ffff8701"]) [ 824.729744][T20048] vhci_hcd: connection closed [ 824.732400][T19581] vhci_hcd: stop threads [ 824.741952][T19581] vhci_hcd: release socket [ 824.747044][T19581] vhci_hcd: disconnect device 23:45:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x400000f1]}) [ 825.077175][T19945] usb 6-1: new high-speed USB device number 22 using dummy_hcd 23:45:32 executing program 1: r0 = socket(0x1d, 0x80802, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) dup2(r1, r0) [ 825.261279][T20050] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 825.266816][T20050] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) 23:45:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001840)={0x0, 0x1c, &(0x7f0000001800)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000001880)=0x10) [ 825.356087][T20073] vhci_hcd: connection closed [ 825.359339][T19608] vhci_hcd: stop threads [ 825.369524][T19608] vhci_hcd: release socket [ 825.374247][T19608] vhci_hcd: disconnect device [ 825.478187][T19945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 825.490875][T19945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 825.502846][T19945] usb 6-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=39.69 [ 825.514071][T19945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.854543][T19945] usb 6-1: config 0 descriptor?? [ 825.961278][T19945] appledisplay 6-1:0.0: Submitting URB failed [ 825.968957][T19945] appledisplay: probe of 6-1:0.0 failed with error -5 [ 826.150261][ T3842] ------------[ cut here ]------------ [ 826.156659][ T3842] sysfs group 'power' not found for kobject 'i2c-1' [ 826.166148][ T3842] WARNING: CPU: 0 PID: 3842 at fs/sysfs/group.c:281 sysfs_remove_group+0x1d7/0x610 [ 826.177877][ T3842] Modules linked in: [ 826.182890][ T3842] CPU: 0 PID: 3842 Comm: pvrusb2-context Tainted: G W 5.12.0-rc6-syzkaller #0 [ 826.194850][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.207470][ T3842] RIP: 0010:sysfs_remove_group+0x1d7/0x610 [ 826.214843][ T3842] Code: 20 48 09 c8 49 89 87 70 09 00 00 49 c7 87 80 0c 00 00 00 00 00 00 48 c7 c7 26 9f 7c 90 4c 89 e6 4c 89 f2 31 c0 e8 89 cd be fe <0f> 0b e9 00 04 00 00 8b 7d 9c e8 aa b2 98 ff e9 68 fe ff ff 8b 7d [ 826.241536][ T3842] RSP: 0018:ffff88810c067a40 EFLAGS: 00010246 [ 826.249701][ T3842] RAX: cc0f0faebe1bc000 RBX: 0000000000000000 RCX: ffff88810c089f40 [ 826.260896][ T3842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 826.272546][ T3842] RBP: ffff88810c067aa8 R08: ffffffff81a4b0aa R09: ffff88813fffa000 [ 826.282288][ T3842] R10: 0000000000000003 R11: 00000000ffffffff R12: ffffffff900217d8 [ 826.291796][ T3842] R13: 0000000000000000 R14: ffff888121367c28 R15: ffff88810c08a9c8 [ 826.302543][ T3842] FS: 0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 [ 826.313199][ T3842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 826.321293][ T3842] CR2: 00000000004e4da0 CR3: 00000000a250a000 CR4: 00000000001526f0 [ 826.331743][ T3842] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 826.342571][ T3842] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 826.352888][ T3842] Call Trace: [ 826.357542][ T3842] dpm_sysfs_remove+0x123/0x160 [ 826.363596][ T3842] device_del+0x3ca/0x1d30 [ 826.369485][ T3842] ? kmsan_get_metadata+0x116/0x180 [ 826.376143][ T3842] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 826.383278][ T3842] device_unregister+0x37/0x80 [ 826.389577][ T3842] i2c_del_adapter+0xb46/0xc30 [ 826.395642][ T3842] pvr2_i2c_core_done+0xb6/0x110 [ 826.402037][ T3842] pvr2_hdw_destroy+0x356/0x5a0 [ 826.407863][ T3842] pvr2_context_destroy+0xc6/0x7f0 [ 826.414276][ T3842] pvr2_context_thread_func+0x780/0x14b0 [ 826.420887][ T3842] ? init_wait_entry+0x190/0x190 [ 826.427155][ T3842] kthread+0x521/0x560 [ 826.431997][ T3842] ? pvr2_context_global_init+0x150/0x150 [ 826.439058][ T3842] ? kthread_blkcg+0x110/0x110 [ 826.444881][ T3842] ret_from_fork+0x1f/0x30 23:45:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x400000f1]}) 23:45:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[], 0xfffffe49) syz_usbip_server_init(0x5) write(r0, &(0x7f00000000c0)="83", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:45:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}}, 0x0) [ 826.450581][ T3842] ---[ end trace ddbc873d75eb72ab ]--- [ 826.678546][T19945] usb 6-1: USB disconnect, device number 22 23:45:33 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xffffffffffff1e7a}, 0x10) write(r0, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071010000100feffff080000000000000000", 0x24) [ 827.091480][T20112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 827.096784][T20112] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 827.197262][T19945] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 827.637694][T19945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 827.651457][T19945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 827.662798][T19945] usb 6-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=39.69 [ 827.677392][T19945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.698637][T20114] vhci_hcd: connection closed [ 827.699602][T19581] vhci_hcd: stop threads [ 827.710396][T19581] vhci_hcd: release socket [ 827.715886][T19581] vhci_hcd: disconnect device [ 827.963679][T19945] usb 6-1: config 0 descriptor?? 23:45:35 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') io_uring_setup(0xe9a, &(0x7f0000000100)) symlink(&(0x7f0000000140)='..', &(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 23:45:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000180)="fe80000000000000948fdb2398b8bb581a000000", 0x14) 23:45:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x400000f1]}) 23:45:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}], {0x14, 0x10}}, 0x98}}, 0x0) [ 828.070764][T19945] usb 6-1: can't set config #0, error -71 [ 828.168857][T19945] usb 6-1: USB disconnect, device number 23 23:45:35 executing program 0: set_mempolicy(0x3, &(0x7f0000000180)=0xf83f, 0xe2) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x20961ff4) 23:45:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[], 0xfffffe49) syz_usbip_server_init(0x5) write(r0, &(0x7f00000000c0)="83", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:45:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x397) 23:45:36 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x2) 23:45:36 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0xfffffffffffffffd) 23:45:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18f, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689c9c6a47312334c2a97ac2b7f0fb4aabebae8dc5dffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2cd7328202ac55f4f5dbb8494120f79d5f60958691a8a3fcf561c33f46ab89803f47d97e04f7bf9cafb006ae29480408c8380cf060dd72462ccc5b7d195a113bc539df6591cd574a02d4d9b9f3ebce31bd7582018ded8ceb71e75417dabc45f9fa0503befdcd0874ae979bc9581d6a854d4dfb7ffaed09bfcf330c365988c05e12ed069a42c964f79e16ad22f95ffaf5a1d4200b030d0b7b170051b850b78b196b00f0ffff72ac058a66ea2614ba81fdefa76b9b8df6a1203b820129976905984e26586931f700bbec30960449bfb7642485f2edf7bd55a715be62eecd33ee4d1480231a10e6ce6ad6942d6ac0799a6336259b1fde152b1628ba090a130cd9d7512698c1809754008b46db7c867773af8c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 23:45:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0x8, [@array, @array, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'd'}, @fwd, @volatile, @typedef, @volatile, @array, @const, @fwd, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xd0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 829.528155][ T52] usb 18-1: device descriptor read/8, error -110 [ 829.561301][T20151] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 829.566797][T20151] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 829.798288][ T52] usb 18-1: SetAddress Request (3) to port 0 [ 829.805191][ T52] usb 18-1: new SuperSpeed Gen 1 USB device number 3 using vhci_hcd 23:45:37 executing program 1: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0xb1, 0x4, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x3) [ 830.138156][T20154] vhci_hcd: connection closed [ 830.139067][T19612] vhci_hcd: stop threads [ 830.148773][T19612] vhci_hcd: release socket [ 830.154030][T19612] vhci_hcd: disconnect device 23:45:37 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x48, 0x15, 0x1, 0x0, 0x0, {0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "04406664aeb60967750a5578f9f6d3d82c84ac41dea72f0d67c84ea8fdff0dd6b6ae8b08d19cb13cb74cb31888"}]}, 0x48}}, 0x0) 23:45:37 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:45:37 executing program 2: r0 = memfd_create(&(0x7f0000006300)='\x9dT\xfc\x8c)):\xdai\xe9\x84\xd4\xedg\xf9C|\xfb\x03x\xf3H6*D[9\xbb', 0x5) lseek(r0, 0x0, 0x4) 23:45:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r0, 0xfffffffffffffffc, 0x0, 0x0) 23:45:38 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[], 0xfffffe49) syz_usbip_server_init(0x5) write(r0, &(0x7f00000000c0)="83", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:45:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x74) 23:45:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'macvtap0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x3, @remote, 'veth0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'macvtap0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) dup2(r4, r3) dup2(r2, r1) [ 831.834969][T20196] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 831.836904][T20196] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) 23:45:39 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @empty=0xe1fd0000}, @address_reply}}}}, 0x0) 23:45:39 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, 0x0, 0x0, 0x0) 23:45:39 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1231fe, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x2) sendfile(r0, r0, 0x0, 0x295) 23:45:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) [ 832.490588][T20197] vhci_hcd: connection closed [ 832.491633][T19560] vhci_hcd: stop threads [ 832.501445][T19560] vhci_hcd: release socket [ 832.506107][T19560] vhci_hcd: disconnect device 23:45:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) close(r1) [ 833.063748][T20215] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 833.073011][T20215] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 23:45:40 executing program 2: io_setup(0xfff, &(0x7f0000002780)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/vmallocinfo\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="fd", 0x1, 0x591fedb8, 0x0, 0x2}]) [ 833.340877][T20214] [U]  23:45:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0xffffffffffffff7a}]}]}, 0x34}}, 0x0) 23:45:40 executing program 0: r0 = syz_io_uring_setup(0x1b57, &(0x7f0000000300), &(0x7f0000d7b000/0x3000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000100)=""/53, 0x35}, 0x0) io_uring_enter(r0, 0x4ab0, 0x0, 0x0, 0x0, 0x0) write$nbd(r4, &(0x7f00000001c0), 0x20000110) 23:45:40 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x22}) [ 833.806668][T20216] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 833.820918][T20216] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 23:45:41 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xa0000}, 0x20) 23:45:41 executing program 4: setitimer(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001f160100248f1c872d2bf1b75bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615a3053e8c1d"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000002240)}, 0x0, 0x0, 0x213, 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, 0x453, 0x800, 0x70bd2d, 0x0, "5562684e2dde6ab6b465b6fbd0dbad730571e520314714dd89f3774071202af1f609fc8a7a791c92deb2046e21b9636500a4cb377b68512e559dcecb9c0f5ac95e997477245d05a8dfd224cce2955416298dda1ea3622fabf888007243bf73c1", ["", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0xf5fd4ee952928292}, 0x30008c44) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x3, 0x3, 0x4, 0x5, 0x0, 0x8000, 0x20, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1bf0b2a9, 0x5}, 0x1000, 0x7, 0x7, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0xfffffffffffff001}, 0x0, 0xa, 0xffffffffffffffff, 0x3) msgget(0x1, 0x400) fcntl$notify(0xffffffffffffffff, 0x402, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x9, 0x1, 0x41, @rand_addr=' \x01\x00', @empty, 0x700, 0x7800, 0x2, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c000000100001040000000000000066ce87b68a831a547bd2d8a697c1eeccece4c14b0d97a51f7793cf8c50b0c3c9750bbdcb42aae61f0a3d6d302ca558751605a328c0f4b6ea2510d716470014a4725c84c97a1244bf59fd393ea52159273746521dfed508565619403038514b55fcb265df0c32f56e5fb4f6dab38eb6673f9c89b7bd25c7093d8c1e00567e2acd1f15c15117691d92171abd9ec3254b4dcdbce5f56265ad8354fd0e2cf0225319020bc62f23beb5064737dd7ec9c4b4d86a10e8e87543dadccbbff001f61ba18a847b0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028005000a0001000000"], 0x3c}}, 0x0) 23:45:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@fwd, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x55}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 835.170275][ T52] usb 18-1: device descriptor read/8, error -110 [ 835.301191][ T52] usb usb18-port1: attempt power cycle 23:45:42 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000018c0)={0xfffffffffffffffd, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x10, 0x1409, 0x1}, 0x10}}, 0x0) 23:45:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) [ 835.596297][T20255] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 835.677636][T20255] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.688336][T20255] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.697782][T20255] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.707524][T20255] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.717032][T20255] device vxlan0 entered promiscuous mode [ 835.934796][T20255] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.944814][T20255] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.954383][T20255] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.966387][T20255] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.986542][ T52] usb usb18-port1: Cannot enable. Maybe the USB cable is bad? [ 836.317686][ T52] usb usb18-port1: Cannot enable. Maybe the USB cable is bad? [ 836.351390][ T52] usb usb18-port1: unable to enumerate USB device [ 836.490807][T20262] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 836.500674][T20262] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. 23:45:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) ftruncate(0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[], 0x16) unshare(0x40600) ftruncate(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x80000000}) fchmod(r1, 0x0) 23:45:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x3a}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 23:45:44 executing program 2: io_setup(0xfff, &(0x7f0000002780)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/vmallocinfo\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="fd", 0x1, 0x591fedb8, 0x0, 0x2}]) 23:45:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0xac, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private1}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}]}]}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00080008000300", @ANYRES32=r2, @ANYBLOB="2c04330050800000fffffffbffff080211000001505050505050"], 0x448}}, 0x0) [ 837.514453][T20266] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.526000][T20266] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.537164][T20266] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.547488][T20266] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.559790][T20266] device vxlan0 entered promiscuous mode 23:45:45 executing program 0: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 838.076968][T20266] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.086692][T20266] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.097122][T20266] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.106995][T20266] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 23:45:46 executing program 2: io_setup(0xfff, &(0x7f0000002780)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/vmallocinfo\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="fd", 0x1, 0x591fedb8, 0x0, 0x2}]) 23:45:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x104, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:45:46 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="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", 0x1000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write(r0, &(0x7f0000000000)="05", 0xe7b78) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0xc0000) 23:45:46 executing program 4: setitimer(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001f160100248f1c872d2bf1b75bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615a3053e8c1d"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000002240)}, 0x0, 0x0, 0x213, 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, 0x453, 0x800, 0x70bd2d, 0x0, "5562684e2dde6ab6b465b6fbd0dbad730571e520314714dd89f3774071202af1f609fc8a7a791c92deb2046e21b9636500a4cb377b68512e559dcecb9c0f5ac95e997477245d05a8dfd224cce2955416298dda1ea3622fabf888007243bf73c1", ["", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0xf5fd4ee952928292}, 0x30008c44) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x3, 0x3, 0x4, 0x5, 0x0, 0x8000, 0x20, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1bf0b2a9, 0x5}, 0x1000, 0x7, 0x7, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0xfffffffffffff001}, 0x0, 0xa, 0xffffffffffffffff, 0x3) msgget(0x1, 0x400) fcntl$notify(0xffffffffffffffff, 0x402, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x9, 0x1, 0x41, @rand_addr=' \x01\x00', @empty, 0x700, 0x7800, 0x2, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c000000100001040000000000000066ce87b68a831a547bd2d8a697c1eeccece4c14b0d97a51f7793cf8c50b0c3c9750bbdcb42aae61f0a3d6d302ca558751605a328c0f4b6ea2510d716470014a4725c84c97a1244bf59fd393ea52159273746521dfed508565619403038514b55fcb265df0c32f56e5fb4f6dab38eb6673f9c89b7bd25c7093d8c1e00567e2acd1f15c15117691d92171abd9ec3254b4dcdbce5f56265ad8354fd0e2cf0225319020bc62f23beb5064737dd7ec9c4b4d86a10e8e87543dadccbbff001f61ba18a847b0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028005000a0001000000"], 0x3c}}, 0x0) 23:45:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) [ 840.659574][T20319] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.669301][T20319] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.680781][T20319] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.690711][T20319] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.700171][T20319] device vxlan0 entered promiscuous mode [ 840.915589][T20327] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 840.924701][T20327] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 841.113226][T20319] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.123065][T20319] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.132873][T20319] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.142591][T20319] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 23:45:48 executing program 2: io_setup(0xfff, &(0x7f0000002780)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000039c0)='/proc/vmallocinfo\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="fd", 0x1, 0x591fedb8, 0x0, 0x2}]) 23:45:49 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="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", 0x1000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write(r0, &(0x7f0000000000)="05", 0xe7b78) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0xc0000) 23:45:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x104, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:45:50 executing program 4: setitimer(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001f160100248f1c872d2bf1b75bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615a3053e8c1d"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000002240)}, 0x0, 0x0, 0x213, 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, 0x453, 0x800, 0x70bd2d, 0x0, "5562684e2dde6ab6b465b6fbd0dbad730571e520314714dd89f3774071202af1f609fc8a7a791c92deb2046e21b9636500a4cb377b68512e559dcecb9c0f5ac95e997477245d05a8dfd224cce2955416298dda1ea3622fabf888007243bf73c1", ["", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0xf5fd4ee952928292}, 0x30008c44) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x3, 0x3, 0x4, 0x5, 0x0, 0x8000, 0x20, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1bf0b2a9, 0x5}, 0x1000, 0x7, 0x7, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0xfffffffffffff001}, 0x0, 0xa, 0xffffffffffffffff, 0x3) msgget(0x1, 0x400) fcntl$notify(0xffffffffffffffff, 0x402, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x9, 0x1, 0x41, @rand_addr=' \x01\x00', @empty, 0x700, 0x7800, 0x2, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c000000100001040000000000000066ce87b68a831a547bd2d8a697c1eeccece4c14b0d97a51f7793cf8c50b0c3c9750bbdcb42aae61f0a3d6d302ca558751605a328c0f4b6ea2510d716470014a4725c84c97a1244bf59fd393ea52159273746521dfed508565619403038514b55fcb265df0c32f56e5fb4f6dab38eb6673f9c89b7bd25c7093d8c1e00567e2acd1f15c15117691d92171abd9ec3254b4dcdbce5f56265ad8354fd0e2cf0225319020bc62f23beb5064737dd7ec9c4b4d86a10e8e87543dadccbbff001f61ba18a847b0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028005000a0001000000"], 0x3c}}, 0x0) 23:45:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000006902"]) 23:45:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60022802400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) 23:45:50 executing program 2: pipe(&(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "ab60791744baf6937c9981351e07af7e2798387e89e9f1711532d41eb95e2911d8793d1e3ce4d96155a80f272012f5216b6e27e36436676bc12d67c46c22103297cc0b583c51a8de12dcfde5b57358685ed7e26861b2d12e58caca91b8c4f0e0f93eade7bcc5b125b9086ebed72beebf586d2a34298acd419e6eb30037844e42498def04f874197808243a2f34f10a4ee882e84d8e270c8c3a1140a9ccb934d41a9c6b8a9f086b19b5111affcdf2317f7db417bf21e8f9314a802d3226c59701ec3c9f0d1273a113b2ac7cace0b60224c74cdf276c47a4adefbdf4096850554a91942b90fb9cfb190997766c3cf2c573055e18663783c5cfac510f8a2d536054e882c6bbf924894aa218200754cb363b799bd5bef8b036b6b4aa3639fe09df36da274b2a0cb9a2d88076be6f332fcde1989549bb70658aa1ee1ea8e2b28cbda934b28774188a640eb8f95f19bf1bb3e9024b2f5832e302062747e98b793a7ae8c0381c5865e9b375b8142876285ba14a77a128e4970ba00a298bc8f53d83254df735ba515603fdd1e620c17f8c58cc54ff9a33947b58ddeaa4ba207ec3f6ccd74f89b6fe214ef7ed3775968bfd6f0cbff1ad0f0956bd3071652a40c87001536046a60534d24999a7190550ae12b95b1a3f1fbb92de7ba5a2626b1c950655be0e918435a6454e3ffc2b3e8717f7c03ddb6a26de7522e7dc723ef8d2f1c21cc413781b3bae772fe3cdd6b2f2a47385f17ab96cbe40ce779a667e1578bd5ae7fe44f0d3eff995dca1ced6dda495828e13f49503a3099eeaf672321d4ff7e6791663429910c973bfb0924328ed4ee3bde9aca42fe0cd0264308a381f2f813c71095f497b63731329777e9fa87c089329b8a281f9b6a641575ac9a88d32e2d5526d79c4b5bf64c9706df5b339b2e80732a590bb1e181f88be6fbfff4ee42ea19c8b64200bf26fe52336f0c7a19fd6f21b5f2bae31f118b0f37c4fb801064e50ed4f05fd9f95cbce08e3e97ad4e917f45ec0acce70db2ebf9f8b3716cc06883361fba4a82e23b307f8f4aec69d9a508711a4a6907ad2c3cd52da7a0d6ce754d02b955777d6b17e7d8e01918358f79fe3f39c41c78fdb5d9671612e4e03e4196a0b87deb75879d1b36f8a4c12fbc259745c0cc690d0fb5b413989908bcbe60ce6d8d8a489c1939fa69a03000aa98a8be9abec1bc25b00484c388f5de453b21ba24311d12e6aead9f28baed2a35926844d73ac82fa1f3a5b2449df2b29d5e27a11726093c9cc23c35fe42fdb3f67fd6612a333060f0d702fca54125c135b1b6575c5dcd942429330a9eccd27b85e68a34955868daf4f642553e72a5d37b12d19106c041f64cb89560164693563e1782faaf138c7a626832dd76e120c7542c9269b19abb7e188c23232bc717258d84b92e000b5fb3fdbc39e0be5e39869e71b5d4753e8f3304678f411c44012efa4f8e4c3ddeb860587e0073cad0067bcc42168a13754e2e8cdc3ada62f197a349fb2f7d2c526c6fd72ea584c5812edb82f91c9ae326a9e4bc57641a98136b5cf13e3decd23b343cb6836b687820c42f9dc9a4ca8adbf6436fd0978783006650fd6f826a193beca3eedaab9518df22ce71c16806c4bb79d56ea19cf38c518b609ce6b65092467f5966cd6c2ad565661f88f5ee3df2806769f20d6e4ee7ae6568401aaff225f71800922109594d9770547e8e0a41552b4d00912c2774eca66c905b3b9c043c80e85191a71cbae5c2d12c296c34d81176bfc7c668b4c9d4463c645282bd15940a967d6faa74af0a17c70c03c06ec2f6b65d606324aa8c242d5aa3a09bd0d79a77f9725225f29e78e14f814f5f348d213e3e9269a52ae101f977a3ca5db15c761e32353c4fc824c316730473a27e659ce6acef52026f2514107d98a528018da53d9fb191d89449384fb4322b668b309637b2b1a7ce7b4448814909bf17c7e3f44ef87f3115aa0e9da5e5569f4ef623229717523b8bf5e29dcda0528aa758adc7812476d52465a09c255a481efdb513de2c9f1b62a0c7c5db156610b821b478fcc44c8d29f68231d7ed8caa9371c4d433430a0ebf3fc022142ac1b5e6d6c2e17c1d5afef436ee7c12ef6909fe82dca33a35bd8523dded0b0dd376d79bffcd6f1b51d7a0aed9556a0b0a07721618da196351aebaa692a5137bdc935cf28df5041b5f915256a579e90ec9f0c5b6722cd7a7ec6e363af79608d51c377da8c259d390ada8910a9c8291d222b0dbd06cb772f7318c5ab15f62e3fbea4bf0992cd07e70fc9a9aab9bf31d734d970c0a6b0c76cc346094191119b09d496ebe81a9b2c91f5ea80b2fa84236244f0d054bd591db59427d854b7bf01d0035492f41cecc12858f06fe80d100bb73bca9234b97324bd47175d0de493efdc3f7724b864cea975f0259459ede093ff69f3503da6cec3f54e317ac6db18e15323e3e8a1a25dbde002fe6f8e96ac4e90136f943775eed879cf5f2c990913a7acd9e4ff5e0a4d37ef9a99f24529008c26073f30fcd8a2dcfef82bbc9ae1d184d087062578cb61b00008b6230ebaffbf2baec3101dafcdf5a3f6850228e8e2a668f7b5a5bf142766968904e0fed57b27bdba63850e9ddaa6b4a40757f09bf6656e81e87135e8d725b7d8daefbf535fe6cfbb2f64fb0f7ffc734ce5d0dbf4618174acdf14797db4296eec5b6c2ba0bbf9291dcdaae1db636d3f74de101b05a99442f9be2c7530d3217e99b77a9c503a0c3338339bcd1c02468f9227e58f0eff624dbe1455e5b5d24d779642307a97282774d78399db2018d80cf01c3f1140a1241c13f98e41b9240e08e5d5258c207c01bbb2794ddc90048fe7527821274df5d52a6a18983ead00cb518b17cc7fdf631d69017d65ef395c8a19b98c501c51a65d3d7d684ab2182031a942c0fd5c0304ef03a952b05c9418a4e431a8a2160bbd2002d7ca217d8adde5b778a6754696cfa3d45f87548deddf5b0af261561ddda52b04f527dd450b74cb5bd21e114486f197150ef80ad2c28a6d5ad2c38458eaa496a398f1fe8ddb5fc1b26c610b3b3393f16d13b83a7b9c4b2fa735cfbe1ba501484aed95a73706789c7719feefbae32ec6b76e067b3241a70294975f6390927e79cad7f83c2e9b23e955593cd19f4e40d796272ed4fb957c3e10bea084c28b3332fc0bc36bb4764ca9cdf671ce3a966303680de44e4b9ad7daa32fbe29dd4b224c0510456e69c9522de8d7c2602f3859ac10f4fc4d52b1d2bd1268e824b112cf3f5ce02635cabde3d17b3f4ee53dfce5a5c730cda6f081db1580dabd86d974e45813e691f352ba52f9a6e3a03738c3594d34726b02976c6357b416a5407e593e7c7db95ee55fdb24cff5a3e5a7801d69cc33432524b5e8e772c3878fb9f2160ac21e1b3370d533738a7610f5d23f57a9cf4566a80eae5bd102b7376f89f41dd9fce823b9784fa302e2b8ac16ce9396ccbf03ad73a34511ac2d417e71ee8ab0499d47a0df3c640a665eda6f861eb6ef794d35f93cf44cad9797363b2918c600d0b483753ba852b0bfeb2a6b2acc257d845c50c9b6a44717e38c1dac078cd3e32ba6fd2739597e1ebc55745baa5a7a1757558439ab138a6c0fe2c010bd526e2f9aa66b2549e20224ff4a53549963bcd93a4417df7a0256e295efc1977f6026df2102b9c1bf0e60158fe4fb55004aa755769f0b8c346d83574a394c1e04c7842d9983b84c0aa9b09737b4e3cbe3241fe276a77efa1e4d1fbb663e8881f301f8267ba6499c8ed83cd51991b58484ebbcf7050d6c70cc9004eed857bb1fb20cddfd78aba6108826988b41887b5dadb520c4c1ae5b707747662efe0cd51a0233ab39c2d0b42b8ab8aeb9dd0800608fb6747c475eab3faab1ffee78c1319ef4df095b861ce626f7c9cfac6e49049747654b59f23dc73cb0b7449edf6721fa2a467126c6ce4ae570edaac0b45aa61c9bc17002a9e31404a26c9b252051edd3be3aedf891222c7d75daaeae55643bfce15ca1ae0631cd99fa45787f620f08f3d85befef0c364fda4b2f78a38c63e63365b9f78ae2890f9d0f0ba937f03213b97fdd96c9a27baf50fa9d37d68432100e7f3400dddaa978b59a5c5b8254491dccf09437ef22d388a430e90a028de17dd76731fedecc42d717427f5918eb9a6c730b5e60a04f18f4fd641e4a57e77f3a5c56ebd0364aac1e11121f92fbe3f59f209d2c0f5e403e67b956d7228bfef4b0bac182511405f514d9503fa0962ba08f8f1982cc7f3f667adfb080e57279eed226703337b22acc838e35a625a1af268174213b822555db6081b4ff5a4781981337c8bedd3de5ca7cbd89b5ff57eef5d9170a2671b99ff184f34007760284fbc074f2752a6646c71b6971c28846458ca06515a75c71638aa709424cf5376b8c7b33c0fdd9744c5c00057f92465b2faa0feebf399c2330dfb049f78d2a668c648ebd14f9f4ee1f27b55b64840a46b84442cd60ed639b8345cfc1979c805acca89eb62fad6e72333ab302a686cba0f24f79fc378d101fe085039726a294e9fce6ef6cbdb3b3d7405aa5296be8769490339e3f24da1969b903f928bbc2b6cab0c7c18245bd0e8605be388606769388c98676a4bcbaa9ccbb4f92a2b18c15ba28e125147ad679d28dabd74770b46ebeca350d85334d31af5ed1dc0cb5ce3266292a842f29410043d3b04bd8c81a2e585456b2166b74f79f0e9af50676386fdc5fee5669cd7ea2b9184b312fa53ff6eec4b599b453fbd0b0832ced1332416ef78f4a23e7ca61014fae2ac658c087ebd59f8c87a67931249f43964171f32953fbb6d5c6aaaf303c460645e453b693b34bb77a374cf801f286104ca42a36123360abf4412429019c6acc51dfc9070f1be36ad59c76121f9c7aa98315fe321f295703d982deb62e17f3a9f02313a2d0d9841b10a06f4a537d5653f0aba0c7a2befac7a1421d7324b7f31232b8938516450b13ce93b2167cad31598d63686f1179206a475eddd6ba98750f9367d4210aa5005494543072db76c8eb82a93b65ba0c553d0591637003837c5c7ce3ef2b48ca155cc84b215b39a041813b6aa2afeaa52c4d05107499bc89fd952273454617cf9b7dee7d6feb9afee21f932be1af8bb16fdd96dc09e88aaefb7d06bb23b958e21e1d11be44234d86572a0fac7a571acf6c6db3c44f64566f0a69bf54cb27f28041f18fecd0d121e9db378b38245a2d96374677ee29c12268384d2cb515edbe5979ec4c5956cc8672fff4745b2115fd478770e6085c74eb93e8d7a9889491797a580112c74118525148d35a3a1aa0cc3666e9aaceb4683f419c7d084c1024d1e9763f0a6ea30bd7bf3b39e2f34f30057111b3b284c35f85efe16b0d900aef3bb16b6fe343956be7da79fa132a8d76b6f3a1e7440111e426"}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xf0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xc0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xb0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d, 0xf65}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xe8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4285, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x36561932, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xfffffe01}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xf0}}, 0x8004) [ 843.633414][T20351] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.643230][T20351] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.655163][T20351] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.665626][T20351] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.675626][T20351] device vxlan0 entered promiscuous mode [ 844.126035][T20363] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 844.136191][T20363] netlink: 202696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 844.222870][T20351] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.233941][T20351] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.244690][T20351] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.255671][T20351] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 23:45:51 executing program 0: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000000c0), 0x8) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000080)) 23:45:51 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="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", 0x1000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write(r0, &(0x7f0000000000)="05", 0xe7b78) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0xc0000) 23:45:53 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="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", 0x1000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write(r0, &(0x7f0000000000)="05", 0xe7b78) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0xc0000) 23:45:53 executing program 0: sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000006a40)=ANY=[@ANYBLOB="80250004", @ANYRES16, @ANYBLOB="53372bbd7000fddbdf258300000008000300", @ANYBLOB="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"], 0x4080}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000108f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19403, 0x0) 23:45:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x104, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 847.198294][T20397] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 23:45:54 executing program 4: setitimer(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001f160100248f1c872d2bf1b75bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615a3053e8c1d"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000002240)}, 0x0, 0x0, 0x213, 0x0, 0x0, 0x0}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, 0x453, 0x800, 0x70bd2d, 0x0, "5562684e2dde6ab6b465b6fbd0dbad730571e520314714dd89f3774071202af1f609fc8a7a791c92deb2046e21b9636500a4cb377b68512e559dcecb9c0f5ac95e997477245d05a8dfd224cce2955416298dda1ea3622fabf888007243bf73c1", ["", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0xf5fd4ee952928292}, 0x30008c44) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x3, 0x3, 0x4, 0x5, 0x0, 0x8000, 0x20, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1bf0b2a9, 0x5}, 0x1000, 0x7, 0x7, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0xfffffffffffff001}, 0x0, 0xa, 0xffffffffffffffff, 0x3) msgget(0x1, 0x400) fcntl$notify(0xffffffffffffffff, 0x402, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x9, 0x1, 0x41, @rand_addr=' \x01\x00', @empty, 0x700, 0x7800, 0x2, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c000000100001040000000000000066ce87b68a831a547bd2d8a697c1eeccece4c14b0d97a51f7793cf8c50b0c3c9750bbdcb42aae61f0a3d6d302ca558751605a328c0f4b6ea2510d716470014a4725c84c97a1244bf59fd393ea52159273746521dfed508565619403038514b55fcb265df0c32f56e5fb4f6dab38eb6673f9c89b7bd25c7093d8c1e00567e2acd1f15c15117691d92171abd9ec3254b4dcdbce5f56265ad8354fd0e2cf0225319020bc62f23beb5064737dd7ec9c4b4d86a10e8e87543dadccbbff001f61ba18a847b0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028005000a0001000000"], 0x3c}}, 0x0) 23:45:54 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x7b, &(0x7f0000000140), &(0x7f000095dffc)=0x19) [ 848.091940][T20406] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.101509][T20406] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.111240][T20406] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.121649][T20406] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.131517][T20406] device vxlan0 entered promiscuous mode 23:45:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0x301}, 0x14}}, 0x0) [ 848.525338][T20406] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.536375][T20406] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.546311][T20406] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.556529][T20406] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 23:45:55 executing program 2: r0 = syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xa3, 0x0, 0x0, 0x0, 0x0) 23:45:56 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) fallocate(r2, 0x40, 0x0, 0x7) 23:45:57 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x340, 0x11, 0x148, 0x340, 0x0, 0x3d8, 0x2a8, 0x2a8, 0x3d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 23:45:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x104, &(0x7f0000000140)="98a2cd9e00550f47e89a1069878a23b50cec416dc81a234841c9c503b7ee9fb9c2c32940a73e7f665b50b9a8d70f9345bd9707d6b2beb28e778c3b6d80a7683634d204584d022cb003e2ab4494ac642d8fc368fdd5c24fd9ad26e6747936b4714ba9ca80575f15873721299aa25061fe1b9480843f410f4fcf69ee72a6e4769c9e8c8e59d415d0beafba016151e1b6e74a38d179c4dc2d3ecfcb46ecfb9a21f55af8d111547a220a51e83f03999ebd9d32d808054238815489a62c48146b9db5608a4a24d516cede04fcd35aa86cafb646cc661a31c78b3f1b86a43cb248607f8275790eb25f8e3560b993dab148c36c9f94220007cb3d49c45258498ab1f75c903ff343"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:45:57 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44487}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) 23:45:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f05b9409b0dffff00000212be0402000605040003004300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160008000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) 23:45:57 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000600000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fe08ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c3000000000000000000000007600006e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f757000000000000000000000000000000000000000000000000000000800000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000d1e353fb9dbb9a003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fd"]}, 0x3a8) [ 851.008865][T20439] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 851.233685][T20448] batman_adv: batadv0: Adding interface: bridge2 [ 851.240946][T20448] batman_adv: batadv0: The MTU of interface bridge2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.271369][T20448] batman_adv: batadv0: Interface activated: bridge2 [ 851.950998][T20459] batman_adv: batadv0: Adding interface: bridge3 [ 851.958047][T20459] batman_adv: batadv0: The MTU of interface bridge3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.984963][T20459] batman_adv: batadv0: Interface activated: bridge3 23:46:02 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix_mp={0x0, 0x0, 0x32314d59}}) 23:46:02 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) 23:46:02 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)) 23:46:02 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb8, 0x87, 0x5d, 0x8, 0x10c4, 0x81e8, 0x7d31, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x34, 0xda, 0x9a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f00)={0x18, &(0x7f0000000100)={0x0, 0x0, 0xd, "cd1cb1be1ee7a4e9783a849bc5"}, 0x0, 0x0, 0x0, 0x0}) 23:46:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0xc, 0x1e1441) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x46, 0x2}, @cond}) write$evdev(r1, &(0x7f0000000040), 0x2b8) 23:46:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44487}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) [ 856.077262][T20476] batman_adv: batadv0: Adding interface: bridge4 [ 856.083838][T20476] batman_adv: batadv0: The MTU of interface bridge4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.114079][T20476] batman_adv: batadv0: Interface activated: bridge4 [ 856.317246][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd 23:46:03 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000082505a2a440000120030109025c0002010000000933e39758f7c51316052406000105240000000d240fffff000000000000000006241a0000000905810300020000130904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 856.568354][ T7] usb 5-1: Using ep0 maxpacket: 8 23:46:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af20, &(0x7f0000000080)) [ 856.709660][ T7] usb 5-1: New USB device found, idVendor=10c4, idProduct=81e8, bcdDevice=7d.31 [ 856.721382][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.880370][ T7] usb 5-1: config 0 descriptor?? 23:46:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000006480)={'#! ', './file0', [], 0xa, "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"}, 0x800) [ 856.998461][ T7] cp210x 5-1:0.0: cp210x converter detected 23:46:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44487}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) [ 857.277432][T17236] usb 6-1: new high-speed USB device number 24 using dummy_hcd 23:46:04 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') ftruncate(r0, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') ftruncate(r1, 0x1000) [ 857.371060][ T7] usb 5-1: cp210x converter now attached to ttyUSB0 [ 857.517145][T17236] usb 6-1: Using ep0 maxpacket: 8 [ 857.569377][ T1983] usb 5-1: USB disconnect, device number 4 [ 857.638302][T17236] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 857.639000][ T1983] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 857.648157][T17236] usb 6-1: config 1 has no interface number 0 [ 857.670401][ T1983] cp210x 5-1:0.0: device disconnected 23:46:05 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) syslog(0x0, 0x0, 0x0) [ 857.848700][T17236] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 857.859262][T17236] usb 6-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 857.869016][T17236] usb 6-1: Product: syz [ 857.873596][T17236] usb 6-1: Manufacturer: syz [ 857.878891][T17236] usb 6-1: SerialNumber: syz [ 857.972284][T20537] batman_adv: batadv0: Adding interface: bridge5 [ 857.982034][T20537] batman_adv: batadv0: The MTU of interface bridge5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.010949][T20537] batman_adv: batadv0: Interface activated: bridge5 [ 858.488442][T17236] cdc_subset 6-1:1.1 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Linux Device, 36:6e:a0:29:fe:be 23:46:05 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) poll(&(0x7f00000016c0)=[{r0}], 0x1, 0x1) [ 858.617352][ T1983] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 858.709627][T17236] usb 6-1: USB disconnect, device number 24 [ 858.718672][T17236] cdc_subset 6-1:1.1 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Linux Device 23:46:05 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44487}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) [ 858.877373][ T1983] usb 5-1: Using ep0 maxpacket: 8 [ 858.969849][ T35] audit: type=1326 audit(1621295166.110:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x7ffc0000 23:46:06 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb8, 0x87, 0x5d, 0x8, 0x10c4, 0x81e8, 0x7d31, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x34, 0xda, 0x9a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f00)={0x18, &(0x7f0000000100)={0x0, 0x0, 0xd, "cd1cb1be1ee7a4e9783a849bc5"}, 0x0, 0x0, 0x0, 0x0}) [ 859.188870][ T1983] usb 5-1: device descriptor read/all, error -71 23:46:06 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') ftruncate(r0, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') ftruncate(r1, 0x1000) [ 859.262341][ T35] audit: type=1326 audit(1621295166.180:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 859.287450][ T35] audit: type=1326 audit(1621295166.190:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x7ffc0000 [ 859.318615][ T35] audit: type=1326 audit(1621295166.210:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 859.344939][ T35] audit: type=1326 audit(1621295166.210:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x7ffc0000 [ 859.370430][ T35] audit: type=1326 audit(1621295166.210:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 859.571069][T17236] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 859.625796][T20577] batman_adv: batadv0: Adding interface: bridge6 [ 859.632572][T20577] batman_adv: batadv0: The MTU of interface bridge6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.660261][T20577] batman_adv: batadv0: Interface activated: bridge6 23:46:06 executing program 2: syz_emit_ethernet(0x16, &(0x7f0000000000)={@link_local, @remote, @void, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, "fd", "4b5b86"}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000680)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "a0a21c", 0xc, 0x11, 0x0, @mcast1, @loopback, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 859.887142][T17236] usb 6-1: Using ep0 maxpacket: 8 [ 860.008367][T17236] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 860.018305][T17236] usb 6-1: config 1 has no interface number 0 [ 860.178544][T17236] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 860.188899][T17236] usb 6-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 860.197850][T17236] usb 6-1: Product: syz [ 860.202757][T17236] usb 6-1: Manufacturer: syz [ 860.208298][T17236] usb 6-1: SerialNumber: syz 23:46:07 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x803, 0x0) dup3(r1, r0, 0x0) [ 860.527595][ T1983] usb 5-1: new high-speed USB device number 7 using dummy_hcd 23:46:07 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000082505a2a440000120030109025c0002010000000933e39758f7c51316052406000105240000000d240fffff000000000000000006241a0000000905810300020000130904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 860.592225][T17236] usb 6-1: can't set config #1, error -71 [ 860.630326][T17236] usb 6-1: USB disconnect, device number 25 23:46:07 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') ftruncate(r0, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') ftruncate(r1, 0x1000) [ 860.787446][ T1983] usb 5-1: Using ep0 maxpacket: 8 [ 860.918670][ T1983] usb 5-1: New USB device found, idVendor=10c4, idProduct=81e8, bcdDevice=7d.31 [ 860.929864][ T1983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:46:08 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 861.160041][ T1983] usb 5-1: config 0 descriptor?? [ 861.202449][ T1983] cp210x 5-1:0.0: cp210x converter detected [ 861.327338][T17236] usb 6-1: new high-speed USB device number 26 using dummy_hcd 23:46:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') ftruncate(r0, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') ftruncate(r1, 0x1000) [ 861.568209][T17236] usb 6-1: Using ep0 maxpacket: 8 23:46:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) [ 861.687045][ T1983] usb 5-1: cp210x converter now attached to ttyUSB0 [ 861.688937][T17236] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 861.704195][T17236] usb 6-1: config 1 has no interface number 0 [ 861.894649][ T1983] usb 5-1: USB disconnect, device number 7 [ 861.917554][T17236] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 861.928680][T17236] usb 6-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 861.938235][T17236] usb 6-1: Product: syz [ 861.943647][T17236] usb 6-1: Manufacturer: syz [ 861.949191][T17236] usb 6-1: SerialNumber: syz [ 862.005881][ T1983] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 862.020370][ T1983] cp210x 5-1:0.0: device disconnected 23:46:09 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000e, &(0x7f00001c9fff)="03", 0x1) listen(r2, 0x0) 23:46:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0x1081}, {&(0x7f0000000300)=""/170, 0x4}, {&(0x7f0000000e00)=""/96, 0x12c}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) [ 862.500010][T17236] cdc_subset 6-1:1.1 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Linux Device, 36:6e:a0:29:fe:be 23:46:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="020b00000300000000150000000000000100180000004738"], 0x18}}, 0x0) [ 862.741581][ T8449] usb 6-1: USB disconnect, device number 26 [ 862.750997][ T8449] cdc_subset 6-1:1.1 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Linux Device 23:46:10 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb8, 0x87, 0x5d, 0x8, 0x10c4, 0x81e8, 0x7d31, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x34, 0xda, 0x9a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f00)={0x18, &(0x7f0000000100)={0x0, 0x0, 0xd, "cd1cb1be1ee7a4e9783a849bc5"}, 0x0, 0x0, 0x0, 0x0}) 23:46:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x3a}]}) 23:46:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x2000000000012) 23:46:10 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000082505a2a440000120030109025c0002010000000933e39758f7c51316052406000105240000000d240fffff000000000000000006241a0000000905810300020000130904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:46:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x78, 0xd2, 0xc3, 0x40, 0x7b8, 0x420a, 0x18a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0x31, 0x77}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 23:46:11 executing program 1: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) syz_io_uring_setup(0x2f20, &(0x7f0000003100)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000003180), &(0x7f00000031c0)) [ 864.107682][T17236] usb 5-1: new high-speed USB device number 8 using dummy_hcd 23:46:11 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) [ 864.347037][T17236] usb 5-1: Using ep0 maxpacket: 8 [ 864.357396][ T1983] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 864.468203][T17236] usb 5-1: New USB device found, idVendor=10c4, idProduct=81e8, bcdDevice=7d.31 [ 864.478806][T17236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:46:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0x1081}, {&(0x7f0000000300)=""/170, 0x4}, {&(0x7f0000000e00)=""/96, 0x12c}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) [ 864.605383][T17236] usb 5-1: config 0 descriptor?? [ 864.617986][ T1983] usb 6-1: Using ep0 maxpacket: 8 [ 864.666682][T17236] cp210x 5-1:0.0: cp210x converter detected [ 864.688874][ T9820] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 864.777567][ T1983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 864.788552][ T1983] usb 6-1: config 1 has no interface number 0 23:46:12 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86, @fixed}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x6}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)="0500001400001100fe800000000000000200"/40, 0x2a}], 0x1, 0x0, 0x0, 0x50}, 0x0) 23:46:12 executing program 0: r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) [ 865.052096][ T1983] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 865.063502][ T1983] usb 6-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 865.073945][ T1983] usb 6-1: Product: syz [ 865.079260][ T1983] usb 6-1: Manufacturer: syz [ 865.084563][ T1983] usb 6-1: SerialNumber: syz [ 865.095232][T17236] usb 5-1: cp210x converter now attached to ttyUSB0 [ 865.269059][ T9820] usb 4-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=18.a5 [ 865.280071][ T9820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.292256][ T9820] usb 4-1: Product: syz [ 865.297450][ T9820] usb 4-1: Manufacturer: syz [ 865.302774][ T9820] usb 4-1: SerialNumber: syz [ 865.312494][ T8449] usb 5-1: USB disconnect, device number 8 [ 865.384426][ T8449] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 865.395645][ T8449] cp210x 5-1:0.0: device disconnected [ 865.547482][ T9820] usb 4-1: config 0 descriptor?? [ 865.627099][ T1983] cdc_subset 6-1:1.1 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Linux Device, 36:6e:a0:29:fe:be [ 865.832353][ T8449] usb 6-1: USB disconnect, device number 27 [ 865.840957][ T8449] cdc_subset 6-1:1.1 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Linux Device 23:46:13 executing program 0: syz_emit_ethernet(0x62, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote, {[@timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x2}, @lsrr={0x83, 0x7, 0x0, [@multicast1]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 866.007385][ T9820] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 866.020873][ T9820] asix: probe of 4-1:0.0 failed with error -71 [ 866.228585][ T9820] usb 4-1: USB disconnect, device number 22 23:46:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0x1081}, {&(0x7f0000000300)=""/170, 0x4}, {&(0x7f0000000e00)=""/96, 0x12c}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) 23:46:13 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb8, 0x87, 0x5d, 0x8, 0x10c4, 0x81e8, 0x7d31, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x34, 0xda, 0x9a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f00)={0x18, &(0x7f0000000100)={0x0, 0x0, 0xd, "cd1cb1be1ee7a4e9783a849bc5"}, 0x0, 0x0, 0x0, 0x0}) 23:46:13 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000082505a2a440000120030109025c0002010000000933e39758f7c51316052406000105240000000d240fffff000000000000000006241a0000000905810300020000130904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:46:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 866.887397][ T9820] usb 4-1: new high-speed USB device number 23 using dummy_hcd 23:46:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0x1081}, {&(0x7f0000000300)=""/170, 0x4}, {&(0x7f0000000e00)=""/96, 0x12c}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) [ 867.327412][ T8449] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 867.477880][ T9820] usb 4-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=18.a5 [ 867.488374][ T9820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.498378][ T9820] usb 4-1: Product: syz [ 867.507203][ T9820] usb 4-1: Manufacturer: syz [ 867.512596][ T9820] usb 4-1: SerialNumber: syz [ 867.567113][ T8449] usb 5-1: Using ep0 maxpacket: 8 [ 867.688882][ T8449] usb 5-1: New USB device found, idVendor=10c4, idProduct=81e8, bcdDevice=7d.31 [ 867.699636][ T8449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.702986][ T9820] usb 4-1: config 0 descriptor?? [ 867.834802][ T8449] usb 5-1: config 0 descriptor?? 23:46:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) 23:46:15 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, 0x1f, 0x0) [ 867.877565][ T1983] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 867.910363][ T9820] usb 4-1: can't set config #0, error -71 [ 867.933565][ T8449] cp210x 5-1:0.0: cp210x converter detected [ 868.038868][ T9820] usb 4-1: USB disconnect, device number 23 [ 868.178683][ T1983] usb 6-1: Using ep0 maxpacket: 8 [ 868.308877][ T1983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 868.319598][ T1983] usb 6-1: config 1 has no interface number 0 [ 868.326066][ T8449] usb 5-1: cp210x converter now attached to ttyUSB0 [ 868.552705][ T8449] usb 5-1: USB disconnect, device number 9 [ 868.614882][ T1983] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 868.625545][ T1983] usb 6-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 868.639450][ T1983] usb 6-1: Product: syz [ 868.644761][ T1983] usb 6-1: Manufacturer: syz [ 868.650291][ T1983] usb 6-1: SerialNumber: syz [ 868.660332][ T8449] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 868.671174][ T8449] cp210x 5-1:0.0: device disconnected 23:46:15 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 23:46:16 executing program 3: io_setup(0x3a, &(0x7f0000000000)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000540)={0x28, 0x0, 0x0, @my=0x1}, 0x10) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 23:46:16 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg(0xffffffffffffffff, 0x0, 0x840) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x195, &(0x7f0000000a00)=[{&(0x7f0000000280)="03", 0x147cd6}], 0x2, 0x0, 0x0, 0x3680}, 0x20030) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200), 0x4) 23:46:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) [ 869.291870][ T1983] cdc_subset 6-1:1.1 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Linux Device, 36:6e:a0:29:fe:be [ 869.591545][ T8449] usb 6-1: USB disconnect, device number 28 [ 869.600059][ T8449] cdc_subset 6-1:1.1 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Linux Device 23:46:17 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 23:46:17 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 23:46:17 executing program 2: r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x1}, 0x18) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus'}, 0x9) 23:46:17 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 23:46:17 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x60, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="6b56fd43ff14c550"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 23:46:18 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r0, &(0x7f0000000400)=[{0x0, 0x2}, {0x0, 0x24}, {0x0}, {&(0x7f0000000340)="d3", 0x63}], 0x4) 23:46:18 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 23:46:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae60, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x8, 0x3}) 23:46:19 executing program 0: syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081d99208e70420001d5b0102030109022d0001000000000904000003af2f39000905f4ffffff"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f1497840ac05199269390000000109021b001d93000000090400000103dc0000090587"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="20019a"], 0x0}) 23:46:19 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x60, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="6b56fd43ff14c550"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 23:46:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r2, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0xbb}, {&(0x7f0000000300)=""/170, 0x158}, {&(0x7f0000000e00)=""/96, 0x2}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) 23:46:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e001a0008000200aaccb20f0954", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) 23:46:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) [ 872.927407][ T52] usb 1-1: new high-speed USB device number 29 using dummy_hcd 23:46:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000003c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e2000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff310cccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c832103a05183f336cae13b5121b5a6f1ba2112ce68bf17a6e0000000", 0xc0) [ 873.318089][ T52] usb 1-1: config 147 has 1 interface, different from the descriptor's value: 29 [ 873.328529][ T52] usb 1-1: config 147 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 873.342305][ T52] usb 1-1: config 147 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 2047, setting to 1024 [ 873.355374][ T52] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=39.69 [ 873.365375][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:46:20 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000280)={0x0, [], 0x7}) 23:46:20 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r2, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0xbb}, {&(0x7f0000000300)=""/170, 0x158}, {&(0x7f0000000e00)=""/96, 0x2}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) [ 873.699201][T20845] raw-gadget gadget: fail, usb_ep_enable returned -22 23:46:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4, 0x0, 0x2, r4}) dup3(r3, r1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x71ac7}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x37, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x80}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:46:21 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x60, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="6b56fd43ff14c550"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 873.959382][ T52] appledisplay: Apple Cinema Display connected [ 874.176024][ T52] usb 1-1: USB disconnect, device number 29 [ 874.183135][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 874.195937][ T52] appledisplay: Apple Cinema Display disconnected 23:46:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r1, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 23:46:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xaea3, 0x0) [ 874.977724][ T52] usb 1-1: new high-speed USB device number 30 using dummy_hcd 23:46:22 executing program 0: syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081d99208e70420001d5b0102030109022d0001000000000904000003af2f39000905f4ffffff"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f1497840ac05199269390000000109021b001d93000000090400000103dc0000090587"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="20019a"], 0x0}) 23:46:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r2, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0xbb}, {&(0x7f0000000300)=""/170, 0x158}, {&(0x7f0000000e00)=""/96, 0x2}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) 23:46:22 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x60, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="6b56fd43ff14c550"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 23:46:22 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/233, 0xe5}, {&(0x7f00000001c0)=""/92, 0x5c}], 0x10000131, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) 23:46:22 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9e662a04"}, 0x0, 0x0, @userptr}) 23:46:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000032c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [], 0x0, [0x10], [0x0, 0x10]}}}}]}, 0x88}}, 0x0) 23:46:23 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @empty}}, 0x1e) [ 876.268535][ T52] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 876.638601][ T52] usb 1-1: config 147 has 1 interface, different from the descriptor's value: 29 [ 876.649052][ T52] usb 1-1: config 147 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 876.662844][ T52] usb 1-1: config 147 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 2047, setting to 1024 [ 876.675721][ T52] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=39.69 23:46:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r2, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0xbb}, {&(0x7f0000000300)=""/170, 0x158}, {&(0x7f0000000e00)=""/96, 0x2}, {&(0x7f0000000600)=""/204, 0x1bc}, {&(0x7f0000001040)=""/4096, 0x1011}], 0x5}}], 0x14, 0x0, 0x0) [ 876.685205][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:46:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x20}, {0x6}]}) 23:46:24 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x3c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 877.190088][T20917] raw-gadget gadget: fail, usb_ep_enable returned -22 23:46:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'nq\x00'}, 0x2c) 23:46:24 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r1) r2 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0xa0000214) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') [ 877.467431][ T52] appledisplay: Apple Cinema Display connected [ 877.679979][ T7] usb 1-1: USB disconnect, device number 31 [ 877.687116][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 877.701886][ T7] appledisplay: Apple Cinema Display disconnected [ 877.854757][ T35] audit: type=1326 audit(1621295184.999:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20934 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffe623dc9fd code=0x0 [ 878.418136][ T3129] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.425537][ T3129] ieee802154 phy1 wpan1: encryption failed: -22 23:46:25 executing program 0: syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081d99208e70420001d5b0102030109022d0001000000000904000003af2f39000905f4ffffff"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f1497840ac05199269390000000109021b001d93000000090400000103dc0000090587"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="20019a"], 0x0}) 23:46:25 executing program 5: r0 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000002280)={'syz', 0x2}, &(0x7f0000000280)="c9", 0x1, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000100)='\'', 0x1) 23:46:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:46:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000100)="1f66", 0x2, r1) 23:46:26 executing program 5: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x48082, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="6c114d418b0ac2a457943c527f17d12b52250e9ba364d3677792", 0x1a, 0x0, 0x0, 0x0) 23:46:26 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000003980)=ANY=[@ANYBLOB="86b1"], 0x5a0) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="000e527029cc198567d56c1b7ce732c79ab09176ba00000000", 0x19}], 0x1}}], 0x1, 0x0) 23:46:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 23:46:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) set_mempolicy(0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20000010, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 23:46:26 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e54005fb"}, 0x0, 0x0, @userptr}) [ 879.508453][ T8449] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 879.878587][ T8449] usb 1-1: config 147 has 1 interface, different from the descriptor's value: 29 [ 879.888848][ T8449] usb 1-1: config 147 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 879.903369][ T8449] usb 1-1: config 147 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 2047, setting to 1024 [ 879.916131][ T8449] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=39.69 [ 879.926341][ T8449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:46:27 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:46:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='-4', 0x2}], 0x6) 23:46:27 executing program 1: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) umount2(&(0x7f0000000600)='./file0\x00', 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 880.439513][T20963] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 880.697428][ T8449] appledisplay: Apple Cinema Display connected [ 880.908229][ T8449] usb 1-1: USB disconnect, device number 32 [ 880.947454][ T8449] appledisplay: Apple Cinema Display disconnected 23:46:29 executing program 0: syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000081d99208e70420001d5b0102030109022d0001000000000904000003af2f39000905f4ffffff"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f1497840ac05199269390000000109021b001d93000000090400000103dc0000090587"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="20019a"], 0x0}) 23:46:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e54005fb"}, 0x0, 0x0, @userptr}) 23:46:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 23:46:29 executing program 2: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000340)="8b", 0x1, 0x48000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x97f96, 0x400c040, 0x0, 0x0) 23:46:29 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:46:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 882.172578][T21004] IPVS: ftp: loaded support on port[0] = 21 23:46:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e54005fb"}, 0x0, 0x0, @userptr}) [ 882.777778][ T52] usb 6-1: new high-speed USB device number 29 using dummy_hcd 23:46:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 883.081985][T21004] IPVS: ftp: loaded support on port[0] = 21 [ 883.148850][ T52] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11 [ 883.158893][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.217091][ T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 883.357802][ T52] usb 6-1: config 0 descriptor?? 23:46:30 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 883.433639][ T52] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 883.617500][ T7] usb 1-1: config 147 has 1 interface, different from the descriptor's value: 29 [ 883.629262][ T7] usb 1-1: config 147 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 883.643891][ T7] usb 1-1: config 147 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 2047, setting to 1024 [ 883.659058][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=39.69 [ 883.669454][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:46:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e54005fb"}, 0x0, 0x0, @userptr}) [ 883.837926][ T52] gspca_cpia1: usb_control_msg 03, error -32 [ 883.881389][ T52] gspca_cpia1: usb_control_msg 03, error -71 [ 883.891088][ T52] cpia1 6-1:0.0: Cannot go to low power mode: -71 [ 884.010656][ T52] gspca_cpia1: usb_control_msg 01, error -71 [ 884.017680][ T52] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) 23:46:31 executing program 2: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000340)="8b", 0x1, 0x48000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x97f96, 0x400c040, 0x0, 0x0) [ 884.119910][T21034] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 884.204183][ T52] usb 6-1: USB disconnect, device number 29 23:46:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 884.457640][ T7] appledisplay: Apple Cinema Display connected [ 884.609270][T21082] IPVS: ftp: loaded support on port[0] = 21 [ 884.687662][T13090] usb 1-1: USB disconnect, device number 33 [ 884.715935][T13090] appledisplay: Apple Cinema Display disconnected [ 884.727342][ T52] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 885.209542][ T52] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11 [ 885.219211][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.316520][ T52] usb 6-1: config 0 descriptor?? [ 885.446664][ T52] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 885.707366][ T52] gspca_cpia1: usb_control_msg 05, error -71 [ 885.713611][ T52] cpia1 6-1:0.0: Cannot go to low power mode: -71 [ 885.771179][ T52] gspca_cpia1: usb_control_msg 01, error -71 [ 885.778548][ T52] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 885.842060][ T52] usb 6-1: USB disconnect, device number 30 23:46:33 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x93, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:46:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 23:46:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 23:46:33 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 23:46:33 executing program 2: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000340)="8b", 0x1, 0x48000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x97f96, 0x400c040, 0x0, 0x0) 23:46:33 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x5}) 23:46:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000068d941101d0620c0e5f2010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001400)={0x84, &(0x7f0000000f80)={0x0, 0x0, 0x3, "3ddc24"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 886.628211][T21132] IPVS: ftp: loaded support on port[0] = 21 23:46:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}}, 0x0) 23:46:34 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='%'], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 23:46:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) [ 887.467715][T21163] kAFS: unparsable volume name [ 887.479966][ T3086] usb 4-1: new high-speed USB device number 24 using dummy_hcd 23:46:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x5}) [ 887.727314][ T3086] usb 4-1: Using ep0 maxpacket: 16 23:46:35 executing program 2: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000340)="8b", 0x1, 0x48000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x97f96, 0x400c040, 0x0, 0x0) 23:46:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 888.024687][ T3086] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=f2.e5 [ 888.034505][ T3086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.043329][ T3086] usb 4-1: Product: syz [ 888.049601][ T3086] usb 4-1: Manufacturer: syz [ 888.055411][ T3086] usb 4-1: SerialNumber: syz 23:46:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635040000000f22c0f2195d0066b9014d564b0f323e6567660f38810766b8c20000000f23d80f21f80f23f864f30f1af90fb638260fd7f9360f4480741b0f2183", 0x44}], 0x1, 0x0, 0x0, 0x2b) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x1c, 0x9b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 888.072585][ T3086] usb 4-1: config 0 descriptor?? [ 888.122242][ T3086] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected 23:46:35 executing program 1: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 888.385134][T21172] IPVS: ftp: loaded support on port[0] = 21 [ 888.987387][ T3086] ssu100: probe of 4-1:0.0 failed with error -71 [ 889.045983][ T3086] usb 4-1: USB disconnect, device number 24 23:46:36 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x5}) 23:46:36 executing program 4: r0 = syz_io_uring_setup(0x6ec1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x3, 0x0, 0x0}, 0x401) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x3edb, 0x0, 0x0, 0x0, 0x0) 23:46:36 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 889.747042][ T3086] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 889.997579][ T3086] usb 4-1: Using ep0 maxpacket: 16 [ 890.277431][ T3086] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=f2.e5 [ 890.288087][ T3086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.298958][ T3086] usb 4-1: Product: syz [ 890.303526][ T3086] usb 4-1: Manufacturer: syz [ 890.309101][ T3086] usb 4-1: SerialNumber: syz [ 890.551152][ T3086] usb 4-1: config 0 descriptor?? 23:46:37 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x1, 0x8, 0xdf4c}, 0xc) 23:46:37 executing program 5: clone3(&(0x7f0000001240)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {}, &(0x7f0000000140)=""/4096, 0xfffffffffffffe56, &(0x7f0000001140)=""/157, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 23:46:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x5}) 23:46:37 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0xd0, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x57}}]}, @REJECT={0x28}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "1883"}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x473) 23:46:37 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x200000000e26a, 0x0) [ 890.757728][ T3086] usb 4-1: can't set config #0, error -71 23:46:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x3, 0x0) lseek(r0, 0x1, 0x1) [ 890.809290][ T3086] usb 4-1: USB disconnect, device number 25 [ 891.110238][T21242] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 891.151952][T21241] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 891.262151][T21246] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 23:46:38 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc004500a, &(0x7f00000000c0)) 23:46:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083147f20c81403008f2b0102030109021b00010000040009040000015958a70009058703"], 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:46:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x90}}}, 0xb8}}, 0x0) 23:46:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xae, 0x0, &(0x7f0000000000)) 23:46:39 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000000}) 23:46:39 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r2, r3, 0x0) setns(r4, 0x20000) [ 892.417159][T19945] usb 1-1: new high-speed USB device number 34 using dummy_hcd 23:46:39 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x2b, 0x1, 0x0) getsockname$packet(r1, 0x0, 0x0) [ 892.667598][T19945] usb 1-1: Using ep0 maxpacket: 32 [ 892.788762][T19945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 892.805958][T19945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 1336, setting to 1024 23:46:40 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ef27b248"}, 0x0, 0x0, @fd}) [ 893.178882][T19945] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=2b.8f [ 893.190043][T19945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.199742][T19945] usb 1-1: Product: syz [ 893.204491][T19945] usb 1-1: Manufacturer: syz [ 893.214267][T19945] usb 1-1: SerialNumber: syz 23:46:40 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x90, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:46:40 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2001) write(r0, &(0x7f0000000240)="cc01ffce56231bb25f4d60e281ee66ea3448db9c89eddf2834280b1c", 0x1c) [ 893.492163][T19945] usb 1-1: config 0 descriptor?? 23:46:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x24}, {0xa4}, {0x6}]}) [ 893.530281][T21253] raw-gadget gadget: fail, usb_ep_enable returned -22 23:46:40 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240), 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="421b3ef7", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="519b", 0x2}, {&(0x7f0000000100)="caa9", 0x2}], 0x2}}], 0x2, 0x0) [ 893.631881][T19945] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 893.840856][T19945] usb 1-1: USB disconnect, device number 34 [ 894.097797][ T35] audit: type=1326 audit(1621295201.239:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21282 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 23:46:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x3ff, 0x4) [ 894.910327][ T35] audit: type=1326 audit(1621295202.059:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21282 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc663c29fd code=0x0 23:46:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/48, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) 23:46:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070094cb2767db007c321b1d9ef28ba4efd1189f256fe2bf57981c9fb9600b55d0c3e864ae17171ce1a2bb0804a29d1d4b2902133b3efe16668d08000000000000007745a0add79f04f6d0753d81d4d46f1b72ed9eebde5ca38a91e6429b901b6f30935ea3c97bbbdf76bd80d4ac3a758eeb3b77b0dad9196da7c4a34886d6e883eb2b78704d36448d5baec668edde0d93827d2a749e3d9e408f56cef75845f16f7f231e023b79ff19dfd2c36481ba089c7b81ef38aa2545a29c0100"/201, 0xc9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:46:42 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 23:46:42 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x3800, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x34}}, 0x0) 23:46:42 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x25000000) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141002) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) dup(r3) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={0x1fc}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x0, 0x0) accept4$unix(r6, 0x0, 0x0, 0x80000) 23:46:42 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x1268, 0x541000) 23:46:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x81}, {0x3c}, {0x6}]}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) 23:46:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') 23:46:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x500, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) [ 896.952827][ T35] audit: type=1326 audit(1621295204.099:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21324 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 23:46:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5}, @IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x48}}, 0x0) 23:46:44 executing program 4: mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)=""/203) r0 = syz_open_dev$vcsn(&(0x7f00000027c0), 0x85b0, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000027c0), 0x85b0, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000240)=0xc9) r2 = semget(0x1, 0x4, 0x794) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000280)=""/96) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000200)={0x4, 0xc9, &(0x7f0000000100)="9c96de03bd4550df3f8132046f2b63e9ab372c9cf63f9d5a6f00eec4f042cbc3af4225bcec0e34f5252b331d1c84db06ed41c6b8fcafeb95f66e8246ba73ebe5013ec87a971bb24597ba07e91efe6a52d757509cde6532b0c0fa707ea95ff602d5b0dc35b76313b82318ea34b308f62d193644060beccb22c2029a40a5f5e8090a3fca259bd5be8ffbc0d6160bc35e98633afaf70328025eccafc1cc4df709b9010f7dc5aec2bc392804334acfb071ac6776a16deb619ada159fc7a0c7586bbc61c0a02aba458fad7a"}) semctl$IPC_RMID(0x0, 0x0, 0x0) 23:46:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x10000000000000bd, 0x7f, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) [ 897.573976][ T35] audit: type=1326 audit(1621295204.719:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21324 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 23:46:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7c2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:46:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x81}, {0x3c}, {0x6}]}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) 23:46:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x4c, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000037000511d24380648c63940d0135fc6006001240090002000200000037153e370a0001805a256400d1bd", 0x2e}], 0x1}, 0x0) 23:46:45 executing program 0: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="8be6df36780c1399", 0x8}, {&(0x7f0000000140)="e2", 0x1}], 0x2) 23:46:45 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f", 0x7) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4009a9, 0x0) 23:46:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da44", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:46:46 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000018b7c540c215370065d20000000109021b000100000000090400000145e54f000905840346"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x18, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 898.982858][T21375] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 899.157251][ T35] audit: type=1326 audit(1621295206.299:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21374 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 [ 899.311814][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:46:46 executing program 0: setrlimit(0x2, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x20012, r0, 0x0) 23:46:46 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x108101, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) 23:46:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="f30f09670f30eafeff0000d2002e0fc7b533180000f20f1c310f00da66f2ded22e0fcb68372f78eb360f005919", 0xfffffffffffffebc}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x1000, 0x8000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000004c8], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 899.943688][T21392] mmap: syz-executor.0 (21392): VmData 45768704 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 900.257175][ T4685] usb 2-1: new high-speed USB device number 18 using dummy_hcd 23:46:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x81}, {0x3c}, {0x6}]}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) 23:46:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @remote, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r2}, &(0x7f0000000100)=0x8) [ 900.657413][ T4685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 900.670084][ T4685] usb 2-1: New USB device found, idVendor=15c2, idProduct=0037, bcdDevice=d2.65 [ 900.680058][ T4685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:46:47 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 900.919877][ T4685] usb 2-1: config 0 descriptor?? [ 900.965939][ T4685] input: iMON Panel, Knob and Mouse(15c2:0037) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 901.000829][ T35] audit: type=1326 audit(1621295208.149:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 23:46:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, r2) 23:46:48 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x6000084) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1) [ 901.627840][ T4685] rc_core: IR keymap rc-imon-pad not found [ 901.634099][ T4685] Registered IR keymap rc-empty [ 901.640052][ T4685] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 901.651742][ T4685] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 901.958558][ T4685] rc rc0: iMON Remote (15c2:0037) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 901.970903][ T4685] input: iMON Remote (15c2:0037) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input23 [ 902.029952][T21411] syz-executor.4 (21411) used greatest stack depth: 3608 bytes left 23:46:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x81}, {0x3c}, {0x6}]}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) 23:46:49 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 902.188760][ T4685] imon 2-1:0.0: iMON device (15c2:0037, intf0) on usb<2:18> initialized [ 902.198760][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 902.218946][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 902.258965][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 902.317500][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 902.367589][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 902.392035][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 902.402583][ T4685] usb 2-1: USB disconnect, device number 18 [ 902.419688][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 23:46:49 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) dup2(r1, r0) [ 902.693702][ T35] audit: type=1326 audit(1621295209.839:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21436 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc629e09fd code=0x0 [ 903.017311][ T4685] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 903.388187][ T4685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 903.400078][ T4685] usb 2-1: New USB device found, idVendor=15c2, idProduct=0037, bcdDevice=d2.65 [ 903.410665][ T4685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.526712][ T4685] usb 2-1: config 0 descriptor?? 23:46:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='cmdline\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0x0, 0x0) [ 903.654704][ T4685] usb 2-1: can't set config #0, error -71 [ 903.664486][ T4685] usb 2-1: USB disconnect, device number 19 23:46:50 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 23:46:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}}, 0x0) 23:46:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe1, 0xe1, 0x6, [@fwd, @datasec={0x0, 0xc, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], '\x00'}, @fwd, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x102}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:46:50 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80045002, 0x0) 23:46:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x130) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:46:51 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 904.317751][T21480] input: syz0 as /devices/virtual/input/input24 23:46:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x9, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 23:46:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}}, 0x0) 23:46:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 23:46:51 executing program 5: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00') 23:46:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@volatile, @union, @array]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x53}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102395, 0x18ffb}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 23:46:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x1, "943a3bce1840e365514f5548ba04838b471792f35db60d0fad4b3a597e2dda8a"}) 23:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 23:46:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}}, 0x0) 23:46:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getdents(r0, &(0x7f0000000080)=""/40, 0x28) getdents64(r0, &(0x7f0000000180)=""/141, 0x8d) 23:46:52 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0x86, 0xe4, 0x8, 0x1776, 0x501c, 0x30f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0xe8, 0xf7}}]}}]}}, 0x0) 23:46:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b4993744bf073b5d9d6867e3fa8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d508094174e499e84e3f90f3c9c39e460000000000000000", 0x83}], 0x4, 0xb) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 23:46:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 23:46:53 executing program 0: unshare(0x400) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x80045017, &(0x7f0000000000)) 23:46:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}}, 0x0) [ 906.613822][T21522] input: syz0 as /devices/virtual/input/input25 23:46:53 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0x4, [@enum, @var, @typedef, @ptr, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @array, @typedef, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "05"}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xc0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() rt_sigqueueinfo(r3, 0x28, &(0x7f0000000140)) [ 906.957088][ T7] usb 6-1: new high-speed USB device number 31 using dummy_hcd 23:46:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800007, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}], 0x1, 0x0, 0x0) [ 907.267475][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 907.408343][ T7] usb 6-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=30.f2 [ 907.419778][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:46:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x7, 0x0) [ 907.557570][ T7] usb 6-1: config 0 descriptor?? [ 907.618961][ T7] gspca_main: spca501-2.14.0 probing 1776:501c 23:46:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/unix\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') dup3(r1, r2, 0x0) [ 907.818980][ T7] gspca_spca501: reg write: error -71 [ 907.825806][ T7] spca501 6-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 907.834742][ T7] spca501: probe of 6-1:0.0 failed with error -22 [ 908.046551][ T7] usb 6-1: USB disconnect, device number 31 23:46:55 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12c176f1f4e96182, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x4}, 0x10) bind$tipc(r2, 0x0, 0x0) bind$tipc(r1, &(0x7f0000008c00)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) 23:46:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800007, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}], 0x1, 0x0, 0x0) 23:46:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3ffb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000461000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0), 0xf0000}], 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 908.727582][ T7] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 908.998855][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 909.119553][ T7] usb 6-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=30.f2 [ 909.131447][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.329260][ T7] usb 6-1: config 0 descriptor?? [ 909.392340][ T7] gspca_main: spca501-2.14.0 probing 1776:501c 23:46:57 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0x86, 0xe4, 0x8, 0x1776, 0x501c, 0x30f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0xe8, 0xf7}}]}}]}}, 0x0) 23:46:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6", 0x1}, {&(0x7f0000000100)="f9", 0x1}, {&(0x7f0000000180)="776d9d388685e51b4fd049bd41f4a9d2718bb1194c9571ac13be7a8ec706716cff46510d72da87019cc45e023273f29a0733ecb521acce2db5de1f196d24fb142c36e1858d9e2e5be0c96d63ce5320426e6727db51bec85eab8117933ce5dea0d34c7200767ede0fbf7e4a2891d30980a487e87ffde528185fbfab8ed38e15c224a0f96b9e3c309181c317ddb729845f095a50540bc54cb008fc2da2e990602c09dee2954944abbee35a80b9b72e7263b517eb99488302eb7247a902cd40f904f2e596bafb7458a99c6ed3e070af0e4b0c3e00513dd69c895d93de1e3a4a78", 0xdf}, {&(0x7f00000005c0)="11ac325e27208134172147b9f04e79c0319f4958549530d153f8578649c513b1c60a4bc687ae751b862b215361289bce42395c79829be73981714f227784cc213516ecdaece733d76269c43a7ea568ffe36c460363a8e7b0364610a4fe8d6ae0c7875d5115d6b733f9ee0d7df117be76ff887b6982fc4771178c26ea581945015faa6a34", 0xfffffc43}], 0x4, 0x0) close(r3) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) splice(r2, 0x0, r3, 0x0, 0x80000000, 0x0) 23:46:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800007, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}], 0x1, 0x0, 0x0) 23:46:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b4993744bf073b5d9d6867e3fa8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d508094174e499e84e3f90f3c9c39e460000000000000000", 0x83}], 0x4, 0xb) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 909.907855][ T7] gspca_spca501: reg write: error -71 [ 909.914999][ T7] spca501 6-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 909.924752][ T7] spca501: probe of 6-1:0.0 failed with error -22 23:46:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x4000) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}}, 0x20004004) pipe(&(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 23:46:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x1, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dontfrag={{0x14}}], 0x30}}], 0x2, 0x810) [ 910.177186][ T7] usb 6-1: USB disconnect, device number 32 [ 910.424369][T21587] ===================================================== [ 910.426978][T21587] BUG: KMSAN: uninit-value in nf_conntrack_udplite_packet+0x6cc/0x12d0 [ 910.433295][T21587] CPU: 0 PID: 21587 Comm: syz-executor.2 Tainted: G W 5.12.0-rc6-syzkaller #0 [ 910.433295][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.433295][T21587] Call Trace: [ 910.433295][T21587] dump_stack+0x24c/0x2e0 [ 910.433295][T21587] kmsan_report+0xfb/0x1e0 [ 910.477332][T21587] __msan_warning+0x5c/0xa0 [ 910.477332][T21587] nf_conntrack_udplite_packet+0x6cc/0x12d0 [ 910.477332][T21587] nf_conntrack_in+0x104b/0x296d [ 910.477332][T21587] ipv4_conntrack_local+0x225/0x3b0 [ 910.477332][T21587] ? ipv4_conntrack_in+0x80/0x80 [ 910.477332][T21587] nf_hook_slow+0x17b/0x460 [ 910.477332][T21587] __ip_local_out+0x78c/0x840 [ 910.477332][T21587] ? __ip_local_out+0x840/0x840 [ 910.477332][T21587] ip_send_skb+0xb1/0x350 [ 910.477332][T21587] udp_send_skb+0x152d/0x1bc0 [ 910.531329][T21587] udp_sendpage+0x7f2/0xba0 [ 910.531329][T21587] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 910.531329][T21587] ? inet_send_prepare+0x92/0x6b0 [ 910.531329][T21587] ? kmsan_get_metadata+0x116/0x180 [ 910.531329][T21587] ? udplite_getfrag+0x140/0x140 [ 910.531329][T21587] inet_sendpage+0x1da/0x2f0 [ 910.531329][T21587] kernel_sendpage+0x47a/0x590 [ 910.567368][T21587] ? inet_sendmsg+0x1d0/0x1d0 23:46:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800007, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}], 0x1, 0x0, 0x0) [ 910.567368][T21587] sock_sendpage+0x161/0x1a0 [ 910.567368][T21587] pipe_to_sendpage+0x3e4/0x520 [ 910.567368][T21587] ? sock_fasync+0x250/0x250 [ 910.567368][T21587] __splice_from_pipe+0x5e3/0xff0 [ 910.567368][T21587] ? generic_splice_sendpage+0x2c0/0x2c0 [ 910.597637][T21587] generic_splice_sendpage+0x1d5/0x2c0 [ 910.597637][T21587] ? iter_file_splice_write+0x1b20/0x1b20 [ 910.597637][T21587] do_splice+0x23c3/0x2c10 [ 910.597637][T21587] ? kmsan_get_metadata+0x116/0x180 [ 910.597637][T21587] ? kmsan_get_metadata+0x116/0x180 [ 910.597637][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 910.597637][T21587] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 910.597637][T21587] ? __msan_instrument_asm_store+0x107/0x130 [ 910.597637][T21587] ? __msan_get_context_state+0x9/0x20 [ 910.650018][T21587] ? kmsan_get_metadata+0x116/0x180 [ 910.650018][T21587] __se_sys_splice+0x8fa/0xb50 [ 910.650018][T21587] __x64_sys_splice+0x6e/0x90 [ 910.650018][T21587] do_syscall_64+0x9f/0x140 [ 910.650018][T21587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 910.650018][T21587] RIP: 0033:0x4665d9 [ 910.650018][T21587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 910.687058][T21587] RSP: 002b:00007f8fea4b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 910.687058][T21587] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 910.687058][T21587] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 910.687058][T21587] RBP: 00000000004bfcb9 R08: 0000000080000000 R09: 0000000000000000 [ 910.687058][T21587] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 910.687058][T21587] R13: 0000000000a9fb1f R14: 00007f8fea4b9300 R15: 0000000000022000 [ 910.687058][T21587] [ 910.687058][T21587] Uninit was stored to memory at: [ 910.687058][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 910.687058][T21587] __msan_chain_origin+0x54/0xa0 [ 910.687058][T21587] udp_send_skb+0x1767/0x1bc0 [ 910.687058][T21587] udp_sendpage+0x7f2/0xba0 [ 910.687058][T21587] inet_sendpage+0x1da/0x2f0 [ 910.687058][T21587] kernel_sendpage+0x47a/0x590 [ 910.687058][T21587] sock_sendpage+0x161/0x1a0 [ 910.687058][T21587] pipe_to_sendpage+0x3e4/0x520 [ 910.687058][T21587] __splice_from_pipe+0x5e3/0xff0 [ 910.687058][T21587] generic_splice_sendpage+0x1d5/0x2c0 [ 910.687058][T21587] do_splice+0x23c3/0x2c10 [ 910.687058][T21587] __se_sys_splice+0x8fa/0xb50 [ 910.687058][T21587] __x64_sys_splice+0x6e/0x90 [ 910.687058][T21587] do_syscall_64+0x9f/0x140 [ 910.687058][T21587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 910.687058][T21587] [ 910.687058][T21587] Uninit was stored to memory at: [ 910.687058][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 910.687058][T21587] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 910.687058][T21587] kmsan_memcpy_metadata+0xb/0x10 [ 910.687058][T21587] __msan_memcpy+0x46/0x60 [ 910.687058][T21587] skb_copy_bits+0x293/0x1040 [ 910.687058][T21587] tpacket_rcv+0x550a/0x8010 [ 910.687058][T21587] __netif_receive_skb+0x1ec/0x640 [ 910.687058][T21587] process_backlog+0x517/0xbd0 [ 910.687058][T21587] __napi_poll+0x13e/0xca0 [ 910.687058][T21587] net_rx_action+0x726/0x14a0 [ 910.687058][T21587] __do_softirq+0x1b9/0x715 [ 910.687058][T21587] [ 910.687058][T21587] Uninit was stored to memory at: [ 910.687058][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 910.687058][T21587] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 910.687058][T21587] kmsan_memcpy_metadata+0xb/0x10 [ 910.687058][T21587] __msan_memcpy+0x46/0x60 [ 910.687058][T21587] pskb_expand_head+0x3d6/0x1e20 [ 910.687058][T21587] batadv_skb_head_push+0x2cc/0x410 [ 910.687058][T21587] batadv_send_skb_packet+0x1ed/0x970 [ 910.687058][T21587] batadv_send_broadcast_skb+0x76/0x90 [ 910.687058][T21587] batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0 [ 910.687058][T21587] process_one_work+0x1219/0x1fe0 [ 910.687058][T21587] worker_thread+0x10ec/0x2340 [ 910.687058][T21587] kthread+0x521/0x560 [ 910.687058][T21587] ret_from_fork+0x1f/0x30 [ 910.687058][T21587] [ 910.687058][T21587] Uninit was created at: [ 910.687058][T21587] kmsan_internal_poison_shadow+0x5c/0xf0 [ 910.687058][T21587] kmsan_slab_alloc+0x8e/0xe0 [ 910.687058][T21587] __kmalloc_node_track_caller+0xa4f/0x1470 [ 910.687058][T21587] __alloc_skb+0x4dd/0xe90 [ 910.687058][T21587] __netdev_alloc_skb+0x45d/0x810 [ 910.687058][T21587] batadv_iv_ogm_queue_add+0x1376/0x1c40 [ 910.687058][T21587] batadv_iv_ogm_schedule+0x12cd/0x16b0 [ 910.687058][T21587] batadv_iv_send_outstanding_bat_ogm_packet+0xd6e/0xef0 [ 910.687058][T21587] process_one_work+0x1219/0x1fe0 [ 910.687058][T21587] worker_thread+0x10ec/0x2340 [ 910.687058][T21587] kthread+0x521/0x560 [ 910.687058][T21587] ret_from_fork+0x1f/0x30 [ 910.687058][T21587] ===================================================== [ 910.687058][T21587] Disabling lock debugging due to kernel taint [ 911.134034][T21587] ===================================================== [ 911.134034][T21587] BUG: KMSAN: uninit-value in kmsan_check_skb+0x3c/0x240 [ 911.154683][T21587] CPU: 0 PID: 21587 Comm: syz-executor.2 Tainted: G B W 5.12.0-rc6-syzkaller #0 [ 911.154683][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.172428][T21587] Call Trace: [ 911.172428][T21587] dump_stack+0x24c/0x2e0 [ 911.172428][T21587] kmsan_report+0xfb/0x1e0 [ 911.172428][T21587] kmsan_internal_check_memory+0x48c/0x520 [ 911.172428][T21587] kmsan_check_skb+0x3c/0x240 [ 911.172428][T21587] pfifo_fast_dequeue+0x1031/0x1190 [ 911.172428][T21587] ? pfifo_fast_enqueue+0x9f0/0x9f0 [ 911.172428][T21587] dequeue_skb+0x4ad/0x3680 [ 911.172428][T21587] __qdisc_run+0x101/0x490 [ 911.172428][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 911.172428][T21587] __dev_queue_xmit+0x26ad/0x4600 [ 911.172428][T21587] dev_queue_xmit+0x4b/0x60 [ 911.172428][T21587] neigh_resolve_output+0xc65/0xcf0 [ 911.172428][T21587] ? neigh_event_ns+0x370/0x370 [ 911.172428][T21587] ip_finish_output2+0x1d16/0x2930 [ 911.172428][T21587] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 911.172428][T21587] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 911.172428][T21587] ? ip_fraglist_prepare+0x87b/0x8f0 [ 911.172428][T21587] ip_do_fragment+0x3673/0x3b40 [ 911.172428][T21587] ? ip_fragment+0x4a0/0x4a0 [ 911.172428][T21587] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 911.172428][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.172428][T21587] ip_fragment+0x31e/0x4a0 [ 911.172428][T21587] __ip_finish_output+0xb80/0x1050 [ 911.172428][T21587] ip_finish_output+0x329/0x480 [ 911.172428][T21587] ip_output+0x32e/0x6d0 [ 911.172428][T21587] ? ip_mc_finish_output+0x770/0x770 [ 911.172428][T21587] ? ip_finish_output+0x480/0x480 [ 911.172428][T21587] ip_send_skb+0x194/0x350 [ 911.172428][T21587] udp_send_skb+0x152d/0x1bc0 [ 911.172428][T21587] udp_sendpage+0x7f2/0xba0 [ 911.172428][T21587] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 911.172428][T21587] ? inet_send_prepare+0x92/0x6b0 [ 911.172428][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.172428][T21587] ? udplite_getfrag+0x140/0x140 [ 911.172428][T21587] inet_sendpage+0x1da/0x2f0 [ 911.172428][T21587] kernel_sendpage+0x47a/0x590 [ 911.172428][T21587] ? inet_sendmsg+0x1d0/0x1d0 [ 911.172428][T21587] sock_sendpage+0x161/0x1a0 [ 911.172428][T21587] pipe_to_sendpage+0x3e4/0x520 [ 911.172428][T21587] ? sock_fasync+0x250/0x250 [ 911.172428][T21587] __splice_from_pipe+0x5e3/0xff0 [ 911.172428][T21587] ? generic_splice_sendpage+0x2c0/0x2c0 [ 911.172428][T21587] generic_splice_sendpage+0x1d5/0x2c0 [ 911.172428][T21587] ? iter_file_splice_write+0x1b20/0x1b20 [ 911.172428][T21587] do_splice+0x23c3/0x2c10 [ 911.172428][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.172428][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.172428][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 911.172428][T21587] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 911.172428][T21587] ? __msan_instrument_asm_store+0x107/0x130 [ 911.172428][T21587] ? __msan_get_context_state+0x9/0x20 [ 911.172428][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.172428][T21587] __se_sys_splice+0x8fa/0xb50 [ 911.172428][T21587] __x64_sys_splice+0x6e/0x90 [ 911.172428][T21587] do_syscall_64+0x9f/0x140 [ 911.172428][T21587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 911.172428][T21587] RIP: 0033:0x4665d9 [ 911.172428][T21587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 911.172428][T21587] RSP: 002b:00007f8fea4b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 911.172428][T21587] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 911.172428][T21587] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 911.172428][T21587] RBP: 00000000004bfcb9 R08: 0000000080000000 R09: 0000000000000000 [ 911.172428][T21587] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 911.172428][T21587] R13: 0000000000a9fb1f R14: 00007f8fea4b9300 R15: 0000000000022000 [ 911.172428][T21587] [ 911.172428][T21587] Uninit was stored to memory at: [ 911.172428][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 911.172428][T21587] __msan_chain_origin+0x54/0xa0 [ 911.172428][T21587] udp_send_skb+0x1767/0x1bc0 [ 911.172428][T21587] udp_sendpage+0x7f2/0xba0 [ 911.172428][T21587] inet_sendpage+0x1da/0x2f0 [ 911.172428][T21587] kernel_sendpage+0x47a/0x590 [ 911.172428][T21587] sock_sendpage+0x161/0x1a0 [ 911.172428][T21587] pipe_to_sendpage+0x3e4/0x520 [ 911.172428][T21587] __splice_from_pipe+0x5e3/0xff0 [ 911.172428][T21587] generic_splice_sendpage+0x1d5/0x2c0 [ 911.172428][T21587] do_splice+0x23c3/0x2c10 [ 911.172428][T21587] __se_sys_splice+0x8fa/0xb50 [ 911.172428][T21587] __x64_sys_splice+0x6e/0x90 [ 911.172428][T21587] do_syscall_64+0x9f/0x140 [ 911.172428][T21587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 911.172428][T21587] [ 911.172428][T21587] Uninit was stored to memory at: [ 911.172428][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 911.172428][T21587] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 911.172428][T21587] kmsan_memcpy_metadata+0xb/0x10 [ 911.172428][T21587] __msan_memcpy+0x46/0x60 [ 911.172428][T21587] skb_copy_bits+0x293/0x1040 [ 911.172428][T21587] tpacket_rcv+0x550a/0x8010 [ 911.172428][T21587] __netif_receive_skb+0x1ec/0x640 [ 911.172428][T21587] process_backlog+0x517/0xbd0 [ 911.172428][T21587] __napi_poll+0x13e/0xca0 [ 911.172428][T21587] net_rx_action+0x726/0x14a0 [ 911.172428][T21587] __do_softirq+0x1b9/0x715 [ 911.172428][T21587] [ 911.172428][T21587] Uninit was stored to memory at: [ 911.172428][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 911.172428][T21587] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 911.172428][T21587] kmsan_memcpy_metadata+0xb/0x10 [ 911.172428][T21587] __msan_memcpy+0x46/0x60 [ 911.172428][T21587] pskb_expand_head+0x3d6/0x1e20 [ 911.172428][T21587] batadv_skb_head_push+0x2cc/0x410 [ 911.172428][T21587] batadv_send_skb_packet+0x1ed/0x970 [ 911.172428][T21587] batadv_send_broadcast_skb+0x76/0x90 [ 911.172428][T21587] batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0 [ 911.172428][T21587] process_one_work+0x1219/0x1fe0 [ 911.172428][T21587] worker_thread+0x10ec/0x2340 [ 911.172428][T21587] kthread+0x521/0x560 [ 911.172428][T21587] ret_from_fork+0x1f/0x30 [ 911.172428][T21587] [ 911.172428][T21587] Uninit was created at: [ 911.172428][T21587] kmsan_internal_poison_shadow+0x5c/0xf0 [ 911.172428][T21587] kmsan_slab_alloc+0x8e/0xe0 [ 911.172428][T21587] __kmalloc_node_track_caller+0xa4f/0x1470 [ 911.172428][T21587] __alloc_skb+0x4dd/0xe90 [ 911.172428][T21587] __netdev_alloc_skb+0x45d/0x810 [ 911.172428][T21587] batadv_iv_ogm_queue_add+0x1376/0x1c40 [ 911.172428][T21587] batadv_iv_ogm_schedule+0x12cd/0x16b0 [ 911.172428][T21587] batadv_iv_send_outstanding_bat_ogm_packet+0xd6e/0xef0 [ 911.172428][T21587] process_one_work+0x1219/0x1fe0 [ 911.172428][T21587] worker_thread+0x10ec/0x2340 [ 911.172428][T21587] kthread+0x521/0x560 [ 911.172428][T21587] ret_from_fork+0x1f/0x30 [ 911.172428][T21587] [ 911.172428][T21587] Bytes 40-41 of 42 are uninitialized [ 911.172428][T21587] Memory access of size 42 starts at ffff888124e8e602 [ 911.172428][T21587] ===================================================== [ 911.959912][T21587] ===================================================== [ 911.962529][T21587] BUG: KMSAN: uninit-value in kmsan_check_skb+0x15d/0x240 [ 911.970776][T21587] CPU: 0 PID: 21587 Comm: syz-executor.2 Tainted: G B W 5.12.0-rc6-syzkaller #0 [ 911.970776][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.970776][T21587] Call Trace: [ 911.970776][T21587] dump_stack+0x24c/0x2e0 [ 911.970776][T21587] kmsan_report+0xfb/0x1e0 [ 911.970776][T21587] kmsan_internal_check_memory+0x212/0x520 [ 911.970776][T21587] kmsan_check_skb+0x15d/0x240 [ 911.970776][T21587] pfifo_fast_dequeue+0x1031/0x1190 [ 911.970776][T21587] ? pfifo_fast_enqueue+0x9f0/0x9f0 [ 911.970776][T21587] dequeue_skb+0x4ad/0x3680 [ 911.970776][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.970776][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 911.970776][T21587] __qdisc_run+0x101/0x490 [ 911.970776][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 911.970776][T21587] __dev_queue_xmit+0x26ad/0x4600 [ 911.970776][T21587] dev_queue_xmit+0x4b/0x60 [ 911.970776][T21587] ip_finish_output2+0x2438/0x2930 [ 911.970776][T21587] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 911.970776][T21587] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 911.970776][T21587] ? ip_fraglist_prepare+0x87b/0x8f0 [ 911.970776][T21587] ip_do_fragment+0x3673/0x3b40 [ 911.970776][T21587] ? ip_fragment+0x4a0/0x4a0 [ 911.970776][T21587] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 911.970776][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.970776][T21587] ip_fragment+0x31e/0x4a0 [ 911.970776][T21587] __ip_finish_output+0xb80/0x1050 [ 911.970776][T21587] ip_finish_output+0x329/0x480 [ 911.970776][T21587] ip_output+0x32e/0x6d0 [ 911.970776][T21587] ? ip_mc_finish_output+0x770/0x770 [ 911.970776][T21587] ? ip_finish_output+0x480/0x480 [ 911.970776][T21587] ip_send_skb+0x194/0x350 [ 911.970776][T21587] udp_send_skb+0x152d/0x1bc0 [ 911.970776][T21587] udp_sendpage+0x7f2/0xba0 [ 911.970776][T21587] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 911.970776][T21587] ? inet_send_prepare+0x92/0x6b0 [ 911.970776][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.970776][T21587] ? udplite_getfrag+0x140/0x140 [ 911.970776][T21587] inet_sendpage+0x1da/0x2f0 [ 911.970776][T21587] kernel_sendpage+0x47a/0x590 [ 911.970776][T21587] ? inet_sendmsg+0x1d0/0x1d0 [ 911.970776][T21587] sock_sendpage+0x161/0x1a0 [ 911.970776][T21587] pipe_to_sendpage+0x3e4/0x520 [ 911.970776][T21587] ? sock_fasync+0x250/0x250 [ 911.970776][T21587] __splice_from_pipe+0x5e3/0xff0 [ 911.970776][T21587] ? generic_splice_sendpage+0x2c0/0x2c0 [ 911.970776][T21587] generic_splice_sendpage+0x1d5/0x2c0 [ 911.970776][T21587] ? iter_file_splice_write+0x1b20/0x1b20 [ 911.970776][T21587] do_splice+0x23c3/0x2c10 [ 911.970776][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.970776][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.970776][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 911.970776][T21587] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 911.970776][T21587] ? __msan_instrument_asm_store+0x107/0x130 [ 911.970776][T21587] ? __msan_get_context_state+0x9/0x20 [ 911.970776][T21587] ? kmsan_get_metadata+0x116/0x180 [ 911.970776][T21587] __se_sys_splice+0x8fa/0xb50 [ 911.970776][T21587] __x64_sys_splice+0x6e/0x90 [ 911.970776][T21587] do_syscall_64+0x9f/0x140 [ 911.970776][T21587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 911.970776][T21587] RIP: 0033:0x4665d9 [ 911.970776][T21587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 911.970776][T21587] RSP: 002b:00007f8fea4b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 911.970776][T21587] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 911.970776][T21587] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 911.970776][T21587] RBP: 00000000004bfcb9 R08: 0000000080000000 R09: 0000000000000000 [ 911.970776][T21587] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 911.970776][T21587] R13: 0000000000a9fb1f R14: 00007f8fea4b9300 R15: 0000000000022000 [ 911.970776][T21587] [ 911.970776][T21587] Uninit was stored to memory at: [ 911.970776][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 911.970776][T21587] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 911.970776][T21587] kmsan_memcpy_metadata+0xb/0x10 [ 911.970776][T21587] __msan_memcpy+0x46/0x60 [ 911.970776][T21587] skb_copy_bits+0x293/0x1040 [ 911.970776][T21587] tpacket_rcv+0x550a/0x8010 [ 911.970776][T21587] __netif_receive_skb+0x1ec/0x640 [ 911.970776][T21587] process_backlog+0x517/0xbd0 [ 911.970776][T21587] __napi_poll+0x13e/0xca0 [ 911.970776][T21587] net_rx_action+0x726/0x14a0 [ 911.970776][T21587] __do_softirq+0x1b9/0x715 [ 911.970776][T21587] [ 911.970776][T21587] Uninit was stored to memory at: [ 911.970776][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 911.970776][T21587] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 911.970776][T21587] kmsan_memcpy_metadata+0xb/0x10 [ 911.970776][T21587] __msan_memcpy+0x46/0x60 [ 911.970776][T21587] pskb_expand_head+0x3d6/0x1e20 [ 911.970776][T21587] batadv_skb_head_push+0x2cc/0x410 [ 911.970776][T21587] batadv_send_skb_packet+0x1ed/0x970 [ 911.970776][T21587] batadv_send_broadcast_skb+0x76/0x90 [ 911.970776][T21587] batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0 [ 911.970776][T21587] process_one_work+0x1219/0x1fe0 [ 911.970776][T21587] worker_thread+0x10ec/0x2340 [ 911.970776][T21587] kthread+0x521/0x560 [ 911.970776][T21587] ret_from_fork+0x1f/0x30 [ 911.970776][T21587] [ 911.970776][T21587] Uninit was created at: [ 911.970776][T21587] kmsan_internal_poison_shadow+0x5c/0xf0 [ 911.970776][T21587] kmsan_slab_alloc+0x8e/0xe0 [ 911.970776][T21587] __kmalloc_node_track_caller+0xa4f/0x1470 [ 911.970776][T21587] __alloc_skb+0x4dd/0xe90 [ 911.970776][T21587] __netdev_alloc_skb+0x45d/0x810 [ 911.970776][T21587] batadv_iv_ogm_queue_add+0x1376/0x1c40 [ 911.970776][T21587] batadv_iv_ogm_schedule+0x12cd/0x16b0 [ 911.970776][T21587] batadv_iv_send_outstanding_bat_ogm_packet+0xd6e/0xef0 [ 911.970776][T21587] process_one_work+0x1219/0x1fe0 [ 911.970776][T21587] worker_thread+0x10ec/0x2340 [ 911.970776][T21587] kthread+0x521/0x560 [ 911.970776][T21587] ret_from_fork+0x1f/0x30 [ 911.970776][T21587] [ 911.970776][T21587] Bytes 118-119 of 1031 are uninitialized [ 911.970776][T21587] Memory access of size 1031 starts at ffff88811b080000 [ 911.970776][T21587] ===================================================== [ 912.694477][T21587] ===================================================== [ 912.699594][T21587] BUG: KMSAN: uninit-value in kmsan_check_skb+0x15d/0x240 [ 912.708140][T21587] CPU: 0 PID: 21587 Comm: syz-executor.2 Tainted: G B W 5.12.0-rc6-syzkaller #0 [ 912.708140][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.708140][T21587] Call Trace: [ 912.708140][T21587] dump_stack+0x24c/0x2e0 [ 912.708140][T21587] kmsan_report+0xfb/0x1e0 [ 912.708140][T21587] kmsan_internal_check_memory+0x212/0x520 [ 912.708140][T21587] kmsan_check_skb+0x15d/0x240 [ 912.708140][T21587] pfifo_fast_dequeue+0x1031/0x1190 [ 912.708140][T21587] ? pfifo_fast_enqueue+0x9f0/0x9f0 [ 912.708140][T21587] dequeue_skb+0x4ad/0x3680 [ 912.708140][T21587] ? kmsan_get_metadata+0x116/0x180 [ 912.708140][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 912.708140][T21587] __qdisc_run+0x101/0x490 [ 912.708140][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 912.708140][T21587] __dev_queue_xmit+0x26ad/0x4600 [ 912.708140][T21587] dev_queue_xmit+0x4b/0x60 [ 912.708140][T21587] ip_finish_output2+0x2438/0x2930 [ 912.708140][T21587] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 912.708140][T21587] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 912.708140][T21587] ? ip_fraglist_prepare+0x87b/0x8f0 [ 912.708140][T21587] ip_do_fragment+0x3673/0x3b40 [ 912.708140][T21587] ? ip_fragment+0x4a0/0x4a0 [ 912.708140][T21587] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 912.708140][T21587] ? kmsan_get_metadata+0x116/0x180 [ 912.708140][T21587] ip_fragment+0x31e/0x4a0 [ 912.708140][T21587] __ip_finish_output+0xb80/0x1050 [ 912.708140][T21587] ip_finish_output+0x329/0x480 [ 912.708140][T21587] ip_output+0x32e/0x6d0 [ 912.708140][T21587] ? ip_mc_finish_output+0x770/0x770 [ 912.708140][T21587] ? ip_finish_output+0x480/0x480 [ 912.708140][T21587] ip_send_skb+0x194/0x350 [ 912.708140][T21587] udp_send_skb+0x152d/0x1bc0 [ 912.708140][T21587] udp_sendpage+0x7f2/0xba0 [ 912.708140][T21587] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 912.708140][T21587] ? inet_send_prepare+0x92/0x6b0 [ 912.708140][T21587] ? kmsan_get_metadata+0x116/0x180 [ 912.708140][T21587] ? udplite_getfrag+0x140/0x140 [ 912.708140][T21587] inet_sendpage+0x1da/0x2f0 [ 912.708140][T21587] kernel_sendpage+0x47a/0x590 [ 912.708140][T21587] ? inet_sendmsg+0x1d0/0x1d0 [ 912.708140][T21587] sock_sendpage+0x161/0x1a0 [ 912.708140][T21587] pipe_to_sendpage+0x3e4/0x520 [ 912.708140][T21587] ? sock_fasync+0x250/0x250 [ 912.708140][T21587] __splice_from_pipe+0x5e3/0xff0 [ 912.708140][T21587] ? generic_splice_sendpage+0x2c0/0x2c0 [ 912.708140][T21587] generic_splice_sendpage+0x1d5/0x2c0 [ 912.708140][T21587] ? iter_file_splice_write+0x1b20/0x1b20 [ 912.708140][T21587] do_splice+0x23c3/0x2c10 [ 912.708140][T21587] ? kmsan_get_metadata+0x116/0x180 [ 912.708140][T21587] ? kmsan_get_metadata+0x116/0x180 [ 912.708140][T21587] ? kmsan_internal_set_origin+0x85/0xc0 [ 912.708140][T21587] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 912.708140][T21587] ? __msan_instrument_asm_store+0x107/0x130 [ 912.708140][T21587] ? __msan_get_context_state+0x9/0x20 [ 912.708140][T21587] ? kmsan_get_metadata+0x116/0x180 [ 912.708140][T21587] __se_sys_splice+0x8fa/0xb50 [ 912.708140][T21587] __x64_sys_splice+0x6e/0x90 [ 912.708140][T21587] do_syscall_64+0x9f/0x140 [ 912.708140][T21587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 912.708140][T21587] RIP: 0033:0x4665d9 [ 912.708140][T21587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 912.708140][T21587] RSP: 002b:00007f8fea4b9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 912.708140][T21587] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 912.708140][T21587] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 912.708140][T21587] RBP: 00000000004bfcb9 R08: 0000000080000000 R09: 0000000000000000 [ 912.708140][T21587] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 912.708140][T21587] R13: 0000000000a9fb1f R14: 00007f8fea4b9300 R15: 0000000000022000 [ 912.708140][T21587] [ 912.708140][T21587] Uninit was stored to memory at: [ 912.708140][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 912.708140][T21587] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 912.708140][T21587] kmsan_memcpy_metadata+0xb/0x10 [ 912.708140][T21587] __msan_memcpy+0x46/0x60 [ 912.708140][T21587] skb_copy_bits+0x293/0x1040 [ 912.708140][T21587] tpacket_rcv+0x550a/0x8010 [ 912.708140][T21587] __netif_receive_skb+0x1ec/0x640 [ 912.708140][T21587] process_backlog+0x517/0xbd0 [ 912.708140][T21587] __napi_poll+0x13e/0xca0 [ 912.708140][T21587] net_rx_action+0x726/0x14a0 [ 912.708140][T21587] __do_softirq+0x1b9/0x715 [ 912.708140][T21587] [ 912.708140][T21587] Uninit was stored to memory at: [ 912.708140][T21587] kmsan_internal_chain_origin+0xad/0x130 [ 912.708140][T21587] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 912.708140][T21587] kmsan_memcpy_metadata+0xb/0x10 [ 912.708140][T21587] __msan_memcpy+0x46/0x60 [ 912.708140][T21587] pskb_expand_head+0x3d6/0x1e20 [ 912.708140][T21587] batadv_skb_head_push+0x2cc/0x410 [ 912.708140][T21587] batadv_send_skb_packet+0x1ed/0x970 [ 912.708140][T21587] batadv_send_broadcast_skb+0x76/0x90 [ 912.708140][T21587] batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0 [ 912.708140][T21587] process_one_work+0x1219/0x1fe0 [ 912.708140][T21587] worker_thread+0x10ec/0x2340 [ 912.708140][T21587] kthread+0x521/0x560 [ 912.708140][T21587] ret_from_fork+0x1f/0x30 [ 912.708140][T21587] [ 912.708140][T21587] Uninit was created at: [ 912.708140][T21587] kmsan_internal_poison_shadow+0x5c/0xf0 [ 912.708140][T21587] kmsan_slab_alloc+0x8e/0xe0 [ 912.708140][T21587] __kmalloc_node_track_caller+0xa4f/0x1470 [ 912.708140][T21587] __alloc_skb+0x4dd/0xe90 [ 912.708140][T21587] __netdev_alloc_skb+0x45d/0x810 [ 912.708140][T21587] batadv_iv_ogm_queue_add+0x1376/0x1c40 [ 912.708140][T21587] batadv_iv_ogm_schedule+0x12cd/0x16b0 [ 912.708140][T21587] batadv_iv_send_outstanding_bat_ogm_packet+0xd6e/0xef0 [ 912.708140][T21587] process_one_work+0x1219/0x1fe0 [ 912.708140][T21587] worker_thread+0x10ec/0x2340 [ 912.708140][T21587] kthread+0x521/0x560 [ 912.708140][T21587] ret_from_fork+0x1f/0x30 [ 912.708140][T21587] [ 912.708140][T21587] Bytes 126-127 of 1031 are uninitialized [ 912.708140][T21587] Memory access of size 1031 starts at ffff88811b080000 [ 912.708140][T21587] ===================================================== 23:47:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b4993744bf073b5d9d6867e3fa8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d508094174e499e84e3f90f3c9c39e460000000000000000", 0x83}], 0x4, 0xb) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 23:47:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe8d846be6e3098e4ee32fb6e7e1776", 0x12}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x3, 0x4, 0x0, 0x400}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}, 0x62) 23:47:01 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0x86, 0xe4, 0x8, 0x1776, 0x501c, 0x30f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0xe8, 0xf7}}]}}]}}, 0x0) 23:47:01 executing program 2: r0 = eventfd(0x0) writev(r0, &(0x7f0000000380)=[{0x0, 0x47}, {&(0x7f0000000900)}, {&(0x7f0000000100)="7b43c673c45ec49f5b557271bb7be1af74ec214a860bb3e1bb6ffe4a20b13a669f79d0252ab89fcfc77fe869a083dbf2adb0e67a42852a679fd3e45682153a7130972c7bf2b1f9ae85d6dd2188f7e1fd0f9e939dcb303b0b7d132b83462e445770", 0x61}, {&(0x7f0000000080)="d91883af3502cd5d9a638578ff587dd9b4ceb61a2ae5acbfc67aad9be93a53f3e6f2f64a82b213499af7b848ae61199d156135346c14a78bd1286fa67bceda72eedf1786dce7ef2c999278ca8239", 0x4e}, {&(0x7f0000001900)="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", 0x5fd}, {&(0x7f0000002900)="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", 0xff0}, {&(0x7f0000000a00)="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", 0x114}], 0x7) [ 914.577368][T21599] ===================================================== [ 914.585131][T21599] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x9c/0xb0 [ 914.586829][T21599] CPU: 0 PID: 21599 Comm: syz-executor.2 Tainted: G B W 5.12.0-rc6-syzkaller #0 [ 914.603739][T21599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.603739][T21599] Call Trace: [ 914.603739][T21599] dump_stack+0x24c/0x2e0 [ 914.603739][T21599] kmsan_report+0xfb/0x1e0 [ 914.603739][T21599] kmsan_internal_check_memory+0x48c/0x520 [ 914.603739][T21599] kmsan_copy_to_user+0x9c/0xb0 [ 914.603739][T21599] _copy_to_iter+0x72d/0x2bc0 [ 914.603739][T21599] ? __kernel_text_address+0x171/0x2d0 [ 914.603739][T21599] ? unwind_get_return_address+0x80/0x120 [ 914.603739][T21599] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 914.603739][T21599] simple_copy_to_iter+0xf6/0x150 [ 914.603739][T21599] __skb_datagram_iter+0x2cb/0x1210 [ 914.671678][T21599] ? kmsan_internal_poison_shadow+0xac/0xf0 [ 914.671678][T21599] ? kmsan_slab_free+0x76/0xc0 [ 914.671678][T21599] ? skb_copy_datagram_iter+0x200/0x200 [ 914.671678][T21599] ? ____fput+0x37/0x40 [ 914.671678][T21599] ? exit_to_user_mode_prepare+0x486/0x560 [ 914.671678][T21599] skb_copy_datagram_iter+0xd8/0x200 [ 914.671678][T21599] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.671678][T21599] tun_do_read+0x2b3e/0x3630 [ 914.671678][T21599] ? do_task_dead+0xe0/0xe0 [ 914.720880][T21599] tun_chr_read_iter+0x384/0x5d0 [ 914.726968][T21599] ? tun_cleanup+0x60/0x60 [ 914.726968][T21599] vfs_read+0x136b/0x15a0 [ 914.726968][T21599] ksys_read+0x275/0x500 [ 914.726968][T21599] __se_sys_read+0x92/0xb0 [ 914.726968][T21599] __x64_sys_read+0x4a/0x70 [ 914.751424][T21599] do_syscall_64+0x9f/0x140 [ 914.751424][T21599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 914.751424][T21599] RIP: 0033:0x41935c [ 914.751424][T21599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 914.751424][T21599] RSP: 002b:0000000000a9f940 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.796983][T21599] RAX: ffffffffffffffda RBX: 0000000000a9f970 RCX: 000000000041935c [ 914.796983][T21599] RDX: 00000000000003e8 RSI: 0000000000a9f970 RDI: 00000000000000f0 [ 914.796983][T21599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000a9f7e0 [ 914.796983][T21599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.827488][T21599] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000a9fe40 [ 914.827488][T21599] [ 914.827488][T21599] Uninit was stored to memory at: [ 914.847553][ T52] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 914.827488][T21599] kmsan_internal_chain_origin+0xad/0x130 [ 914.827488][T21599] __msan_chain_origin+0x54/0xa0 [ 914.827488][T21599] udp_send_skb+0x1767/0x1bc0 [ 914.827488][T21599] udp_sendpage+0x7f2/0xba0 [ 914.827488][T21599] inet_sendpage+0x1da/0x2f0 [ 914.827488][T21599] kernel_sendpage+0x47a/0x590 [ 914.827488][T21599] sock_sendpage+0x161/0x1a0 [ 914.827488][T21599] pipe_to_sendpage+0x3e4/0x520 [ 914.827488][T21599] __splice_from_pipe+0x5e3/0xff0 [ 914.827488][T21599] generic_splice_sendpage+0x1d5/0x2c0 [ 914.827488][T21599] do_splice+0x23c3/0x2c10 [ 914.827488][T21599] __se_sys_splice+0x8fa/0xb50 [ 914.827488][T21599] __x64_sys_splice+0x6e/0x90 [ 914.827488][T21599] do_syscall_64+0x9f/0x140 [ 914.827488][T21599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 914.827488][T21599] [ 914.827488][T21599] Uninit was stored to memory at: [ 914.827488][T21599] kmsan_internal_chain_origin+0xad/0x130 [ 914.827488][T21599] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 914.827488][T21599] kmsan_memcpy_metadata+0xb/0x10 [ 914.827488][T21599] __msan_memcpy+0x46/0x60 [ 914.827488][T21599] skb_copy_bits+0x293/0x1040 [ 914.827488][T21599] tpacket_rcv+0x550a/0x8010 [ 914.827488][T21599] __netif_receive_skb+0x1ec/0x640 [ 914.827488][T21599] process_backlog+0x517/0xbd0 [ 914.827488][T21599] __napi_poll+0x13e/0xca0 [ 914.827488][T21599] net_rx_action+0x726/0x14a0 [ 914.827488][T21599] __do_softirq+0x1b9/0x715 [ 914.827488][T21599] [ 914.827488][T21599] Uninit was stored to memory at: [ 914.827488][T21599] kmsan_internal_chain_origin+0xad/0x130 [ 914.827488][T21599] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 914.827488][T21599] kmsan_memcpy_metadata+0xb/0x10 [ 914.827488][T21599] __msan_memcpy+0x46/0x60 [ 914.827488][T21599] pskb_expand_head+0x3d6/0x1e20 [ 914.827488][T21599] batadv_skb_head_push+0x2cc/0x410 [ 914.827488][T21599] batadv_send_skb_packet+0x1ed/0x970 [ 914.827488][T21599] batadv_send_broadcast_skb+0x76/0x90 [ 914.827488][T21599] batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0 [ 914.827488][T21599] process_one_work+0x1219/0x1fe0 [ 914.827488][T21599] worker_thread+0x10ec/0x2340 [ 914.827488][T21599] kthread+0x521/0x560 [ 914.827488][T21599] ret_from_fork+0x1f/0x30 [ 914.827488][T21599] [ 914.827488][T21599] Uninit was created at: [ 914.827488][T21599] kmsan_internal_poison_shadow+0x5c/0xf0 [ 914.827488][T21599] kmsan_slab_alloc+0x8e/0xe0 [ 914.827488][T21599] __kmalloc_node_track_caller+0xa4f/0x1470 [ 914.827488][T21599] __alloc_skb+0x4dd/0xe90 [ 914.827488][T21599] __netdev_alloc_skb+0x45d/0x810 [ 915.127585][T21599] batadv_iv_ogm_queue_add+0x1376/0x1c40 [ 915.127585][T21599] batadv_iv_ogm_schedule+0x12cd/0x16b0 [ 915.127585][T21599] batadv_iv_send_outstanding_bat_ogm_packet+0xd6e/0xef0 [ 915.127585][T21599] process_one_work+0x1219/0x1fe0 [ 915.127585][T21599] worker_thread+0x10ec/0x2340 [ 915.127585][T21599] kthread+0x521/0x560 [ 915.127585][T21599] ret_from_fork+0x1f/0x30 [ 915.127585][T21599] [ 915.127585][T21599] Bytes 40-41 of 42 are uninitialized [ 915.127585][T21599] Memory access of size 42 starts at ffff888124e8e602 [ 915.127585][T21599] Data copied to user address 0000000000a9f970 [ 915.187705][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 915.127585][T21599] ===================================================== [ 915.369016][ T52] usb 6-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=30.f2 [ 915.378732][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.491681][ T52] usb 6-1: config 0 descriptor?? [ 915.592117][ T52] gspca_main: spca501-2.14.0 probing 1776:501c [ 915.758394][ T52] gspca_spca501: reg write: error -71 [ 915.764850][ T52] spca501 6-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 915.773573][ T52] spca501: probe of 6-1:0.0 failed with error -22 23:47:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000001c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6}, 0xd8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200187ac, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfea7) [ 915.953169][ T52] usb 6-1: USB disconnect, device number 33 23:47:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x66, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) 23:47:03 executing program 3: r0 = syz_open_dev$I2C(&(0x7f000000a3c0), 0x0, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0x80000001) 23:47:03 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0x86, 0xe4, 0x8, 0x1776, 0x501c, 0x30f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0xe8, 0xf7}}]}}]}}, 0x0) [ 917.317393][ T52] usb 6-1: new high-speed USB device number 34 using dummy_hcd 23:47:04 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc050560f, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4de07e7f"}, 0x400000, 0x0, @userptr=0x8}) [ 917.557193][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 917.678351][ T52] usb 6-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=30.f2 [ 917.690979][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.854699][ T52] usb 6-1: config 0 descriptor?? 23:47:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b4993744bf073b5d9d6867e3fa8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d508094174e499e84e3f90f3c9c39e460000000000000000", 0x83}], 0x4, 0xb) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 917.942999][ T52] gspca_main: spca501-2.14.0 probing 1776:501c 23:47:05 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fanotify_mark(r0, 0x41, 0x1, 0xffffffffffffff9c, 0x0) 23:47:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121282, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/215) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd01009341", 0x6}], 0x1000000000000006, 0x0, 0x0) [ 918.127740][ T52] gspca_spca501: reg write: error -71 [ 918.134070][ T52] spca501 6-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 918.142853][ T52] spca501: probe of 6-1:0.0 failed with error -22 [ 918.358280][ T52] usb 6-1: USB disconnect, device number 34 23:47:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) 23:47:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}]]}, 0x30}}, 0x0) 23:47:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0xd0, 0x1f8, 0x1f8, 0x1f8, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@dev, @loopback, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @common=@ipv6header={{0x28}}]}, @REJECT={0x28}}, {{@ipv6={@remote, @empty, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "1883"}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) [ 919.890237][T21679] ip6t_REJECT: ECHOREPLY is not supported 23:47:07 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000100)) 23:47:07 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) write$binfmt_elf32(r1, 0x0, 0x3) close(r1) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 23:47:07 executing program 5: creat(&(0x7f0000000240)='./file0\x00', 0x0) mq_open(0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) clock_gettime(0x0, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 23:47:07 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1b9cca", 0x10, 0x3a, 0x0, @local, @private0, {[], @ni={0x8b}}}}}}, 0x0) 23:47:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) fanotify_mark(r0, 0x41, 0x1, 0xffffffffffffff9c, 0x0)